# changelog

author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-269.0.0.172
changelog:
  - !16578  ext4: ignore xattrs past end
  - !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
  - !16749  arm64: xcall: Fix GPR touch as the original step
  - !16774  bpf: Fix prog_array_map_poke_run map poke update
  - !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bpf: Fix prog_array_map_poke_run map poke update
  - !16768  RDMA/hns: Get messgae length of ack_req from FW
  - RDMA/hns: Get messgae length of ack_req from FW
  - !16750 v2  add-exec-ebpf-v3
  - !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16706  OLK-5.10 Bperf
  - !16735 [OLK-5.10]:update patches for sw64 architecture
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - sched/ebpf: Add helper to set prefer cpumask for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - arm64: xcall: Fix GPR touch as the original step
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: ioremap: fix IO interfaces
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: remove temporary registers left in context saving
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - Fix type mismatch between struct perf_cpu and integer operations
  - perf test shell stat_bpf_counters: Fix test on Intel
  - perf stat: Fix error check for bpf_program__attach
  - perf stat: Fix error return code in bperf__load()
  - perf build: Properly guard libbpf includes
  - perf stat: Separate bperf from bpf_profiler
  - perf docs: Document bpf event modifier
  - perf stat: Fix handling of unsupported cgroup events when using BPF counters
  - bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf test: Add a shell test for 'perf stat --bpf-counters' new option
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf stat: Support inherit events during fork() for bperf
  - perf stat: Fix BPF program section name
  - perf bpf_skel: Do not use typedef to avoid error on old clang
  - perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
  - perf stat: Enable BPF counter with --for-each-cgroup
  - perf bpf_counter: Move common functions to bpf_counter.h
  - perf tools: Add cgroup_is_v2() helper
  - perf tools: Add read_cgroup_id() function
  - perf stat: Introduce bpf_counter_ops->disable()
  - perf stat: Introduce ':b' modifier
  - perf stat: Introduce config stat.bpf-counter-events
  - perf bpf: check perf_attr_map is compatible with the perf binary
  - perf util: Move bpf_perf definitions to a libperf header
  - perf stat: Measure 't0' and 'ref_time' after enable_counters()
  - perf stat: Introduce 'bperf' to share hardware PMCs with BPF
  - perf stat: Enable counting events for BPF programs
  - perf build: Support build BPF skeletons with perf
  - bpftool: Add Makefile target bootstrap
  - perf tools: Add 'cgroup-switches' software event
  - perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
  - perf core: Factor out __perf_sw_event_sched
  - bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
  - ext4: ignore xattrs past end
  - locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bcache: allow allocator to invalidate bucket in gc
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-270.0.0.173
changelog:
  - !16892 v5  HiSock Redirect Framework
  - !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_ext_memcpy extension helper for arm64
  - arm64: insn: Add some opcodes to instruction decoder
  - bpf: Add bpf_change_skb_dev helper
  - bpf: Add bpf_set_ingress_dst helper
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_get_ingress_dst helper
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
  - !16860  arm64: kaslr: fix nokaslr cmdline parsing
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16816  CVE-2024-26798
  - !15234 Add support edac for hygon family 18h model 10h
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16849 v4  Introduce soft domain v4
  - sched: Fix might sleep in atomic section issue
  - sched: Balance newly task to soft domain
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - !16847  net/oenetcls: Support cluster sched
  - !16840  A small fix for ftrace preemption count
  - !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - net/oenetcls: Support cluster sched
  - !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - ftrace: Fix preemption accounting for stacktrace filter command
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !15238 Add LS and IF mce types for Hygon family 18h model 7h
  - !15239 Add IOAPIC support for Hygon family 18h model 10h
  - !16819  nfsd: don't ignore the return code of svc_proc_register()
  - nfsd: don't ignore the return code of svc_proc_register()
  - fbcon: always restore the old font data in fbcon_do_set_font()
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed
  - fbdev: fbcon: Properly revert changes when vc_resize() failed
  - !16786  Fix CVE-2022-50230
  - !16801 v4  add soft quota
  - sched: Fix kabi broken in struct task_group and struct cfs_rq
  - sched: More flexible use of CPU quota when CPU is idle
  - !16794  eventpoll: Fix soft lockup in xcall_read()
  - crypto: hct: update hct driver to support both guest and host.
  - crypto: hct: provides hygon crypto technology ccp device driver.
  - crypto: ccp: support sm2 on Hygon generation 4th CPU
  - crypto: ccp: remove repeated sm4-hs mode
  - crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
  - crypto: ccp: Process multiple VQ commands once for SM3 ccp.
  - crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
  - crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
  - crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
  - crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
  - crypto: ccp: Only handle interrupts by completion.
  - crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
  - crypto: ccp: Support SM4 algorithm for hygon ccp.
  - crypto: ccp: Support SM3 algorithm for hygon ccp.
  - crypto: ccp: Support SM2 algorithm for hygon ccp.
  - eventpoll: Fix soft lockup in xcall_read()
  - arm64: set UXN on swapper page tables
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-271.0.0.174
changelog:
  - !17015 [OLK-5.10]:update patches for sw64 architecture
  - !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
  - !12159 Add the spidev.ko to OLK-5.10
  - !16992  selinux: ignore unknown extended permissions
  - !15235 correct address translation for Hygon family 18h model 4h~10h
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support for CORE4
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - !16776  cachefiles: Fix the potential ABBA deadlock issue
  - selinux: ignore unknown extended permissions
  - !16970  Fix CVE-2025-38170
  - !16966  net: openvswitch: Fix the dead loop of MPLS parse
  - !16965  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - net: openvswitch: Fix the dead loop of MPLS parse
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - dma-buf: insert memory barrier before updating num_fences
  - !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
  - !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
  - !16935 [OLK-5.10] Add gpio-hisi softdepend
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - xhci: add helpers for enabling and disabling interrupters
  - iommu: Add support for ACPI device direct mapping
  - !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - !16916  Backport mainline patches
  - !16914  net: fix slab-use-after-free read in decode_session6
  - sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - Add gpio-hisi softdepend
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
  - !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16901  uprobes: check anon before compound when unregister
  - net: virtio: Fix kabi broken
  - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  - net: add more sanity check in virtio_net_hdr_to_skb()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - net: fix slab-use-after-free read in decode_session6
  - !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
  - !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
  - mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - uprobes: check anon before compound when unregister
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16752  nfs: handle failure of nfs_get_lock_context in unlock path
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - cachefiles: Fix the potential ABBA deadlock issue
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Get instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
  - Open the CONFIG for spidev.ko


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-272.0.0.175
changelog:
  - !17048  RDMA/hns: Stability and Security Fixes and Improvements
  - !16839 Add gpio-hisi softdepend
  - !16852 net: hns3: fix a use of uninitialized variable problem
  - !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !16855 ptp: hisi: the print of element in ptp need protected by lock
  - !16881 net: hns3: fix kernel crash when uninstalling driver
  - RDMA/hns: Fix double destruction of rsv_qp
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Fix descriptions of stars api
  - RDMA/hns: Fix poe memory leak in error flow
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - net: hns3: fix kernel crash when uninstalling driver
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - net: hns3: fix a use of uninitialized variable problem
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: disable interrupt when ptp init failed
  - Add gpio-hisi softdepend


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-273.0.0.176
changelog:
  - !17045  arm64: Fix a typo in xcall_init_task()
  - !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17099  arm64: exec: add mcs support for prepare_binprm
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17104  hugetlb: drain pcp for movable zone before alloc
  - !16949  media: uvcvideo: Remove dangling pointers
  - hugetlb: drain pcp for movable zone before alloc
  - arm64: exec: add mcs support for prepare_binprm
  - iov_iter: add copy_mc_page_to_kvec_iter
  - !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
  - !16429 CVE-2025-21855
  - !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - !17058  media: cxusb: no longer judge rbuf when the write fails
  - !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - media: cxusb: no longer judge rbuf when the write fails
  - ibmvnic: Don't reference skb after sending to VIOS
  - !17002  net_sched: red: fix a race in __red_change()
  - EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - arm64: Fix a typo in xcall_init_task()
  - net_sched: red: fix a race in __red_change()
  - media: uvcvideo: Remove dangling pointers
  - KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-274.0.0.177
changelog:
  - !17195  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
  - !17077  smb: client: fix use-after-free in cifs_oplock_break
  - !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
  - ima: prevent concurrent list operations in ima_lsm_update_rules
  - net: hns3: Change the function return type from int to bool
  - !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - !17233  hugeltb: Fix null ptr exception during drain movable pcp
  - soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fix an interrupt residual problem
  - hugeltb: Fix null ptr exception during drain movable pcp
  - net: hns3: store rx VLAN tag offload state for VF
  - !17204 v2  CVE-2022-49961
  - !16809  vhost-scsi: protect vq->log_used with vq->mutex
  - !16885  fs: Backport two namespace fix patches
  - !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - selftests/bpf: Add regression test for pruning fix
  - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
  - !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
  - !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - arm64/mpam: Only inform the CPUs running tasks of the group
  - arm64/mpam: Fix the potential deadlock when updating the rmid
  - arm64/mpam: Fix task CLOSID/RMID update race
  - arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
  - arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - !17123  crypto: algif_hash - fix double free in hash_accept
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17125  EDAC/skx_common: Fix general protection fault
  - !17131  modify xcall xint proc file permissions
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - EDAC/skx_common: Fix general protection fault
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - vhost-scsi: protect vq->log_used with vq->mutex


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-275.0.0.178
changelog:
  - !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - !17252 ROH:fix security issues and eliminate redundancies
  - !17241 gpiolib: Get rid of ARCH_NR_GPIOS
  - !17010  perf: Fix sample vs do_exit()
  - !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - ROH:fix security issues and eliminate redundancies
  - !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17300  jfs: add check read-only before txBeginAnon() call
  - !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17288 RDMA/hns: Support querying DIP SCC context
  - jfs: add check read-only before txBeginAnon() call
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - RDMA/hns: Support querying DIP SCC context
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - !17279 RDMA/hns: Remove MW support
  - RDMA/hns: Remove MW support
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Fix HW resources are not cleared in error flow
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for flush CQE
  - !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - perf: Fix sample vs do_exit()
  - nvmet-tcp: don't restore null sk_state_change
  - x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
  - iommu/amd: Keep track of amd_iommu_irq_remap state
  - iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
  - iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
  - x86/ioapic: Correct the PCI/ISA trigger type selection
  - x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
  - x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
  - iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
  - x86/apic: Support 15 bits of APIC ID in MSI where available
  - x86/ioapic: Handle Extended Destination ID field in RTE
  - iommu/vt-d: Simplify intel_irq_remapping_select()
  - x86: Kill all traces of irq_remapping_get_irq_domain()
  - x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
  - x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
  - iommu/hyper-v: Implement select() method on remapping irqdomain
  - iommu/vt-d: Implement select() method on remapping irqdomain
  - iommu/amd: Implement select() method on remapping irqdomain
  - x86/apic: Add select() method on vector irqdomain
  - genirq/irqdomain: Implement get_name() method on irqchip fwnodes
  - x86/ioapic: Generate RTE directly from parent irqchip's MSI message
  - x86/ioapic: Cleanup IO/APIC route entry structs
  - x86/io_apic: Cleanup trigger/polarity helpers
  - x86/msi: Remove msidef.h
  - x86/pci/xen: Use msi_msg shadow structs
  - x86/kvm: Use msi_msg shadow structs
  - PCI: vmd: Use msi_msg shadow structs
  - x86/hpet: Move MSI support into hpet.c
  - x86/devicetree: Fix the ioapic interrupt type table
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-276.0.0.179
changelog:
  - !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17315  ovl: fix general protection fault in security_inode_getattr
  - !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17424  bcache: fix NULL pointer in cache_set_flush()
  - !17433  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17417  drm/dp_mst: Fix MST sideband message body length check
  - !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - !17407  usb: net: sierra: check for no status endpoint
  - !17429  drm/v3d: Disable interrupts before resetting the GPU
  - !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17394  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - bcache: fix NULL pointer in cache_set_flush()
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - drm/dp_mst: Fix MST sideband message body length check
  - usb: net: sierra: check for no status endpoint
  - !17389  CVE-2025-21702
  - !17388  ipvlan: ensure network headers are in skb linear part
  - !17383  net/sched: act_ct: fix ref leak when switching zones
  - !17382  net: annotate races around sk->sk_bound_dev_if
  - !17381  net: sched: Disallow replacing of child qdisc from one parent to another
  - !17377  net: sched: fix ets qdisc OOB Indexing
  - !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - selftests/tracing: Fix false failure of subsystem event test
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - ipvlan: ensure network headers are in skb linear part
  - net/sched: act_ct: fix ref leak when switching zones
  - net: annotate races around sk->sk_bound_dev_if
  - !17359 [OLK 5.10] AMD HSMP driver support patches backport
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - !17374  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17365  atm: clip: Fix infinite recursive call of clip_push().
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - net: sched: fix ets qdisc OOB Indexing
  - !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17373  drm/amd/display: Add null pointer check for get_first_active_display()
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - atm: clip: Fix infinite recursive call of clip_push().
  - !17350  scsi: lpfc: Use memcpy() for BIOS version
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
  - platform/x86/amd/hsmp: switch to use device_add_groups()
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
  - platform/x86/amd/hsmp: Add support for ACPI based probing
  - platform/x86/amd/hsmp: Restructure sysfs group creation
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs
  - platform/x86/amd/hsmp: Create static func to handle platdev
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
  - platform/x86/amd/hsmp: Move hsmp_test to probe
  - platform/x86/amd/hsmp: Fix iomem handling
  - platform/x86/amd/hsmp: improve the error log
  - platform/x86/amd/hsmp: add support for metrics tbl
  - platform/x86/amd/hsmp: create plat specific struct
  - platform/x86: Move AMD platform drivers to separate directory
  - !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
  - KVM: x86: work around QEMU issue with synthetic CPUID leaves
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature
  - x86/cpu, kvm: Add the Null Selector Clears Base feature
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
  - x86/mm: Refactor cond_ibpb() to support other use cases
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful
  - KVM: x86: skip host CPUID call for hypervisor leaves
  - KVM: x86: add support for CPUID leaf 0x80000021
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
  - x86/asm: Have the __ASM_FORM macros handle commas in arguments
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - scsi: lpfc: Use memcpy() for BIOS version
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - ovl: fix general protection fault in security_inode_getattr
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-277.0.0.180
changelog:
  - !17505  CVE-2024-58237
  - !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17503  sctp: detect and prevent references to a freed transport in sendmsg
  - !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
  - !17506 ROH: fix variable type inconsistency issue
  - !17437 [OLK-5.10]:update patches for sw64 architecture
  - ROH: fix variable type inconsistency issue
  - bpf: consider that tail calls invalidate packet pointers
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - sctp: detect and prevent references to a freed transport in sendmsg
  - !17486  net: atm: fix use after free in lec_send()
  - !17485  vlan: enforce underlying device type
  - !17484  net: gso: fix ownership in __udp_gso_segment
  - net: atm: fix use after free in lec_send()
  - vlan: enforce underlying device type
  - net: gso: fix ownership in __udp_gso_segment
  - !17466  arm-smmu-v3: adjust ecmdq log level
  - drivers:misc:sdma-dae: fix incorrect debugfs print
  - arm-smmu-v3: adjust ecmdq log level
  - !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-278.0.0.181
changelog:
  - !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
  - comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17566  hugelb: do not sleep during spinlock hugetlb_lock
  - hugelb: do not sleep during spinlock hugetlb_lock
  - !17480  HID: core: fix __hid_request when no report ID is used
  - !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17543  net: sch: Fix CVE-2025-37798
  - !17539  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17532  sched: Fix sched tunable parameter range overflow
  - !15064  arm64: mm: Update PBHA related variable name
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_ets: make est_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - sched: Fix sched tunable parameter range overflow
  - !17494 v2  kernfs performance optimization
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17525  fix CVE-2022-49623
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17522  CVE-2025-38180
  - powerpc/xive/spapr: correct bitmap allocation size
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()'
  - net: atm: fix /proc/net/atm/lec handling
  - net: atm: add lec_mutex
  - kernfs: don't create a negative dentry if inactive node exists
  - kernfs: also call kernfs_set_rev() for positive dentry
  - kernfs: dont call d_splice_alias() under kernfs node lock
  - kernfs: use i_lock to protect concurrent inode updates
  - kernfs: switch kernfs to use an rwsem
  - kernfs: use VFS negative dentry caching
  - kernfs: add a revision to identify directory node changes
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID
  - arm64: mm: Update PBHA related variable name


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-279.0.0.182
changelog:
  - !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
  - !17675  ftrace: Also allocate and copy hash for reading of filter files
  - !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !15618  partitions: mac: fix handling of bogus partition table
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17727  CVE-2025-38465
  - !17454  md/raid1: Fix stack memory use after return in raid1_reshape
  - !17452  blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17631  perf/core: Exit early on perf_mmap() fail
  - ftrace: Also allocate and copy hash for reading of filter files
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17603  two bugfix for arm64 support HVO
  - !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
  - selftests/bpf: Add remaining ASSERT_xxx() variants
  - !17614  xfrm: state: fix out-of-bounds read during lookup
  - !17626  Fix CVE-2025-37780
  - !17627  Fix CVE-2024-58069
  - !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17621  CVE-2025-38052
  - !17619  tipc: Fix use-after-free in tipc_conn_close().
  - !17620  net: clear the dst when changing skb protocol
  - !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17617  net: fix udp gso skb_segment after pull from frag_list
  - !17616  atm: Fix NULL pointer dereference
  - !17615  udp: Fix memory accounting leak.
  - !17613  macsec: fix UAF bug for real_dev
  - !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
  - perf/core: Exit early on perf_mmap() fail
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - isofs: Prevent the use of too small fid
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - net: clear the dst when changing skb protocol
  - tipc: Fix use-after-free in tipc_conn_close().
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - net: fix udp gso skb_segment after pull from frag_list
  - atm: Fix NULL pointer dereference
  - udp: Fix memory accounting leak.
  - xfrm: state: fix out-of-bounds read during lookup
  - macsec: fix UAF bug for real_dev
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - !17376 net_sched: Flush gso_skb list too during ->change()
  - !17576  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - !17581  tracing: Add down_write(trace_event_sem) when adding trace event
  - !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - !17579 v2  two cve fix
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - vfio/platform: check the bounds of read/write syscalls
  - powerpc/mm/fault: Fix kfence page fault reporting
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - net_sched: Flush gso_skb list too during ->change()
  - partitions: mac: fix handling of bogus partition table


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-280.0.0.183
changelog:
  - !17849 [OLK-5.10]:update patches for sw64 architecture
  - !17852  cpufreq: Init policy->rwsem before it may be possibly used
  - sw64: fix for userspace asking for syscall(-1)
  - sw64: update junzhang default config file
  - sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
  - sw64: add cross-page check in software unaligned write handling
  - sw64: ptrace: fail system calls on invalid address access in PEEKUSR
  - sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
  - !17738  CVE-2024-53216 && CVE-2024-56558
  - cpufreq: Init policy->rwsem before it may be possibly used
  - !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
  - !17817  vmci: Prevent the dispatching of uninitialized payloads
  - !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
  - !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
  - !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
  - !17662 platform/x86: ISST: Add Clearwater Forest to support list
  - !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
  - !17805  f2fs: fix to avoid out-of-boundary access in devs.path
  - vmci: Prevent the dispatching of uninitialized payloads
  - pinmux: fix race causing mux_owner NULL with active mux_usecount
  - f2fs: fix to avoid out-of-boundary access in devs.path
  - !17795  perf/core: Prevent VMA split of buffer mappings
  - !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
  - !17791  ipv6: mcast: extend RCU protection in igmp6_send()
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  - page_pool: fix inconsistency for page_pool_ring_[un]lock()
  - net: page_pool: use in_softirq() instead
  - iwlwifi: Add missing check for alloc_ordered_workqueue
  - !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
  - perf/core: Prevent VMA split of buffer mappings
  - !17773  thunderbolt: Do not double dequeue a configuration request
  - !17793 v2  fix some CVEs
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  - rapidio: fix an API misues when rio_add_net() fails
  - filemap: avoid truncating 64-bit offset to 32 bits
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
  - drm/amd/display: Fix memory leak
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - !17759  CVE-2025-37834
  - !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - !17688  netfilter: fix CVE-2022-49622
  - !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
  - !17740  Fix trace may OOB when trace_get_user failed
  - !17743  i2c: qup: jump out of the loop in case of timeout
  - thunderbolt: Do not double dequeue a configuration request
  - RDMA/hns: Fix bond not cleared when the configuration becomes invalid
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
  - mm/vmscan: don't try to reclaim hwpoison folio
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  - i2c: qup: jump out of the loop in case of timeout
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - nfsd: fix UAF when access ex_uuid or ex_stats
  - SUNRPC: no need get cache ref when protected by rcu
  - nfsd: no need get cache ref when protected by rcu
  - SUNRPC: introduce cache_check_rcu to help check in rcu context
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
  - nfsd: release svc_expkey/svc_export with rcu_work
  - SUNRPC: make sure cache entry active before cache_show
  - nfsd: make sure exp active before svc_export_show
  - platform/x86: ISST: Add Clearwater Forest to support list
  - powercap: intel_rapl_tpmi: Enable PMU support
  - powercap: intel_rapl: Introduce APIs for PMU support
  - powercap: intel_rapl: Sort header files
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
  - cpufreq: intel_pstate: Allow model specific EPPs
  - bitfield: add FIELD_PREP_CONST()
  - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
  - cpufreq: intel_pstate: Update EPP for AlderLake mobile
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode
  - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  - selftests: netfilter: add test case for nf trace infrastructure
  - netfilter: nf_tables: fix crash when nf_trace is enabled
  - netfilter: nf_tables: avoid skb access on nf_stolen
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  - ROH: Add crc_err_cnt and retry_cnt mib statistics
  - nvme-tcp: fix premature queue removal and I/O failover


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-281.0.0.184
changelog:
  - !17933  CVE-2025-38502
  - bpf: Fix updating attached freplace prog in prog_array map
  - bpf: Resolve fext program type when checking map compatibility
  - Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
  - bpf: Fix oob access in cgroup local storage
  - bpf: Move cgroup iterator helpers to bpf.h
  - bpf: Move bpf map owner out of common struct
  - bpf: Add cookie object to bpf maps
  - bpf: generalise tail call map compatibility check
  - !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - !17912  net/mlx5: Check device memory pointer before usage
  - net/mlx5: Check device memory pointer before usage
  - !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
  - perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - !17867  scsi: core: ufs: Fix a hang in the error handler
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
  - !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
  - scsi: core: ufs: Fix a hang in the error handler
  - dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
  - dma: pswiotlb: Move platform-identification to cpu errata
  - dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
  - dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
  - dma: phyitum: enable CONFIG_PSWIOTLB
  - dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-282.0.0.185
changelog:
  - !17999  gfs2: Validate i_depth for exhash directories
  - !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  - gfs2: Validate i_depth for exhash directories
  - !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()


author: Li Nan <linan122@huawei.com> - 5.10.0-283.0.0.186
changelog:
  - !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18025  trace/fgraph: Fix error handling
  - !18100  Fix CVE-2022-50255
  - !18102  bpf: Fix memleak due to fentry attach failure
  - bpf: Fix memleak due to fentry attach failure
  - tracing: Have the user copy of synthetic event address use correct context
  - tracing: Fix reading strings from synthetic events
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header
  - net: bridge: fix soft lockup in br_multicast_query_expired()
  - trace/fgraph: Fix error handling


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-284.0.0.187
changelog:
  - !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
  - !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
  - !17990 perf: backport community patches
  - !18229  net: ch9200: fix uninitialised access during mii_nway_restart
  - RDMA/hns: Fix wrong WQE data when QP wraps around
  - net: dsa: Avoid cross-chip syncing of VLAN filtering
  - !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - net: ch9200: fix uninitialised access during mii_nway_restart
  - perf: Always feature test reallocarray
  - perf comm str: Avoid sort during insert
  - perf comm: Fix comm_str__put() for reference count checking
  - perf comm: Add reference count checking to 'struct comm_str'
  - libperf rc_check: Make implicit enabling work for GCC
  - libperf rc_check: Enable implicitly with sanitizers
  - libperf: Add reference count checking macros
  - !18122  nfsd: call op_release, even when op_func returns an error
  - !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
  - !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
  - !17876 fs/ntfs3: cancle set bad inode after removing name fails
  - !17927 spufs: fix a leak on spufs_new_file() failure
  - !17929 bus: fsl-mc: fix double-free on mc_dev
  - !18138  VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
  - !18155  ARM: rockchip: fix kernel hang during smp initialization
  - x86/MCE: Always save CS register on AMD Zen IF Poison errors
  - ARM: rockchip: fix kernel hang during smp initialization
  - !18112  tee: fix NULL pointer dereference in tee_shm_put
  - !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
  - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
  - scsi: target: iscsi: Fix a race condition between login_work and the login thread
  - nfsd: call op_release, even when op_func returns an error
  - tee: fix NULL pointer dereference in tee_shm_put
  - nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - bus: fsl-mc: fix double-free on mc_dev
  - spufs: fix a leak on spufs_new_file() failure
  - fs/ntfs3: cancle set bad inode after removing name fails
  - net: ravb: Fix missing rtnl lock in suspend/resume path


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-285.0.0.188
changelog:
  - !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
  - !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
  - !18043 [OLK-5.10] Add SEV-ES hypervisor support
  - x86/paravirt: Fix build due to __text_gen_insn() backport
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18052  fix oenetcls bugs
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - KVM: SVM: Add Hygon CSV2 detection for confidential computing support
  - KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
  - KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
  - KVM: SVM: Add support for booting APs in an SEV-ES guest
  - KVM: SVM: fix 32-bit compilation
  - KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
  - KVM: SVM: Provide support to launch and run an SEV-ES guest
  - KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
  - KVM: SVM: Provide support for SEV-ES vCPU loading
  - KVM: SVM: Provide support for SEV-ES vCPU creation/loading
  - KVM: SVM: Update ASID allocation to support SEV-ES guests
  - KVM: SVM: Set the encryption mask for the SVM host save area
  - KVM: SVM: Add NMI support for an SEV-ES guest
  - KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
  - KVM: SVM: Do not report support for SMM for an SEV-ES guest
  - KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
  - KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
  - KVM: SVM: Add support for EFER write traps for an SEV-ES guest
  - KVM: SVM: Support string IO operations for an SEV-ES guest
  - KVM: SVM: Support MMIO for an SEV-ES guest
  - KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
  - KVM: SVM: Create trace events for VMGEXIT processing
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
  - KVM: SVM: Add initial support for a VMGEXIT VMEXIT
  - KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
  - KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
  - KVM: SVM: Do not allow instruction emulation under SEV-ES
  - KVM: SVM: Prevent debugging under SEV-ES
  - KVM: SVM: Add required changes to support intercepts under SEV-ES
  - KVM: x86: introduce complete_emulated_msr callback
  - KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
  - KVM: x86: remove bogus #GP injection
  - KVM: x86: Mark GPRs dirty when written
  - KVM: SVM: Add support for the SEV-ES VMSA
  - KVM: SVM: Add GHCB accessor functions for retrieving fields
  - KVM: SVM: Add support for SEV-ES capability in KVM
  - NFSD: Protect against send buffer overflow in NFSv2 READ
  - net/oenetcls: use workqueue for ntuple cfg
  - net/oenetcls: remove oenetcls trace hook
  - net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
  - net/oenetcls: Fix oecls_numa_info_table memleak


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-286.0.0.189
changelog:
  - !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
  - !18150  CVE-2022-50306
  - !18314  fs: quota: create dedicated workqueue for quota_release_work
  - !17400  fscrypt: Don't use problematic non-inline crypto engines
  - scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
  - !15216  Fix kfree mismatch reported by cocci
  - !18424  net/hinic3: Modify driver version
  - net/hinic3: Modify driver version
  - !18202  blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
  - !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - !18197 v2  loop: Avoid updating block size under exclusive owner
  - !18007  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - !17991  CVE-2025-39697
  - !18361  umount performance fix
  - !18353  net/oenetcls: Fix memleak when clean flow table
  - do_make_slave(): choose new master sanely
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
  - change_mnt_propagation() cleanups, step 1
  - net/oenetcls: Fix memleak when clean flow table
  - fs: quota: create dedicated workqueue for quota_release_work
  - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - loop: Avoid updating block size under exclusive owner
  - ext4: use ext4_fc_tl_mem in fast-commit replay path
  - ext4: fix potential out of bound read in ext4_fc_replay_scan()
  - ext4: factor out ext4_fc_get_tl()
  - ext4: introduce EXT4_FC_TAG_BASE_LEN helper
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - fscrypt: Don't use problematic non-inline crypto engines
  - Fix kfree mismatch reported by cocci


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-287.0.0.190
changelog:
  - !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
  - !18537  posix-timers: Ensure timer ID search-loop limit is valid
  - hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
  - !18549  i40e: fix idx validation in config queues msg
  - i40e: fix idx validation in config queues msg
  - !18534 [OLK-5.10]:update patches for sw64 architecture
  - !18530 drivers:misc:sdma-dae: optimize kernel code
  - posix-timers: Ensure timer ID search-loop limit is valid
  - drivers:misc:sdma-dae: optimize kernel code
  - sw64: fix the condition for enabling hw_una_enabled
  - sw64: add trap related macros
  - sw64: add missing memory clobbers
  - sw64: optimize ipi handling
  - sw64: Add inline find_next_set/and/clear_bit()
  - sw64: optimize asid clearation
  - sw64: update cflags for new compiler
  - sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
  - sw64: efi: fix compile error when CONFIG_EFI=n
  - sw64: powercap: fix misuse of an uninitialized temporary variable
  - sw64: powercap: increase the interval of polling mode
  - sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
  - sw64: powercap: avoid checking meaningless target freq
  - sw64: irqchip: update effective affinity for INTx
  - sw64: msi: fix affinity change of managed irq
  - sw64: use orig_r0 as syscall nr
  - sw64: revert ioremap() to __va() in ioport_map()
  - sw64: fix unresolved reference error when close pci
  - sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
  - !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
  - !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
  - iio: adc: at91: call input_free_device() on allocated iio_dev
  - !18490 v2  Add some bugfix for l0.
  - hisi: l0: fix security risks for l0
  - hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
  - hisi: l3t: fix l3t unlock order
  - hisi: l3t: fix conflict between HISI050 and HISI021
  - !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - !18470  e1000e: fix heap overflow in e1000_set_eeprom
  - RDMA/hns: Fix more wrong WQE data cases when QP wraps around
  - e1000e: fix heap overflow in e1000_set_eeprom
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-288.0.0.191
changelog:
  - !18738  fs: udf: fix OOB read in lengthAllocDescs handling
  - !2934 e1000e: Add support for the next LOM generation
  - !18783  padata: Reset next CPU when reorder sequence wraps around
  - !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
  - !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
  - padata: Reset next CPU when reorder sequence wraps around
  - !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - !14672 IXIC:add phytium ixic d2000 driver
  - !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - !18728  *** CVE-2025-39973 ***
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  - fs: udf: fix OOB read in lengthAllocDescs handling
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - i40e: add validation for ring_len param
  - i40e: increase max descriptors for XL710
  - !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - !18687 v2  net/oenetcls: Balancing softirq to improve performance
  - !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
  - !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
  - net/oenetcls: Balancing softirq to improve performance
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
  - !18628  tracing: dynevent: Add a missing lockdown check on dynevent
  - perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
  - !18617  Fix CVE-2025-39993
  - tracing: dynevent: Add a missing lockdown check on dynevent
  - media: rc: fix races with imon_disconnect()
  - media: imon: grab lock earlier in imon_ir_change_protocol()
  - media: imon: Fix race getting ictx->lock
  - openeuler_defconfig: clean up invalid kernel configurations
  - sched/fair: remove qos_reweight logic under non-SMP scenario
  - Rate-limit the logging of dirty-page and SPECTRE_V2 messages
  - IXIC:add phytium ixic d2000 driver
  - IXIC:add phytium ixic d2000 DT binding docs
  - e1000e: Add support for the next LOM generation


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-289.0.0.192
changelog:
  - !18365 [OLK-5.10]Support request attestation report from CSV guest
  - !14859 net :stmmac add support for Phytium GMAC controller
  - !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
  - !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
  - !17396  Squashfs: check return result of sb_min_blocksize
  - !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
  - !18808  net/oenetcls: Add mode 2 for rps numa affinity
  - !18864  net/oenetcls: work around l0 cache
  - net/oenetcls: work around l0 cache
  - net: stmmac: Add Phytium GMAC glue layer
  - !18746  mainline patch backport
  - net/oenetcls: Add mode 2 for rps numa affinity
  - KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
  - driver/virt/coco: Add HYGON CSV Guest dirver.
  - KVM: x86: Support VM_ATTESTATION hypercall
  - KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
  - KVM: SVM: Move SEV module params/variables to sev.c
  - x86/sev: Drop redundant and potentially misleading 'sev_enabled'
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
  - x86/umip: Check that the instruction opcode is at least two bytes
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
  - KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
  - KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
  - KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
  - KVM: x86: Add dedicated helper to get CPUID entry with significant index
  - KVM: x86: Move lookup of indexed CPUID leafs to helper
  - KVM: x86: Check .flags in kvm_cpuid_check_equal() too
  - KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
  - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
  - KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
  - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
  - KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
  - KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
  - KVM: x86: add guest_cpuid_is_intel
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - x86/cpu: Update Intel Family comments
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel/ds: Add PEBS format 6
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
  - perf/x86/intel: Fix broken fixed event constraints extension
  - perf/x86/intel: Add common intel_pmu_init_hybrid()
  - perf/x86/intel: Clean up the hybrid CPU type handling code
  - perf/x86/intel: Apply the common initialization code for ADL
  - perf/x86/intel: Factor out the initialization code for ADL e-core
  - perf/x86/intel: Factor out the initialization code for SPR
  - perf/x86/intel: Use the common uarch name for the shared functions
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - Squashfs: check return result of sb_min_blocksize
  - dt-bindings: net: Add bindings for Phytium GMAC
  - RNPVF: NET: Fix core-dump while enable sriov for rnp


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-290.0.0.193
changelog:
  - !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
  - !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
  - !19017 [OLK-5.10] Fix CVE-2025-39757
  - !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - x86/efi: Restore Firmware IDT before calling ExitBootServices()
  - x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  - x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
  - x86/boot/compressed/64: Add 32-bit boot #VC handler
  - x86/boot/compressed/64: Setup IDT in startup_32 boot path
  - x86/boot/compressed/64: Reload CS in startup_32
  - x86/boot/compressed/64: Cleanup exception handling before booting kernel
  - x86/sev-es: Split vc_decode_insn()
  - x86/sev-es: Remove subtraction of res variable
  - !18989  zcopy: A zero-copy data transfer mechanism
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  - !18951  Backport kunpeng920G to OLK-5.10
  - crypto: ccp: Add config to openeuler_defconfig
  - crypto: ccp: add new pci device id for HYGON C86-4G
  - crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
  - crypto: ccp - Don't initialize SEV support without the SEV feature
  - linux: tcm: add Hygon TCM2 driver
  - linux: tpm: add Hygon TPM2 driver
  - crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - crypto: tdm: Add Hygon TDM driver
  - crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - crypto: ccp: Add a new interface for X86 sending command to PSP
  - !18873  mm: introduce memalloc_flags_{save,restore}
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
  - iommu: avoid taking iova_rbtree_lock twice
  - dma-mapping: benchmark: Add support for multi-pages map/unmap
  - iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
  - !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
  - !18878  wakeup kswapd during node_reclaim
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arm64/numa: Make node reclaim distance adjustment always available
  - mm: introduce memalloc_flags_{save,restore}
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - memblock: use numa_valid_node() helper to check for invalid node ID


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-291.0.0.194
changelog:
  - !19062  mm: proc: use per_vma mmap_lock for vma traversal.
  - !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !19102  Fix CVE-2025-40123
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - !19094  zcopy: Remove the dump_pagetable interface
  - zcopy: Remove the dump_pagetable interface
  - !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - mm: proc: use per_vma mmap_lock for vma traversal.
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - usb: dwc3: gadget: check that event count does not exceed event buffer length


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-292.0.0.195
changelog:
  - !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19241  CVE-2025-40168
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
  - net: Add locking to protect skb->dev access in ip_output
  - !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
  - !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18866 [OLK-5.10] Fix CVE-2025-39766
  - !19004 [OLK-5.10]Fix CVE-2025-39751
  - !18816  CVE-2025-22121
  - !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
  - !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - !19169  crypto: essiv - Check ssize for decryption and in-place encryption
  - !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
  - !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
  - !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
  - !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
  - !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
  - !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
  - USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - crypto: zhaoxin - Update Kconfig dependencies and defaults
  - crypto: zhaoxin/padlock-sha - Update CPU matching
  - crypto: zhaoxin/padlock-aes: Update CPU matching
  - crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - EDAC/amd64: Correct the address translation for hygon family 18h model 4h
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - PCI/MSI: Set device flag indicating only 32-bit MSI support
  - configs: enable Zhaoxin I2C driver as module
  - i2c: Driver for Zhaoxin I2C controller
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - Revert "xhci: Adjust the UHCI Controllers bit value"
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - Update cputemp driver with using the same MSR uniformly
  - Add MWAIT Cx support for Zhaoxin CPUs.
  - Turning off Zhaoxin ahci controller runtime pm


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-293.0.0.196
changelog:
  - !19413  Fix CVE-2025-39994
  - !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
  - !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
  - !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
  - !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19380 [OLK-5.10] Fix CVE-2025-22107
  - !19387 [OLK-5.10] Fix CVE-2025-21945
  - !19375 [OLK-5.10] Fix CVE-2025-37899
  - Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
  - !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19407  CVE-2025-37786
  - !19406  sctp: Fix MAC comparison to be constant-time
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - net: dsa: free routing table on probe failure
  - net: dsa: rename teardown_default_cpu to teardown_cpu_ports
  - sctp: Fix MAC comparison to be constant-time
  - !19379  mmc: core: use sysfs_emit() instead of sprintf()
  - !19221  NFSv4: Fix deadlock during the running of state manager
  - !19369  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19246  dmaengine: ti: k3-udma: Add missing locking
  - !19217  sbitmap: fix infinite loop caused by negative wait_cnt
  - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - ksmbd: fix use-after-free in smb2_lock
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - mmc: core: use sysfs_emit() instead of sprintf()
  - !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ksmbd: fix use-after-free in session logoff
  - !18836  CVE-2025-37997
  - drivers:misc:sdma-dae: add channel depth info in debugfs
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
  - fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
  - !19345  sched: Fix race between yield_to() and try_to_wake_up()
  - !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
  - !19347  Fixes of page cache limit
  - mm: Replace deferrable timer with delay timer for shrink worker
  - mm: Add page cache limit check before queueing shrink worker
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !19333  bpf: Sync pending IRQ work before freeing ring buffer
  - !19335  drm/omap: fix misleading indentation in pixinc()
  - mm: proc: fix compile warning when CONFIG_NUMA=n
  - drm/omap: fix misleading indentation in pixinc()
  - bpf: Sync pending IRQ work before freeing ring buffer
  - !19304  Add Support for Disabling Hugetlb in soft_offline_page
  - !19309  Fix CVE-2025-40200
  - !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - !18967 [OLK-5.10] force use dma api when AMD SEV is actived
  - !18818 [OLK-5.10]:update patches for sw64 architecture
  - !19307  net: Netdev use RCU protection
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - !19186  Squashfs: fix uninit-value in squashfs_get_parent
  - !19232  drm/vmwgfx: Fix Use-after-free in validation
  - !19259  scsi: ufs: core: Fix handling of lrbp->cmd
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: dst: add four helpers to annotate data-races around dst->dev
  - !19299  pid: Add a judgment for ns null in pid_nr_ns
  - !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
  - !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19283  fix cves
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19296  sched: Fix incorrect cluster mask
  - sched: Fix incorrect cluster mask
  - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm/hugetlb: unshare page tables during VMA split, not before
  - hugetlb: unshare some PMDs when splitting VMAs
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - media: davinci: vpif: Fix memory leak in probe error path
  - media: davinci: vpif: fix use-after-free on driver unbind
  - scsi: ufs: core: Fix handling of lrbp->cmd
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - dmaengine: ti: k3-udma: Add missing locking
  - drm/vmwgfx: Fix Use-after-free in validation
  - NFSv4: Fix deadlock during the running of state manager
  - ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states
  - Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
  - Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
  - sbitmap: fix infinite loop caused by negative wait_cnt
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Squashfs: fix uninit-value in squashfs_get_parent
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - virtio_ring: force use dma api when AMD SEV is actived
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - sw64: paravirt: add pv steal time support in guest side
  - sw64: kvm: add pv steal time support
  - sw64: use ioremap to map IO address in functions like __get_cpu_nums()
  - sw64: move non-boot core's kernel page table enabling logic to hmcode
  - sw64: define run_mode_host_key as false
  - sw64: add memclear template and ____memclr_simd()
  - sw64: optimize simd version of copy/clear_page()
  - sw64: disallow users modifying PS in pt_regs
  - sw64: enable kernel page table
  - sw64: use ioremap to map IO address
  - sw64: map legacy I/O to K segment
  - sw64: setup early_ioremap
  - sw64: reset ATC for kvm
  - sw64: setup mapping for efi_mm
  - sw64: set protection for kernel page table
  - sw64: modify codes with fixmap
  - sw64: map the early and the final page table
  - sw64: add fixmap support
  - sw64: control CSR_INT_EN directly in host kernel
  - sw64: pci: remove redundant debug control
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-294.0.0.197
changelog:
  - !19384 [OLK-5.10] Fix CVE-2025-22039
  - !19543 [OLK-5.10] Fix CVE-2025-21968
  - !19534 [OLK-5.10] Fix CVE-2024-57911
  - !19606 [OLK-5.10] Fix CVE-2023-53466
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - !19542 [OLK-5.10] Fix CVE-2022-49196
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
  - !19583  CVE-2023-53491 v3
  - !19578  net/oenetcls: Prioritize oenetcls hooks over rps
  - !19575  Bugfix for three issues
  - !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
  - !19573  Bluetooth: Fix hci_suspend_sync crash
  - !19572  net/smc: fix UAF on smcsk after smc_listen_out()
  - !19571  i40e: remove read access to debugfs files
  - !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
  - !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19565  ipv6: reject malicious packets in ipv6_gso_segment()
  - start_kernel: use unreachable too fix __noreturn build warning
  - start_kernel: Add __no_stack_protector function attribute
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix invalid paging request while attach transhugepage to same addr
  - Bluetooth: hci_event: call disconnect callback before deleting conn
  - Bluetooth: Fix hci_suspend_sync crash
  - net/smc: fix UAF on smcsk after smc_listen_out()
  - i40e: remove read access to debugfs files
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - vsock: Do not allow binding to VMADDR_PORT_ANY
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: reject malicious packets in ipv6_gso_segment()
  - !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !19523  KVM: arm64: Prevent access to vCPU events before init
  - powerpc/pseries: Fix use after free in remove_phb_dynamic()
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - !19349 net:don't dump stack on queue timeout
  - KVM: arm64: Prevent access to vCPU events before init
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - !19449  ksmbd: fix Preauh_HashValue race condition
  - !19498  mainline patch backport
  - timers: Fix NULL function pointer race in timer_shutdown_sync()
  - arm64: mte: Do not flag the zero page as PG_mte_tagged
  - net: don't dump stack on queue timeout
  - !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
  - arm64: kdump: Skip kmemleak scan reserved memory for kdump
  - !19315 [OLK-5.10] Fix CVE-2024-57907
  - !19308 [OLK-5.10] Fix CVE-2025-21905
  - !18648 [OLK-5.10] Fix CVE-2025-38729
  - !19003 [OLK-5.10]Fix CVE-2025-38706
  - !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ksmbd: fix Preauh_HashValue race condition
  - !19443  CVE-2025-22022
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - !19436 RDMA/hns: Fix a memory issue in roce bonding
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - !19425  net: openvswitch: fix nested key length validation in the set() action
  - !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - !19419  media: venus: hfi: add check to handle incorrect queue size
  - RDMA/hns: Fix a memory issue in roce bonding
  - RDMA/hns: Fix memory issues in roce reserve PD/CQ
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
  - RDMA/core: Prevent soft lockup during large user memory region cleanup
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - net: openvswitch: fix nested key length validation in the set() action
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - media: venus: hfi: add check to handle incorrect queue size
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - wifi: iwlwifi: limit printed string from FW file
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-295.0.0.198
changelog:
  - !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
  - KVM: x86: Always set kvm_run->if_flag
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
  - KVM: SEV: WARN if SEV-ES is marked active but SEV is not
  - KVM: SEV-ES: Set guest_state_protected after VMSA update
  - !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
  - !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
  - iommu/arm-smmu-v3-sva: Fix mm use-after-free
  - !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
  - !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
  - !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
  - !19540  vfs: Don't leak disconnected dentries on umount
  - !19539  fs/proc: fix uaf in proc_readdir_de()
  - !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
  - !19537  Fix CVE-2025-40190
  - Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
  - !19651  CVE-2023-53254
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
  - !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
  - efi: Fix kabi breakage of efi
  - docs: security: Add secrets/coco documentation
  - efi: Register efi_secret platform device if EFI secret area is declared
  - virt: Add efi_secret module to expose confidential computing secrets
  - efi: Save location of EFI confidential computing area
  - vfs: Don't leak disconnected dentries on umount
  - fs/proc: fix uaf in proc_readdir_de()
  - fs: Prevent file descriptor table allocations exceeding INT_MAX
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: nested locking for xattr inode
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - KVM: SEV: Acquire vcpu mutex when updating VMSA
  - x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
  - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
  - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes
  - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
  - x86/sev-es: Optimize __sev_es_ist_enter() for better readability
  - KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  - ata: zhaoxin: update for rename symbols
  - Add platform-specific quirks for ZX-200 device


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-296.0.0.199
changelog:
  - !19740 merge refs/pull/19740/head into OLK-5.10
  - !19764 merge patch-1766387978 into OLK-5.10
  - hisi: l3t: enable l3t with specific cpuid
  - !19705 [OLK-5.10]:update patches for sw64 architecture
  - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
  - !19372  padata: Fix pd UAF once and for all
  - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
  - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
  - net: atlantic: fix fragment overflow handling in RX path
  - !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
  - locking/rwsem: Optimize down_read_trylock() under highly contended case
  - !19724  mm/mem_reliable: use percise count during limit check
  - mm/mem_reliable: use percise count during limit check
  - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - !19614  NFSD: Fix crash in nfsd4_read_release()
  - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  - !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - sw64: set PTBR_SYS before accessing vmalloc area
  - sw64: set execute permission for virtual machine's hmcode text section
  - sw64: fix simd version of copy/clear_page()
  - sw64: fix random mmap base range
  - firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - NFSD: Fix crash in nfsd4_read_release()
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - padata: Fix pd UAF once and for all
  - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
  - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
  - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
  - KVM: x86: Pass emulation type to can_emulate_instruction()
  - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
  - KVM: SVM: Don't intercept #GP for SEV guests
  - swiotlb: do not zero buffer in set_memory_decrypted()
  - crypto: ccp - Add SEV_INIT rc error logging on init
  - dma-direct: always leak memory that can't be re-encrypted
  - dma-direct: factor out dma_set_{de,en}crypted helpers
  - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
  - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
  - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
  - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
  - KVM: SEV-ES: keep INS functions together
  - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
  - KVM: x86: split the two parts of emulator_pio_in
  - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
  - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
  - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
  - KVM: SEV-ES: fix length of string I/O
  - x86/sev-es: Do not unroll string I/O for SEV-ES guests
  - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-297.0.0.200
changelog:
  - !19833 merge patch-1766715015 into OLK-5.10
  - !19911 merge patch-1767492639 into OLK-5.10
  - !19635 merge refs/pull/19635/head into OLK-5.10
  - !19903 merge patch-1767161454 into OLK-5.10
  - !19864 merge patch-1766990471 into OLK-5.10
  - !19865 merge patch-1766990523 into OLK-5.10
  - mm: mem_reliable: prevent excessive direct reclaim loops
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
  - !19899 merge patch-1767098709 into OLK-5.10
  - erofs: validate the extent length for uncompressed pclusters
  - !19885 merge patch-1767076771 into OLK-5.10
  - !19876 merge patch-1767011340 into OLK-5.10
  - scsi: qla2xxx: Clear cmds after chip reset
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  - !19856 merge patch-1766976937 into OLK-5.10
  - !19857 merge patch-1766976979 into OLK-5.10
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
  - virtio-net: ensure the received length does not exceed allocated size
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
  - tracing: Fix memory leaks in create_field_var()
  - !19760 merge patch-1766370959 into OLK-5.10
  - !19786 merge patch-1766474397 into OLK-5.10
  - !19548 merge refs/pull/19548/head into OLK-5.10
  - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  - !19739 merge refs/pull/19739/head into OLK-5.10
  - !19732 merge refs/pull/19732/head into OLK-5.10
  - !19719 merge refs/pull/19719/head into OLK-5.10
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - x86/fpu: Ensure XFD state on signal delivery
  - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
  - usb: storage: Fix memory leak in USB bulk transport
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
  - cpufreq: ACPI: Fix max-frequency computation
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
  - tools headers: Update tools's copy of x86/asm headers
  - tools headers cpufeatures: Sync with the kernel sources
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-298.0.0.201
changelog:
  - !19798 merge OLK-5.10 into OLK-5.10
  - !19972 merge patch-1767691219 into OLK-5.10
  - !19974 merge patch-1767691279 into OLK-5.10
  - !19973 merge patch-1767691254 into OLK-5.10
  - !19713 merge refs/pull/19713/head into OLK-5.10
  - !19832 merge OLK-5.10-ringbuffer into OLK-5.10
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
  - KVM: SVM: Skip SEV cache flush if no ASIDs have been used
  - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages
  - mm: x86: Fix kabi breakage of pv_ops
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Assume a 64-bit hypercall for guests with protected state
  - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
  - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - x86/kvm: Add kexec support for SEV Live Migration.
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
  - EFI: Introduce the new AMD Memory Encryption GUID.
  - mm: x86: Invoke hypercall when page encryption status is changed
  - x86/kvm: Add AMD SEV specific Hypercall3
  - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
  - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
  - KVM: SVM: fix missing sev_decommission in sev_receive_start
  - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
  - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
  - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
  - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
  - KVM: SVM: Add KVM_SEV_SEND_FINISH command
  - KVM: SVM: Add KVM_SEND_UPDATE_DATA command
  - KVM: SVM: Add KVM_SEV SEND_START command
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-299.0.0.202
changelog:
  - !19047 [OLK-5.10] Fix CVE-2025-39839
  - !18614 [OLK-5.10] Fix CVE-2025-39737
  - !18654 [OLK-5.10] Fix CVE-2025-38705
  - !18782 【OLK-5.10】fix CVE-2025-38712
  - !18612 [OLK-5.10] Fix CVE-2025-38713
  - !18635 [OLK-5.10] Fix CVE-2025-38714
  - !18862 [OLK-5.10] Fix CVE-2025-38697
  - !20058  CVE-2025-38111
  - !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
  - !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
  - !20309 hwmon: constify pointers to hwmon_channel_info
  - hwmon: fix kabi of struct hwmon_channel_info
  - !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
  - !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - hwmon: constify pointers to hwmon_channel_info
  - mlxsw: spectrum_router: Fix neighbour use-after-free
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - !20316  um: virtio_uml: Fix use-after-free after put_device in probe
  - !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - !20300  software node: Correct a OOB check in software_node_get_reference_args()
  - !20299  jfs: add sanity check for agwidth in dbMount
  - !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
  - !20277  e1000: fix OOB in e1000_tbi_should_accept()
  - !20285  hwmon: (ibmpex) fix use-after-free in high/low store
  - mm/kmemleak: move up cond_resched() call in page scanning loop
  - !19953 【OLK-5.10】 power_meter patchs from 6.6
  - software node: Correct a OOB check in software_node_get_reference_args()
  - jfs: add sanity check for agwidth in dbMount
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !20271  KVM: x86: use array_index_nospec with indices that come from guest
  - !19788  ima: Handle error code returned by ima_filter_rule_match()
  - iavf: fix off-by-one issues in iavf_config_rss_reg()
  - e1000: fix OOB in e1000_tbi_should_accept()
  - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
  - !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - !20202  scsi: qla2xxx: Fix premature hw access after PCI error
  - !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
  - KVM: x86: use array_index_nospec with indices that come from guest
  - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - RDMA/hns: Support config and query the CNP DSCP for HIP09
  - !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
  - !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - RDMA/hns: Support drain SQ and RQ
  - RDMA/hns: Return actual error code instead of fixed EINVAL
  - RDMA/hns: Notify ULP of remaining soft-WCs during reset
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning
  - RDMA/hns: Fix RoCEv1 failure due to DSCP
  - !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
  - !20050  smb: client: Fix use-after-free in cifs_fill_dirent
  - !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
  - !19816  scsi: sg: Do not sleep in atomic context
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - scsi: qla2xxx: Fix premature hw access after PCI error
  - ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20150  tracing: Do not register unsupported perf events
  - !20163  tracing: Fix enabling of tracing on file release
  - !19938 net: hns3: add VLAN id validation before using
  - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
  - !20044 【openEuler-22.03-LTS-SP4】Memory copy error
  - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
  - !20025 [OLK-5.10]Support SMT control on arm64.
  - !19922  NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
  - !20026  fs/buffer: fix use-after-free when call bh_read() helper
  - !19962  i40e: add max boundary check for VF filters
  - !20103  kmemleak: Fix kmemleak false warnings
  - !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !20052  CVE-2024-21823
  - !18962  erofs: Fix erofs_bmap error
  - !20016  kernfs: Fix UAF issue
  - !19694  ARM: fix hash_name() issue
  - !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - !20065  Fix CVE-2022-50737
  - !20066  smb: client: fix race with concurrent opens in rename(2)
  - !20151 v2  Fix CVE-2025-40016
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
  - hwmon: (acpi_power_meter) Fix style issues
  - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
  - hwmon: acpi_power_meter: Get rid of ACPICA message printing
  - ACPI: utils: Introduce acpi_evaluation_failure_warn()
  - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
  - hwmon: (acpi_power_meter) clean up freeing code
  - x86/sev: merge continuous pages into a large range when notifying range enc status changes
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - tracing: Fix enabling of tracing on file release
  - cifs: fix session state check in reconnect to avoid use-after-free issue
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - media: uvcvideo: Allow extra entities
  - tracing: Do not register unsupported perf events
  - wifi: cfg80211: fix use-after-free in cmp_bss()
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - arm64: kdump: fix kmemleak unknown object warning when crash base is set
  - arm64: kdump: fix kmemleak unknown object warning
  - x86/sev: Use "SEV: " prefix for messages from sev.c
  - x86/sev: Propagate #GP if getting linear instruction address failed
  - smb: client: fix race with concurrent opens in rename(2)
  - fs/ntfs3: Add null pointer checks
  - fs/ntfs3: Validate buffer length while parsing index
  - fs/ntfs3: Validate index root when initialize NTFS security
  - net/mdiobus: Fix potential out-of-bounds read/write access
  - net: mdio: C22 is now optional, EOPNOTSUPP if not provided
  - dmaengine: idxd: Fix ->poll() return value
  - dmaengine: idxd: Fix allowing write() from different address spaces
  - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
  - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
  - dmaengine: idxd: add per DSA wq workqueue for processing cr faults
  - dmaengine: idxd: add a write() method for applications to submit work
  - dmaengine: idxd: add a new security check to deal with a hardware erratum
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
  - x86: don't use REP_GOOD or ERMS for small memory clearing
  - x86: don't use REP_GOOD or ERMS for small memory copies
  - fs/buffer: fix use-after-free when call bh_read() helper
  - powerpc/kexec: Enable SMT before waking offline CPUs
  - cpu/SMT: Enable SMT only if a core is online
  - cpu/SMT: Create topology_smt_thread_allowed()
  - powerpc/topology: Check if a core is online
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - powerpc: Add HOTPLUG_SMT support
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - kernfs: Fix kabi broken in struct kernfs_root
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - kernfs: fix potential NULL dereference in __kernfs_remove
  - kernfs: fix NULL dereferencing in kernfs_remove
  - kernfs: remove redundant kernfs_rwsem declaration.
  - kernfs: prevent early freeing of root node
  - kernfs: switch global kernfs_rwsem lock to per-fs lock
  - KVM: SVM: Make sure GHCB is mapped before updating
  - KVM: SVM: check CR4 changes against vcpu->arch
  - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
  - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
  - x86/sev: Fix error message in runtime #VC handler
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - i40e: add max boundary check for VF filters
  - net: hns3: add VLAN id validation before using
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - ACPI: thermal: Move to dedicated function sysfs extra attr creation
  - ACPI: thermal: Use thermal_zone_device()
  - thermal: core: Encapsulate tz->device field
  - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - drivers:misc:sdma-dae: add NULL judgement of global variables
  - md/raid0, raid10: Don't set discard sectors for request queue
  - scsi: sg: Do not sleep in atomic context
  - ima: Handle error code returned by ima_filter_rule_match()
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - ARM: fix hash_name() fault
  - ARM: allow __do_kernel_fault() to report execution of memory faults
  - configs: enable CONFIG_MICROCODE_ZHAOXIN
  - x86/microcode: Add Zhaoxin cpu microcode update driver
  - drm/amd/pm: fix null pointer access
  - batman-adv: fix OOB read/write in network-coding decode
  - PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - erofs: Fix erofs_bmap error
  - jfs: upper bound check of tree index in dbAllocAG
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-300.0.0.203
changelog:
  - !20464  rcu: Protect ->defer_qs_iw_pending from data race
  - !20318 net: hns3: check pf tc cfg when setting vf tc
  - !20522  CVE-2022-50616
  - !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
  - regulator: core: Fix resolve supply lookup issue
  - regulator: core: Use different devices for resource allocation and DT lookup
  - !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
  - !19965  nvme-fc: use lock accessing port_state and rport state
  - !20226  leapraid: supports LeapRaid controller
  - !20436  fix CVE-2026-22998
  - rcu: Protect ->defer_qs_iw_pending from data race
  - !20449  scsi/hiraid: Support New Raid feature
  - !20252  ntfs: set dummy blocksize to read boot_block when mounting
  - !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
  - !20335  Fix CVE-2025-37947
  - mm: Add PAGE_ALIGN_DOWN macro
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Fix incorrect error path of ioctl
  - soc cache: Fix incorrect size validation
  - soc cache: Enforce maintain type check
  - soc cache: Modify default config to compile HiSilicon SoC cache driver
  - !19858 [OLK-5.10] perf support for HiSilicon HIP12
  - !20331 Fix CVE-2025-39835
  - !20439 Fix CVE-2025-39945
  - !20251 Fix CVE-2025-38480
  - !20184 Fix CVE-2025-37770
  - !20185 Fix CVE-2022-49829
  - !20183 Fix CVE-2025-23138
  - !20240 Fix CVE-2025-21981
  - !20409  net: xfrm: Fix CVE-2025-40215
  - !20408  net: xfrm: Fix CVE-2025-39797
  - !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
  - !20406  bpf, sockmap: Avoid using sk_socket after free when sending
  - !20405  can: bcm: add locking for bcm_op runtime updates
  - !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
  - scsi/hiraid: Support New Raid feature
  - !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
  - !20422  driver core: fix potential null-ptr-deref in device_add()
  - cnic: Fix use-after-free bugs in cnic_delete_task
  - !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  - !20418  drivers: base: Free devm resources when unregistering a device
  - !20417  driver core: fix resource leak in device_add()
  - !20416  Fix CVE-2022-49309
  - !20415  kernel/resource: fix kfree() of bootmem memory again
  - !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
  - !20412  HID: core: Harden s32ton() against conversion to 0 bits
  - !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  - nvmet-tcp: remove boilerplate code
  - !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - vdso: do cntvct workaround in the VDSO
  - arm64: vdso: remove two .altinstructions related symbols
  - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
  - arm64: alternative: patch alternatives in the vDSO
  - arm64: module: move find_section to header
  - driver core: fix potential null-ptr-deref in device_add()
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - usb: early: xhci-dbc: Fix a potential out-of-bound memory access
  - drivers: base: Free devm resources when unregistering a device
  - driver core: fix resource leak in device_add()
  - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
  - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
  - !20383  usb: cdns3: fix random warning message when driver load
  - kernel/resource: fix kfree() of bootmem memory again
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - of: check previous kernel's ima-kexec-buffer against memory bounds
  - HID: core: Harden s32ton() against conversion to 0 bits
  - !19959 【OLK-5.10】Support NMI Watchdog
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
  - xfrm: delete x->tunnel as we delete x
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
  - xfrm: Duplicate SPI Handling
  - netfilter: allow exp not to be removed in nf_ct_find_expectation
  - bpf, sockmap: Avoid using sk_socket after free when sending
  - can: bcm: add locking for bcm_op runtime updates
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
  - irqchip/gic-v3: Fix one race condition due to NMI withdraw
  - watchdog: Fix call trace when failed to initialize sdei
  - watchdog: Support watchdog_sdei coexist with existing watchdogs
  - init: only move down lockup_detector_init() when sdei_watchdog is enabled
  - arm64: enable perf events based hard lockup detector
  - arm64: add hw_nmi_get_sample_period for preparation of lockup detector
  - usb: cdns3: fix random warning message when driver load
  - !20051  smb3: fix for slab out of bounds on mount to ksmbd
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - watch_queue: fix pipe accounting mismatch
  - drm/amd/pm/powerplay: Prevent division by zero
  - !20357  ext4: fix e4b bitmap inconsistency reports
  - ice: fix memory leak in aRFS after reset
  - drm/hisilicon/hibmc: hibmc-drm bugfix for DP
  - !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
  - drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
  - drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
  - drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
  - drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
  - drm/hisilicon/hibmc: Add vga connector detect functions
  - drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
  - drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
  - drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
  - drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
  - drm/hisilicon/hibmc: Add dp serdes cfg in dp process
  - drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
  - drm/hisilicon/hibmc: Restructuring the header dp_reg.h
  - drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
  - drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
  - drm/ast: Implement polling for VGA and SIL164 connectors
  - drm/sysfs: Register "ddc" symlink later
  - drm/hisilicon/hibmc: add dp module in hibmc
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
  - drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
  - drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
  - drm/hisilicon/hibmc: add dp aux in hibmc drivers
  - gic: increase the arch_timer priority to avoid hardlockup
  - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
  - drm/scheduler: fix fence ref counting
  - !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
  - ext4: fix e4b bitmap inconsistency reports
  - !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
  - !20256 Fix CVE-2025-39828
  - !20339  wifi: prevent A-MSDU attacks in mesh networks
  - wifi: prevent A-MSDU attacks in mesh networks
  - ksmbd: fix stream write failure
  - ksmbd: prevent out-of-bounds stream writes by validating *pos
  - xfs: do not propagate ENODATA disk errors into xattr code
  - net: hns3: check pf tc cfg when setting vf tc
  - net: hns3: support tc limit speed
  - net: hns3: the multi-tcs VF can be configured only when the interface is down
  - irqchip/gic-v3-its: Remove DevID Pool's restriction
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
  - perf: Update .gitignore file
  - perf stat: Enable iostat mode for x86 platforms
  - perf stat: Helper functions for PCIe root ports list in iostat mode
  - perf: Fix tt_core mismatch over PG CPU
  - perf iostat: Use system-wide mode if the target cpu_list is unspecified
  - perf arm_spe: Correct memory level for remote access
  - Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
  - Documentation: hisi-pmu: Fix of minor format error
  - drivers/perf: hisi: Add support for L3C PMU v3
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
  - arm64: topology: Setup amu fie when cpu hotplugging
  - topology: Set capacity_freq_ref in all cases
  - arm64/amu: Use capacity_ref_freq() to set AMU ratio
  - cpufreq/cppc: Set the frequency used for computing the capacity
  - cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
  - energy_model: Use a fixed reference frequency
  - cpufreq/schedutil: Use a fixed reference frequency
  - cpufreq: Use the fixed and coherent frequency for scaling capacity
  - sched/topology: Add a new arch_scale_freq_ref() method
  - arch_topology: Introduce thermal pressure update function
  - riscv: export cpu/freq invariant to scheduler
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: Allow drivers to advertise boost enabled
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
  - openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
  - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
  - cpufreq: CPPC: Fix unused-function warning
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - cpufreq: Initialize cpufreq-based invariance before subsys
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs
  - cpufreq: ACPI: Defer setting boost MSRs
  - cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
  - Documentation: power: Add description about new callback for EM registration
  - arch_topology: Avoid use-after-free for scale_freq_data
  - cpufreq: Exit governor when failed to start old governor
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq()
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver->set_boost
  - cpufreq: Remove duplicate check in __cpufreq_offline()
  - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
  - cpufreq: Remove the ->stop_cpu() driver callback
  - cpufreq: intel_pstate: Combine ->stop_cpu() and ->offline()
  - cpufreq: powernv: Migrate to ->exit() callback instead of ->stop_cpu()
  - docs/zh_CN: add cpu-freq cpu-drivers.rst translation
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class()
  - cpufreq: CPPC: Remove cpu_data_list
  - cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
  - cpufreq: CPPC: Register EM based on efficiency class information
  - PM: EM: Change the order of arguments in the .active_power() callback
  - cpufreq: Add callback to register with energy model
  - PM: EM: Add .get_cost() callback
  - cpufreq: CPPC: Add per_cpu efficiency_class
  - cpufreq: remove useless INIT_LIST_HEAD()
  - ACPI: CPPC: Disable FIE if registers in PCC regions
  - ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
  - cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
  - cpufreq: cppc: Fix invalid return value in .get() callback
  - cppc_cpufreq: Fix possible null pointer dereference
  - cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
  - cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
  - cpufreq: CPPC: Add support for frequency invariance
  - arch_topology: Export arch_freq_scale and helpers
  - cpufreq: CPPC: Pass structure instance by reference
  - cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
  - cpufreq: CPPC: Migrate to ->exit() callback instead of ->stop_cpu()
  - cppc_cpufreq: replace per-cpu data array with a list
  - cppc_cpufreq: expose information on frequency domains
  - cppc_cpufreq: clarify support for coordination types
  - arch_topology: Allow multiple entities to provide sched_freq_tick() callback
  - sched/topology,schedutil: Wrap sched domains rebuild
  - arch_topology: Rename freq_scale as arch_freq_scale
  - arm64: topology: Drop the useless update to per-cpu cycles
  - arm64: topology: Make AMUs work with modular cpufreq drivers
  - arm64: topology: Reorder init_amu_fie() a bit
  - arm64: topology: Avoid the have_policy check
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
  - cpufreq: prevent NULL dereference in cpufreq_online()
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization
  - cppc_cpufreq: simplify use of performance capabilities
  - cpufreq: Introduce a more generic way to set default per-policy boost flag
  - cpufreq: Fix re-boost issue after hotplugging a CPU
  - cpufreq: Support per-policy performance boost
  - ntfs: set dummy blocksize to read boot_block when mounting
  - leapraid: supports LeapRaid controller
  - perf mem: Count L2 HITM for c2c statistic
  - perf mem: Add statistics for peer snooping
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf arm-spe: augment the data source type with neoverse_spe list
  - tools arm64: Import cputype.h
  - arm64: cputype: Add cputype definition for HIP12
  - drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
  - drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
  - drivers/perf: hisi: Add cacheable option for L3C PMU
  - perf: Remove unstable events for uncore L3C PMU
  - drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
  - perf iostat: hisi: Fix port range retrival
  - drivers/perf: hisi: Add support for L3C PMU v3
  - drivers/perf: hisi: Refactor the event configuration of L3C PMU
  - drivers/perf: hisi: Extend the field of tt_core
  - drivers/perf: hisi: Extract the event filter check of L3C PMU
  - drivers/perf: hisi: Simplify the probe process of each L3C PMU version
  - drivers/perf: hisi: Export hisi_uncore_pmu_isr()
  - drivers/perf: hisi: Relax the event ID check in the framework
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - drivers/perf: hisi: Support PMUs with no interrupt
  - drivers/perf: hisi: Relax the event number check of v2 PMUs
  - drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
  - drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Simplify the probe process for each DDRC version
  - drivers/perf: hisi: Delete redundant blank line of DDRC PMU
  - drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
  - drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
  - drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
  - drivers/perf: convert sysfs snprintf family to sysfs_emit
  - perf: hisi: Constify static struct attribute_group
  - perf/hisi: Constify static attribute_group structs
  - drivers/perf: hisi: Add a common function to retrieve topology from firmware
  - drivers/perf: hisi: Extract topology information to a separate structure
  - drivers/perf: hisi: Refactor the detection of associated CPUs
  - drivers/perf: hisi: Migrate to one online CPU if no associated one online
  - drivers/perf: hisi: Don't update the associated_cpus on CPU offline
  - drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
  - perf stat: Enable iostat mode for HiSilicon PCIe PMU
  - perf stat: Add struct perf_stat_aggr to perf_stat_evsel
  - perf stat: Display iostat headers correctly
  - perf stat: Don't display metric header for non-leader uncore events
  - perf stat: Basic support for iostat in perf
  - perf arm-spe: Refactor arm-spe to support operation packet type
  - perf arm-spe: Use SPE data source for neoverse cores
  - perf arm-spe: Don't set data source if it's not a memory operation
  - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
  - tools: arm64: Import sysreg.h
  - smb3: fix for slab out of bounds on mount to ksmbd
  - watchdog/perf: adapt the watchdog_perf interface for async model
  - watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
  - irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
  - irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
  - irqchip/gic-v3: Implement FEAT_GICv3_NMI support
  - arm64/nmi: Add Kconfig for NMI
  - arm64/nmi: Add handling of superpriority interrupts as NMIs
  - arm64/irq: Document handling of FEAT_NMI in irqflags.h
  - arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
  - arm64/nmi: Manage masking for superpriority interrupts along with DAIF
  - nvme-fc: use lock accessing port_state and rport state
  - KVM: arm64: Hide FEAT_NMI from guests
  - arm64/cpufeature: Detect PE support for FEAT_NMI
  - arm64/hyp-stub: Enable access to ALLINT
  - arm64/asm: Introduce assembly macros for managing ALLINT
  - arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
  - arm64/booting: Document boot requirements for FEAT_NMI
  - irqchip/gic-v3: Fix priority mask handling
  - irqchip/gic-v3: Refactor ISB + EOIR at ack time
  - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - soc cache: Add framework driver for HiSilicon SoC cache


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-301.0.0.204
changelog:
  - !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
  - !20767  Revert hibmc patches to fix null-ptr-deref
  - Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
  - Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
  - !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
  - cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
  - !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
  - drm/hisilicon: Using the to_hibmc_drm_private to convert
  - drm/hisilicon: Code refactoring for hibmc_drm_drv
  - !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 & SM4 algorithm
  - !20666  CVE-2023-53712
  - !20673 Fix CVE-2025-39957
  - !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !20687  i40e: Fix potential invalid access when MAC list is empty
  - !20692  ipv6: sr: Fix MAC comparison to be constant-time
  - !20699  sctp: linearize cloned gso packets in sctp_rcv
  - !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
  - !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
  - sctp: linearize cloned gso packets in sctp_rcv
  - libceph: fix potential use-after-free in have_mon_and_osd_map()
  - tipc: Fix use-after-free in tipc_mon_reinit_self().
  - ipv6: sr: Fix MAC comparison to be constant-time
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - i40e: Fix potential invalid access when MAC list is empty
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !20119 Add 950 KVM feature support
  - !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
  - !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  - !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
  - wifi: mac80211: increase scan_ies_len for S1G
  - !20566  crypto: lzo - Fix compression buffer overrun
  - KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
  - KVM: arm64: ipiv: Fix compilation warning
  - KVM: arm64: check if IPIV is enabled in BIOS
  - kvm: hisi: print error for IPIV
  - KVM: arm64: using kvm_vgic_global_state for ipiv
  - kvm: hisi: Don't allow to change mpidr in IPIv
  - kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
  - KVM: arm64: fix live migration bug of IPIv
  - irqchip/gic: Add HiSilicon PV SGI support
  - KVM: arm64: Implement PV_SGI related calls
  - KVM: arm64: Document PV-sgi interface
  - KVM: arm64: Introduce ipiv enable ioctl
  - arm64/config: add config to control whether enable IPIV feature
  - kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
  - kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
  - kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
  - kvm: hisi_virt: Register ipiv exception interrupt
  - irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
  - kvm: arm64: avoid sending multi-SGIs in IPIV
  - kvm: hisi_virt: Allocate VM table and save vpeid in it
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
  - KVM: arm64: fix memory leak in TLBI
  - KVM: arm64: Add new HiSi CPU type to support DVMBM
  - kvm: hisi_virt: Update TLBI broadcast feature for hip12
  - kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
  - ARM: 9317/1: kexec: Make smp stop calls asynchronous
  - !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
  - !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
  - !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
  - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - scsi: qla4xxx: Prevent a potential error pointer dereference
  - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  - net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - macvlan: fix possible UAF in macvlan_forward_source()
  - !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
  - !20593  CVE-2025-39744 fixup
  - !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - !20178 v3  Fix CVE-2024-53179
  - team: fix check for port enabled in team_queue_override_port_prio_changed()
  - rcu: Fix racy re-initialization of irq_work causing hangs
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
  - rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
  - !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
  - !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
  - !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
  - !20466  pptp: ensure minimal skb length in pptp_xmit()
  - !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - !20574  RDMA/cm: Fix leaking the multicast GID table reference
  - !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - !20565 Fix CVE-2023-53521
  - !20521 Fix CVE-2026-23038
  - RDMA/cm: Fix leaking the multicast GID table reference
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - crypto: lzo - Fix compression buffer overrun
  - !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
  - eth: bnxt: move and rename reset helpers
  - x86: Resolve FPU state corruption between atomic and non-atomic contexts
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
  - bnxt_en: Fix potential data corruption with HW GRO/LRO
  - pptp: ensure minimal skb length in pptp_xmit()
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - wifi: mt76: do not run mt76u_status_worker if the device is not running
  - RDMA/bnxt_re: Prevent handling any completions after qp destroy
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - phytium: add tpcm sgi handler for s5000c
  - smb: client: fix use-after-free of signing key
  - cifs: missed ref-counting smb session in find
  - KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
  - KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
  - crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
  - crypto: ccp: Add support to switch to CSV RING_BUFFER mode
  - crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
  - crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
  - crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
  - openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
  - crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-302.0.0.205
changelog:
  - !20737  pNFS: Fix a deadlock when returning a delegation during open()
  - !20725  tracing: Add recursion protection in kernel stack trace recording
  - !20746 Fix CVE-2026-22990
  - !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
  - pNFS: Fix a deadlock when returning a delegation during open()
  - tracing: Add recursion protection in kernel stack trace recording
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - irqchip/gic-v3-its: Avoid truncating memory addresses


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-303.0.0.206
changelog:
  - !20899 Fix CVE-2026-23216
  - !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  - !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
  - !20839  bpf, cpumap: Make sure kthread is running before map update returns
  - bpf, cpumap: Make sure kthread is running before map update returns
  - !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
  - !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - !20801  ACPI/IORT: Add PMCG platform information for 162001900
  - !20814  migrate: correct lock ordering for hugetlb file folios
  - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - !20800  fix CVE-2026-23054
  - migrate: correct lock ordering for hugetlb file folios
  - ACPI/IORT: Add PMCG platform information for 162001900
  - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table
  - hv_netvsc: Allocate rx indirection table size dynamically
  - RDMA/hns: Remove the accidentally added hns_roce_trace.h file
  - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-304.0.0.207
changelog:
  - !21136  sched/rt: Skip currently executing CPU in rto_next_cpu()
  - !21131  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - !21093  kexec: derive purgatory entry from symbol
  - !21140  ksmbd: fix use-after-free in kerberos authentication
  - !21132  SUNRPC: Ensure the transport backchannel association
  - ksmbd: fix use-after-free in kerberos authentication
  - sched/rt: Skip currently executing CPU in rto_next_cpu()
  - SUNRPC: Ensure the transport backchannel association
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - !21112  CVE-2024-57979
  - !21111  ALSA: aloop: Fix racy access at PCM trigger
  - pps: Fix kabi in pps_device
  - pps: Fix a use-after-free
  - ALSA: aloop: Fix racy access at PCM trigger
  - kexec: derive purgatory entry from symbol
  - ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - !21072 v2  arm64/mpam: enable MPAM feature and
  - !20883  RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - !21021  CVE-2026-23209
  - arm64/mpam: fix the bitmap written during mpam device reset
  - arm64/mpam: only allow L3 cache MPAM device created
  - arm64/mpam: fix inadvertently updating after repeatedly updating
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured
  - !19837 KVM: Drop tlbs_dirty
  - !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - !21014  bpf selftest cross compile fixes
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path
  - macvlan: fix error recovery in macvlan_common_newlink()
  - !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - selftests/bpf: Pass target triple to get_sys_includes macro
  - selftests/bpf: Enable cross-building
  - net: hns3: hns3 driver should be initialized when VF multi tcs is configured
  - net: hns3: modify code of judging if SMMU DMA is enabled
  - !20976  support apei_page_offline_policy
  - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
  - nvmet-tcp: don't map pages which can't come from HIGHMEM
  - nvmet-tcp: fix regression in data_digest calculation
  - nvmet-tcp: fix memory leak when performing a controller reset
  - !20971 Fix CVE-2026-23074
  - apei/ghes: Add sysctl interface to control soft-offline page isolation
  - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
  - !20887  HiSock Enhancement
  - net/sched: Enforce that teql can only be used as root qdisc
  - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - !20891  dcache: Limit the minimal number of bucket to two
  - !20956  CVE-2025-39967
  - fbcon: Fix OOB access in font allocation
  - fbcon: fix integer overflow in fbcon_do_set_font
  - overflow: Allow mixed type arguments
  - nvmet-tcp: add an helper to free the cmd buffers
  - dcache: Limit the minimal number of bucket to two
  - bpf: Deprecate hisock unused helpers and orig ingress logic
  - bpf: Add local connect support for hisock
  - bpf: Add ipv4-mapped ipv6 addr support for hisock
  - bpf: Add target comm parse to hisock_cmd
  - bpf: Add multi port parse to hisock_cmd
  - bpf: Only deploy hisock in server
  - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
  - bpf: Add bpf_handle_ingress/egress_ptype helper function
  - bpf: Add bpf_set_ingress/egress_dev helper function
  - bpf: Add bpf_get_skb_ethhdr helper function
  - bpf: Add bpf_set_ingress_dst helper function
  - bpf: Add BPF_HISOCK_INGRESS attach type
  - net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
  - KVM: Drop tlbs_dirty


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-305.0.0.208
changelog:
  - !21262  arm64/mpam: Extending MPAM features and bugfix
  - arm64/mpam: Allow MBMIN to be set to 0
  - arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !21211  scsi: hisi_sas: Change the debugfs parameters dump count default value
  - scsi: hisi_sas: Change the debugfs parameters dump count default value
  - !21163  gic: Add hip09 support for HISILICON_ERRATUM_165010801
  - gic: Add hip09 support for HISILICON_ERRATUM_165010801


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liningjie <liningjie@xfusion.com> 2:0.8.1-10
changelog:
  - backport patches from openEuler-22.03-LTS-SP2:
    0001-remove-nonexistent-helper-functions-and-add-new-help.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


author: xiesongyang <xiesongyang@huawei.com> - 2:0.8.1-14
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-15
changelog:
  - backport patch from upstream:
    backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-16
changelog:
  - backport patch from upstream:
    backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
    backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
    backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-17
changelog:
  - backport patch from upstream:
    backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-18
changelog:
  - backport patch from upstream:
    backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
    backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
    backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
    backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
    backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
    backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-19
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: andy <liuyang01@kylinos.cn> 2:0.8.1-20
changelog:
  - backport patch from upstream:
    backport-libbpf-Fix-out-of-bound-read.patch
    backport-libbpf-fix-LDX_STX_ST-CO-RE-relocation-size-adjustment-logic.patch
    backport-libbpf-Fix-hypothetical-STT_SECTION-extern-NULL-deref-case.patch


author: tianmuyang <tianmuyang@huawei.com> 2:0.8.1-21
changelog:
  - Add bpf_cpumask_op API to support prefered cpu control in eBPF program:
    backport-libbpf-Add-bpf_cpumask_op-API-to-support-prefered-cp.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: shixuantong <shixuantong1@huawei.com> - 3.4.2-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-6
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.2-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.2-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.2-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: gaihuiying <eaglegai@163.com> - 0.9.6-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.9.6-15
changelog:
  - Type:CVE
  - Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-67
changelog:
  - virt-host-validate: Fix IOMMU output on aarch64
  - cpu: revert: Modify virCPUarmCompare to perform compare actions
  - cpu: Modify virCPUarmCompare to perform compare actions
  - add phytium s5000c support on arm architecture for capability


author: Jiabo Feng <fengjiabo1@huawei.com> - 6.2.0-69
changelog:
  - migration: support vfio-pci device migration
  - libvirt: Support specifying the cache size presented to guest
  - util: fix success return for virProcessKillPainfullyDelay()
  - test: Fix testNodeGetFreePages
  - qemu: DomainGetGuestVcpusParams: reduce scope of tmp


author: ZixinLi <lizixin10@h-partners.com> - 6.2.0-70
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: split out virDomainDefParseIDs (CVE-2025-12748)
  - conf: Add virDomainDefIDsParseString (CVE-2025-12748)
  - bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.9.14-19
changelog:
  - Type:CVE
  - CVE:CVE-2025-49794
  - CVE:CVE-2025-49796
  - SUG:NA
  - DESC: fix CVE-2025-49794, CVE-2025-49796


author: fuanan <fuanan3@h-partners.com> - 1.1.37-4
changelog:
  - fix xsltCleanupSourceDoc function:
    Clean up attributes in source doc
    Avoid null deref on documents without root


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-11
changelog:
  - update to llvm-for-oe-17.0.6-2509.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2
  - add fix for Propeller MachineBasicBlock hash set


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wujichao <wujichao1@huawei.com> - 0.3-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: xiejing <xiejing@kylinos.cn> - 1:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
  - Fix version description in systemd service file


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: Funda Wang <fundawang@yeah.net> - 20250512-1
changelog:
  - update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
    CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103


author: Funda Wang <fundawang@yeah.net> - 20250812-1
changelog:
  - update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
    CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
    CVE-2025-32086


author: yaoxin <1024769339@qq.com> - 2.4.16.6-1
changelog:
  - Update to 2.4.16.6:
    * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
    * info: fix requests to the info hook with extend_session=false
    * cookie: OIDCCookieSameSite default behaviour Lax
    * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
    * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
      cannot be found on the system upon initaliizing cache mutexes and the file cache
    * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
      compatibility with <=2.4.15.7 and to support private/test deployments
    * code: address warnings from static code analysis tool CodeChecker


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix string prefix expression must retain original length
  fix release top level scope


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: yyjeqhc <jialin.oerv@isrc.iscas.ac.cn> - 0.2.17-3
changelog:
  - Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
  - Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums


author: fly_1997 <flylove7@outlook.com> -v1.0.1-6
changelog:
  - fix dependency error and add enable failed logs
  - fix dependency disabled failed and pre-enable illegal plugin


author: fly_1997 <flylove7@outlook.com> -v1.0.2-3
changelog:
  - add automatic startup based on the version
  - fix coredump when process exits
  - modify logger mode to append


author: LHesperus <liuchanggeng@huawei.com> -v2.0.0-1
changelog:
  - merge the plugin repository into this repository
  - add oeaware sdk library
  - new interface of plugin : replace the ringbuf data with subscribe
  - add new plugin : system info, command collector, xcall


author: fly_1997 <flylove7@outlook.com> -v2.0.0-3
changelog:
  - adjust the header file structure
  - fix cycles sample, spe memory free
  - add one time command collection


author: LHesperus <liuchanggeng@huawei.com> -v2.0.1-1
changelog:
  - add some document
  - fix bug : spe period dynamic changes
  - fix bug : analysis client not work
  - fix bug : cpuburst exit error
  - adapt : seep tune , steal task tune, xcall tune


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.3-1
changelog:
  - Refactored and enhanced the analysis module:
    - Added scenario-aware analysis for multiple optimization plugins
    - Introduced command-line result viewing capability
    - Implemented Markdown format output support
  - Add new plugin: smt,binary,hirq


author: heppen <hepeng68@huawei.com> -v2.0.3-2
changelog:
  - Fixed memory leak issues:
    - Fixed unsubscribeHandler topic deserialize memory leak
    - Fixed analysis module memory leak
  - Enhanced eBPF functionality:
    - Set memory lock limit to infinity for eBPF
    - Used eBPF to collect thread information
  - Network improvements:
    - Fixed ntoh port error
    - Added support for attaching all network interfaces
    - Used tcp-set-state to adapt k8s docker
  - New features:
    - Added xcall parameters
    - Added support for docker coordination burst analysis
    - Added parameter validation
    - Added NUMA parallel scheduler tuning support
  - Other improvements:
    - Fixed header files and added CI test


author: fly_1997 <flylove7@outlook.com> -v2.0.4-1
changelog:
  - add docker coordination burst tune
  - add multi net path tune and analysis
  - add error log and params check


author: LHesperus <liuchanggeng@huawei.com> -v2.0.5-2
changelog:
  - improve some output format
  - add xcall prefetch
  - network interface plugin : adapt same nic with different ifindex


author: yeyiyang <yeyiyang3@h-partners.com> -v2.0.6-3
changelog:
  - add adapt dynamicsmt analysis if smt is not enable
  - fix code check
  - add trace log and change level intf and delete logger
  - smc-d analysis fix inconsistency in the display of zero connection


author: LHesperus <liuchanggeng@huawei.com> -v2.1.0-1
changelog:
  - remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
  - support reload log-level online
  - adapt analysis on riscv
  - add load base sched instance


author: fly_1997 <flylove7@outlook.com> -v2.1.1-1
changelog:
  - add hwprobe_analysis for RISC-V
  - fix error logger info
  - support kernel cluster scheduler
  - adapt for kylin-v10-sp3
  - realtime tune add new tuning item
  - fix smc insmod err
  - realtime tune skip grubby update
  - add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
  - add high_load value check


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: xiaochn <xiaochuannan@inspur.com> - 1.1.7-1
changelog:
  - Add KylinSec 3.5.3 support
  - Fix the problem of disk size calculation
  - Fix bcm57414 nic test failed issue
  - Change the format of date
  - Fixed a bug where a non-existent logger level was used
  - Update README.md
  - Fix vgpu testing issue


author: xu_ping <707078654@qq.com> - 3.24.0-1
changelog:
  - Upgrade version to 3.24.0
    * Add support for FIPS-session mode
    * Updates to harden against RSA timing attacks
    * Add option to show the master key verification patterns of secure keys
    * Add support for exporting a key or certificate as URI-PEM file
    * Performance improvements for attribute retrieval
    * Add support for SHA-2 mechanisms
    * Experimental support for IBM Dilithium via OpenSSL OQS provider
    * Support live guest relocation for protected key (PKEY) operations
    * Add support for CKA_ALWAYS_AUTHENTICATE
    * Add support for CKD_*_SP800 KDFs for ECDH
    * Add support for SHA based key derivation mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms
    * Add support for building Opencryptoki on the IBM AIX platform
    * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
    * Add support for protecting tokens with a token specific user group
    * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
    * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later


author: zhang_wenyu <zhang_wenyu@hoperun.com> - 3.25.0-1
changelog:
  - Upgrade version to 3.25.0
    * Add support for PKCS#11 v3.0 SHAKE key derivation
    * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
    * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
    * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
    * Add support for CCA AES CIPHER secure key types
    * Add support for the CKM_ECDH1_DERIVE mechanism
    * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
    * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
    * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
    * Add a tool for import and exporting PKCS#11 keys to a KMIP server
    * Add support for opaque secure key blob import via C_CreateObject
    * Add support for key wrapping with AES-GCM
    * Add support for newer CCA versions on s390x and non-s390x platforms
    * Add support for CKM_AES_GCM (single-part operations only)


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: zhangbinqin<zhangbinqin@h-partners.com> - 8.8p1-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: fly_fzc <2385803914@qq.com> - 1:1.1.1wa-15
changelog:
  - fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: Funda Wang <fundawang@yeah.net> - 8.0.30-11
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: heppen <hepeng68@huawei.com> - 1.0.1-4
changelog:
  - Add the dependency on ipmitool.
  - Fix bug: Coredump when CPU cores number exceed 248 or numa nodes exceed 16.
  - Fix some memory bug.


author: gaihuiying <eaglegai@163.com> - 2.4.9-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 3.14.0-11
changelog:
  - Type:CVE
  - CVE:CVE-2026-0994
  - SUG:NA
  - DESC:Fix Any recursion depth bypass in Python json_format.ParseDict


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.12-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects


author: lixiaoyong <lixiaoyong@kylinos.cn> - 0.14.1-1
changelog:
  - Upgrade package to version 0.14.1
    - Drop support for Python older than 3.6
    - Additional ruff/Pyflakes/codespell fixes


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: lipengyu <lipengyu@kylinos.cn> - 3.9.9-45
changelog:
  - Type:CVE
  - CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
  - SUG:NA
  - DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435


author: fuanan <fuanan3@h-partners.com> - 3.9.9-50
changelog:
  - Type:CVE
  - CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
  - SUG:NA
  - DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837


author: <fengjiabo1@huawei.com> - 10:6.2.0-91
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - rtl8139: Remove unused variable
  - tulip: Remove unused variable
  - virtio-mem: Fix the bitmap index of the section offset
  - virtio-mem: Fix the iterator variable in a vmem->rdl_list loop
  - system/memory: use ldn_he_p/stn_he_p
  - block: Fix crash when loading snapshot on inactive node
  - smmu: Clear SMMUPciBus pointer cache when system reset
  - block/mirror: Fix NULL s->job in active writes
  - amd_iommu: Fix APIC address check
  - virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
  - libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
  - ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
  - ivshmem.c: change endianness to LITTLE_ENDIAN
  - hw/ppc/mac.h: Remove MAX_CPUS macro
  - configure: remove dead variables
  - virtio-gpu: do not byteswap padding
  - hw/intc: clean-up error reporting for failed ITS cmd
  - qemu-iotests: Discard stderr when probing devices
  - linux-user: un-parent OBJECT(cpu) when closing thread
  - hw/net/rocker: Avoid undefined shifts with more than 31 ports
  - contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
  - scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE


author: <fengjiabo1@huawei.com> - 10:6.2.0-92
changelog:
  - s390x/sclp: Simplify get_sclp_device() 
  - target/ppc: Remove msr_pr macro
  - docs/system/target-arm: Re-alphabetize board list
  - migration: Extend query-migrate to provide dirty page limit info
  - migration: Implement dirty-limit convergence algo
  - migration: Put the detection logic before auto-converge checking
  - migration: Refactor auto-converge capability logic
  - migration: Introduce dirty-limit capability
  - qapi/migration: Introduce vcpu-dirty-limit parameters
  - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
  - Change the value of no_ged from true to false
  - Allow UNIX socket option for VNC websocket
  - tpm_emulator: Avoid double initialization during
  - chardev/char-socket: Update AF_UNIX for Windows
  - KVM: dirty ring: add missing memory barrier
  - i386: reset KVM nested state upon CPU reset
  - esp: Handle CMD_BUSRESET by resetting the SCSI bus
  - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
  - vfio/pci: Add Ascend310b scend910b support
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/virtio: handle un-configured shutdown in virtio-pci
  - target/s390x: display deprecation status in '-cpu  help'
  - target/i386: display deprecation status in '-cpu  help'
  - pc-bios/s390-ccw: Fix booting with logical block size < physical block size


author: <fengjiabo1@huawei.com> - 10:6.2.0-93
changelog:
  - cvm: bug-fix for macro isolation
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
  - Add support for the virtcca cvm feature.


author: <fengjiabo1@huawei.com> - 10:6.2.0-96
changelog:
  - vdpa: Fix bug where vdpa appliance migration does not resume after rollback
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache
  - hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
  - vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
  - target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices


author: <fengjiabo1@huawei.com> - 10:6.2.0-97
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: <fengjiabo1@huawei.com> - 10:6.2.0-98
changelog:
  - pci-host: designware: Limit value range of iATU viewport register
  - hmat acpi: Fix out of bounds access due to missing use of indirection
  - migration: Skip only empty block devices
  - aspeed/hace: Initialize g_autofree pointer
  - hw/net/vmxnet3: Fix guest-triggerable assert()
  - qxl: don't assert() if device isn't yet initialized
  - Avoid unaligned fetch in ladr_match()
  - linux-user: Fix waitid return of siginfo_t and rusage
  - hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  - stdvga: fix screen blanking
  - virtio-net: drop too short packets early
  - ebpf: replace deprecated bpf_program__set_socket_filter
  - vhsot-user: only read reply of SET_LOG_BASE from vq 0
  - cpu: add Tengyun S5000C cpu support
  - hw/virtio: Fix obtain the buffer id from the last descriptor
  - hw/core: ensure kernel_end never gets used undefined


author: <fengjiabo1@huawei.com> - 10:6.2.0-99
changelog:
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
  - hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
  - target/arm: Fix alignment for VLD4.32
  - hw/microblaze: pass random seed to fdt
  - tests/qtest: npcm7xx-emc-test: Skip checking MAC
  - tests: mark io-command test as skipped if socat is missing
  - tests: unit: add NULL-pointer check
  - tests: test-qga: close socket on failure to connect
  - vdpa:block device capacity expansion online support vdpa block device update capacity.
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - ppc/vof: Fix unaligned FDT property access
  - vvfat: Fix reading files with non-continuous clusters
  - vvfat: Fix bug in writing to middle of file
  - savevm: Fix load_snapshot error path crash
  - hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
  - hw/remote/message.c: Don't directly invoke DeviceClass:reset
  - crypto/tlscredspsk: Free username on finalize
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - char-stdio: Restore blocking mode of stdout on exit
  - hw/ppc: spapr: Use qemu_vfree() to free spapr->htab
  - smbios: sanitize type from external type before checking have_fields_bitmap
  - spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
  - KVM: use store-release to mark dirty pages as harvested
  - monitor/hmp: print trace as option in help for log command
  - tpm_crb: Avoid backend startup just before shutdown under Xen
  - crypto/block-luks: make range overlap check more readable
  - spapr: Free stdout path
  - target/rx: Use target_ulong for address in LI
  - virtio-pci: Fix the use of an uninitialized irqfd
  - rtl8139: Fix behaviour for old kernels.
  - virtio-rng: block max-bytes=0 MIME-Version: 1.0
  - hw/audio/es1370: Clean up comment
  - vhost-user-server: do not set memory fd non-blocking
  - ui: reject extended clipboard message if not activated
  - virtio-net: Fix vhost virtqueue notifiers for RSS
  - hw/misc/applesmc: Fix memory leak in reset() handler


author: <fengjiabo1@huawei.com> - 10:6.2.0-100
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: <fengjiabo1@huawei.com> - 10:6.2.0-101
changelog:
  - python/aqmp: use absolute import statement
  - sysemu: Cleanup qemu_run_machine_init_done_notifiers()
  - vhost-backend: avoid overflow on memslots_limit
  - hw/i386/vmmouse: Require 'i8042' property to be set
  - hw/scsi/megasas: Fails command if SGL buffer overflows
  - target/i386/kvm: Replace use of __u32 type
  - hw/avr: Realize AVRCPU qdev object using qdev_realize()
  - qemu-keymap: Add license in generated files
  - configure: Symlink binaries using .exe suffix with MinGW
  - ui: remove break after g_assert_not_reached()
  - io/channel-websock: Replace strlen(const_str) by sizeof(const_str) - 1
  - target/ppc: Add HASHKEYR and HASHPKEYR SPRs
  - tests: Fix error strings
  - Hexagon (target/hexagon) remove unused encodings
  - target/i386: introduce insn_get_addr
  - target/i386: REPZ and REPNZ are mutually exclusive
  - target/i386: correctly mask SSE4a bit indices in register operands
  - bios-tables-test: Make oem-fields tests be consistent
  - tests/vm: update NetBSD to 9.3
  - monitor/hmp-cmds: Avoid displaying bogus size in 'info pci' When BAR aren't mapped, we get:
  - virtio-mem: don't warn about THP sizes on a kernel without THP Support
  - Subject: [PATCH] kvm: Use 'unsigned long' for request argument in functions  wrapping ioctl()


author: <fengjiabo1@huawei.com> - 10:6.2.0-102
changelog:
  - target/ppc: Remove unused xer_* macros
  - hw/mips: Build fw_cfg.c once
  - minikconf: print error entirely on stderr
  - target/ppc: Remove extra space from s128 field in ppc_vsr_t
  - hw/arm/virt:Keep Guest L1 cache type consistent with KVM
  - pc-bios/keymaps: Use the official xkb name for Arabic layout, not the legacy synonym


author: <fengjiabo1@huawei.com> - 10:6.2.0-103
changelog:
  - Introduce the SM4 cipher algorithms (OSCCA GB/T 32907-2016).
  - intel_iommu: Add missed sanity check for 256-bit invalidation queue
  - linux-user: use 'max' instead of 'qemu32' / 'qemu64' by default
  - chardev/baum: Use definitions to avoid dynamic stack allocation
  - ui/console: Get tab completion working again in the SDL monitor vc
  - s390x/tcg: Fix opcode for lzrf
  - virtiofsd: use g_date_time_get_microsecond to get subsecond
  - ui/curses: Avoid dynamic stack allocation
  - target/m68k: always call gen_exit_tb() after writes to SR
  - target/m68k: Perform writback before modifying SR
  - target/m68k: Fix MACSR to CCR
  - target/m68k: Implement atomic test-and-set
  - block/nvme: nvme_process_completion() fix bound for cid
  - hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure
  - target/ppc: Zero second doubleword of VSR registers for FPR insns
  - target/ppc: Set OV32 when OV is set
  - target/ppc: Zero second doubleword for VSX madd instructions
  - target/ppc: Set result to QNaN for DENBCD when VXCVI occurs
  - hw/pci: Add parenthesis to PCI_BUILD_BDF macro
  - intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
  - acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block
  - acpi: ged: Add macro for acpi sleep control register
  - hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
  - ui/vnc: fix handling of VNC_FEATURE_XVP
  - s390/sclp: fix SCLP facility map
  - docs/tools/qemu-img.rst: fix typo (sumarizes)
  - chardev/char: fix qemu_chr_is_busy() check
  - edu: fix DMA range upper bound check
  - platform-bus: fix refcount leak
  - hw/net/virtio-net: fix qemu set used ring flag even vhost started
  - hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
  - tests/avocado: fix typo in replay_linux
  - util/userfaultfd: Remove unused uffd_poll_events
  - hw/core/ptimer: fix timer zero period condition for freq > 1GHz
  - hcd-ohci: Drop ohci_service_iso_td() if ed->head & OHCI_DPTR_MASK is zero
  - tests/unit/test-vmstate: Avoid dynamic stack allocation
  - hw/usb/hcd-ohci: Use definition to avoid dynamic stack allocation
  - hw/i386/multiboot: Avoid dynamic stack allocation
  - hw/ppc/spapr: Fix code style problems reported by checkpatch
  - chardev/baum: Replace magic values by X_MAX / Y_MAX definitions
  - hw/intc/xics: Avoid dynamic stack allocation
  - hw/net/e1000e_core: Use definition to avoid dynamic stack allocation
  - intel_iommu: Fix invalidation descriptor type field
  - configs: Fix typo in the sh4-softmmu devices config file


author: <ganqixin@huawei.com> - 10:6.2.0-104
changelog:
  - intel_iommu: Add missed reserved bit check for IEC descriptor
  - 9pfs: fix crash on 'Treaddir' request
  - s390x/ap: fix missing subsystem reset registration
  - qemu/bswap: Undefine CPU_CONVERT() once done
  - linux-user: Add missing signals in strace output
  - linux-user: Add missing clock_gettime64() syscall strace


author: <alex.chen@huawei.com> - 10:6.2.0-105
changelog:
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series
  - target/i386: Add VNMI and automatic IBRS feature bits
  - target/i386: Add missing feature bits in EPYC-Milan model
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX
  - target/i386: Add a couple of feature bits in 8000_0008_EBX
  - target/i386: Add new EPYC CPU versions with updated cache_info
  - target/i386: allow versioned CPUs to specify new cache_info


author: <fengjiabo1@huawei.com> - 10:6.2.0-106
changelog:
  - hw/nvme: Remove redundant dma_blk_write
  - tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
  - edid: set default resolution to 1280x800 (WXGA)
  - iotests/308: Fix for CAP_DAC_OVERRIDE
  - hvf: remove unused but set variable
  - vvfat: Fix vvfat_write() for writes before the root directory
  - hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
  - hw/pci: Remove unused pci_irq_pulse() method
  - ui/gtk: fix leaks found wtih fuzzing
  - target/i386: fix size of EBP writeback in gen_enter()
  - tests/qtest/fuzz: fix memleak in qos_fuzz.c
  - hw/core/loader: gunzip(): fix memory leak on error path
  - migration: fix a typo
  - scsi: fetch unit attention when creating the request
  - raw-format: Fix error message for invalid offset/size
  - tcg: Reset data_gen_ptr correctly
  - Fix calculation of minimum in colo_compare_tcp
  - hw/intc: Don't clear pending bits on IRQ lowering
  - target/arm: Drop user-only special case in sve_stN_r
  - usb-hub: Fix handling port power control messages
  - target/ppc: Set ctx->opcode for decode_insn32()
  - linux-user: Add proper strace format strings for getdents()/getdents64()
  - linux-user: Fix TARGET_PROT_SEM for XTENSA
  - linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
  - linux-user/hppa: Dump IIR on register dump
  - tests: Fix typo in check-help output
  - qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
  - hw/scsi/megasas: Simplify using the ldst API
  - gqa-win: get_pci_info: Clean dev_info if handle is valid
  - target/ppc: Fix 7448 support
  - vvfat: Fix size of temporary qcow file
  - docs: Correct 'vhost-user-blk' spelling
  - jackaudio: use ifdefs to hide unavailable functions
  - simplebench: Fix Python syntax error (reported by LGTM)
  - python: update type hints for mypy 0.930
  - Python/aqmp: fix type definitions for mypy 0.920
  - tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  - hw/ppc/e500: Prefer QOM cast
  - hw/ppc/e500: Remove unused "irqs" parameter
  - hw/ppc/e500: Add missing device tree properties to i2c controller node
  - linux-user: Show timespec on strace for futex()
  - linux-user: Add strace for clock_nanosleep()
  - linux-user: Fix strace of chmod() if mode == 0
  - linux-user: Log failing executable in EXCP_DUMP()
  - linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls


author: <fengjiabo1@huawei.com> - 10:6.2.0-107
changelog:
  - qemu: Support specifying the cache size presented to guest
  - hw/core/machine-smp: Initialize caches_bitmap before reading
  - qapi/qom: Define cache enumeration and properties for machine
  - linux-aio: fix unbalanced plugged counter in laio_io_unplug()


author: <fengjiabo1@huawei.com> - 10:6.2.0-109
changelog:
  - migration:Extand the fdtable in the incoming phase of migration
  - qemu6.2.0: Add trace to measure hot migrate downtime


author: Pengrui Zhang <zhangpengrui@huawei.com> - 10:6.2.0-111
changelog:
  - target/i386: Add Hygon Dhyana-v3 CPU model
  - target/i386: Add new Hygon 'Dharma' CPU model
  - migration: Don't sync volatile memory after migration completes
  - hw/display/framebuffer: Add cast to force 64x64 multiply
  - vmxcap: Add 5-level EPT bit
  - i386: Add Icelake-Server-v6 CPU model with 5-level EPT support
  - vmxcap: add tertiary execution controls
  - target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
  - target/i386: enumerate bit 56 of MSR_IA32_VMX_BASIC
  - target/i386: fix feature dependency for WAITPKG
  - target/i386: add support for LAM in CPUID enumeration
  - target/i386: add control bits support for LAM
  - target/i386: add support for FRED in CPUID enumeration
  - target/i386: mark CR4.FRED not reserved
  - vmxcap: add support for VMX FRED controls
  - target/i386: enumerate VMX nested-exception support
  - target/i386: Add get/set/migrate support for FRED MSRs
  - target/i386: Delete duplicated macro definition CR4_FRED_MASK
  - target/i386: Add VMX control bits for nested FRED support
  - target/i386: Raise the highest index value used for any VMCS encoding
  - target/i386: Add more features enumerated by CPUID.7.2.EDX
  - target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
  - i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
  - target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
  - target/i386: Enable fdp-excptn-only and zero-fcs-fds
  - target/i386: Construct CPUID 2 as stateful iff times > 1
  - target/i386: Make invtsc migratable when user sets tsc-khz explicitly
  - target/i386/cpu: Fix notes for CPU models
  - target/i386: Introduce SierraForest-v2 model
  - target/i386: Export BHI_NO bit to guests
  - target/i386: Add new CPU model ClearwaterForest
  - docs: Add GNR, SRF and CWF CPU models
  - target/i386: add sha512, sm3, sm4 feature bits
  - target/i386: add avx-vnni-int16 feature
  - net: pad packets to minimum length in qemu_receive_packet()(CVE-2025-12464)
  - block-qdict: Fix-Werror=maybe-uninitialized build failure
  - block/curl.c: Check error return from curl_easy_setopt()
  - block: Handle curl 7.55.0..7.85.0 version changes
  - amd_iommu: fix uninitialized werror
  - io: release active GSource in TLS channel finalizer
  - io: move websocket resource release to close method
  - io: fix use after free in websocket handshake code(CVE-2025-11234)


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: support vdpa device suspend/resume
  - vdpa: correct param passed in when unregister save
  - vdpa: set vring enable only if the vring address has already been set
  - shadow_dev: introduce shadow dev for virtio-net device
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: <fengjiabo1@huawei.com> - 10:6.2.0-88
changelog:
  - ui/vnc.c: Fixed a deadlock bug.
  - hw/i386: Fix comment style in topology.h
  - migration/multifd: Remove unnecessary usage of local Error
  - linux-user: fix sockaddr_in6 endianness
  - vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
  - iotests: fix 194: filter out racy postcopy-active event
  - tests/avocado: fix waiting for vm shutdown in replay_linux
  - ui/vnc: fix debug output for invalid audio message


author: <fengjiabo1@huawei.com> - 10:6.2.0-89
changelog:
  - qga-win: Fix guest-get-fsinfo multi-disks collection
  - hw/timer: fix systick trace message
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()


author: <fengjiabo1@huawei.com> - 10:6.2.0-90
changelog:
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - target/i386: Change wrong XFRM value in SGX CPUID leaf
  - target/i386: Enable support for XSAVES based features
  - target/i386: Add kvm_get_one_msr helper
  - hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
  - linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
  - ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
  - tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
  - qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
  - target/ppc: Modify the uncorrect value irq to n_IRQ
  - block-migration: Ensure we don't crash during migration cleanup
  - target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
  - hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
  - configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
  - vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
  - hw/ide/core: set ERR_STAT in unsupported command completion
  - linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
  - load_elf: fix iterator's type for elf file processing
  - hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
  - hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
  - hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
  - chardev/char.c: fix "abstract device type" error message
  - block/rbd: fix handling of holes in .bdrv_co_block_status
  - qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
  - usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
  - hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
  - block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
  - vl: Improve error message for conflicting -incoming and -loadvm
  - hw/smbios: Fix OEM strings table option validation


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Xia Bing <xiabing12@h-partners.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information


author: renhongxun <renhongxun@h-partners.com> - 0.6.7-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: Donghua Huang <huangdonghua3@h-partners.com> - 41.0-40
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.16-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:avoid truncate trailer space and do not escape backslash when read filename


author: yixiangzhike <yixiangzhike007@163.com> - 2.16-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tcp net subsystem: handle data race gracefully
         fix startup issue on modern systemd systems
         tcpflood bugfix: plain tcp send error not properly reported
         tcpflood bugfix: TCP sending was not implemented properly
         lookup tables: fix static analyzer issue
         lookup tables bugfix: reload on HUP did not work when backgrounded
         openssl: Replaced depreceated method SSLv23_method with TLS_method
         mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
         core bugfix: potential segfault on busy systems
         imfile: fix ext directory's fd leak in case of inotify on symlink
         imfile tests: ext directory's fd leak in case of inotify on symlink


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:imfile: remove state file on file delete fix
         omfile: do not carry out actual action when writing to /dev/null
         core bugfix: rsyslog messages may not always have FQDN


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2210.0-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rainerscript: do not try to call a function if it does not exist
         gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty
         Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         nsd_ptcp regression fix: remove debugging messages emited to stderr


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: wangkai <13474090681@163.com> - 1.82.0-1
changelog:
  - Update to 1.82.0 because firefox update 140ESR version
  - Synchronize the code from the openEuler-24.03-LTS-SP1 branch
  - Remove rls command


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.8.0-7
changelog:
  - Type:cve
  - CVE:CVE-2023-39325 and CVE-2023-44487
  - SUG:NA
  - DESC:backport CVE-2023-39325 and CVE-2023-44487


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: xinghe <xinghe2@h-partners.com> - 7:4.9-29
changelog:
  - Type:cves
  - ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
  - SUG:NA
  - DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the problem that function cpu_report_result() is called more than once
         fix error handling


author: zhuofeng <zhuofeng2@huawei.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix syssentry fails to be started when cpu_sentry is not installed


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:optimize the handing of cat-cli error msg in cpu_sentry
         over threshold should be warn level log in cat-cli


author: luckky <guodashun1@huawei.com> - 1.0.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix uint8 bug and change page isolation threshold default value


author: luckky <guodashun1@huawei.com> - 1.0.2-20
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: update the commit of the log level and format function of sysSentry


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix period task some bugs
         fix env_file and environ_conf


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix cpu_sentry result when found_fault_cores_number != isolated_cores_number


author: shixuantong <shixuantong1@h-partners.com> - 1.0.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add NONZERO_EXITED status for plugin exited with non-zero
         fix process exit status and service kill mode


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: zhangyao <zhangyao108@huawei.com> - 249-91
changelog:
  - add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
        backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
        backport-man-fix-section-number.patch
        backport-repart-fix-invalid-errno-in-log.patch
        backport-sysusers-insist-that-root-group-is-0.patch
        backport-importd-Always-specify-file-unpacked-by-tar.patch
        backport-docs-remove-dev-tty-confusion.patch


author: zhangyao <zhangyao108@huawei.com> - 249-92
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: zhangyao <zhangyao108@huawei.com> - 249-96
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-97
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-Fix-file-descriptor-leak.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-98
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: hugel <gengqihu2@h-partners.com> - 249-102
changelog:
  - sync patch from systemd community
  - add backport-shutdown-close-DM-block-device-before-issuing-DM_DEV.patch
        backport-execute-free-syscall_log-hashmap-when-done.patch
        backport-logind-let-system-wide-idle-begin-at-the-time-logind.patch
        backport-core-fix-assert-when-AddDependencyUnitFiles-is-calle.patch


author: zhangyao <zhangyao108@huawei.com> - 249-89
changelog:
  - add backport-man-fix-directory-for-user-home-bind-mounts.patch
        backport-nspawn-fix-directory-in-logged-error.patch
        backport-test-boot-timestamp-Handle-ERANGE-error.patch


author: gaihuiying <eaglegai@163.com> - 1:0.17-80
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-3
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-5
changelog:
  - tuned-ebpf: Add pid cache to avoid binding one process for multiple times
  - tuned-ebpf: Add "AND" logic of cpu mask in eBPF programmable schedule


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: langfei <langfei@huawei.com> - 2022a-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees.


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: gaihuiying <eaglegai@163.com> - 1.13.2-21
changelog:
  - Type:CVE
  - CVE:CVE-2025-11411
  - SUG:NA
  - DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation


author: yanglongkang <yanglongkang@h-partners.com> - 2.37.2-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
         backport-sys-utils-save_adjtime-fix-memory-leak.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: zhangting <dev03303@linx-info.com> - 2.37.2-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix an issue that mkfs.bfs fix memory leak
  	mkfs.bfs-fix-memory-leaks-and-weak-code.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:revert community patches
         [del] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch


author: markeryang <yanglongkang@h-partners.com> - 2.37.2-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
         [add] backport-lslogins-remove-possible-memory-leaks-coverity-scan.patch
               backport-mkfs.bfs-fix-memory-leaks-and-weak-code.patch
               backport-cfdisk-fix-memory-leak-and-possible-NULL-dereference.patch
               backport-swapoff-clean-up-tag-resolution.patch
               backport-libblkid-befs-fix-underflow.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.37.2-46
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.37.2-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport community patches
           fix off-by-one in maximum last sector calculation


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


author: Funda Wang <fundawang@yeah.net> - 1.20.11-35
changelog:
  - fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
    CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
    CVE-2025-26600, CVE-2025-26601


author: xuyan <xuyan1481@phytium.com> - 1.20.11-41
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:Fix possible Xorg crashes for ps23xx when using  ast and pe2201 bmc card.


author: lingsheng <ultra_planet@qq.com> - 1.20.11-42
changelog:
  - fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231


