<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1079">
<package pkgid="6069acc31fe493cb1d61a025f5102ba7d5e159a91d57eec7d781f93a83cc9f38" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="9c8954abeeb12da8c56fddf71f2175e7719b422a72e39d8ed8a4f3a897b61094" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="cfe8fcea799cd62d988d96adef3fab92bcf658bfe431ed69c6695fcbb4a1d7ab" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="3a3cbd5eb325cef75946d48af3058494498dbaa87a65b7144aefee444333d93d" name="AI4C" arch="src">
  <version epoch="0" ver="0.2.0" rel="2.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
</package>
<package pkgid="d5ad6db5672fde76ae28d6ccfd4f09721630b74ea93aa56d400880a97247a0e8" name="AI4C" arch="src">
  <version epoch="0" ver="0.2.0" rel="3.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-3" date="1728561600">- Update auto-lto model.</changelog>
</package>
<package pkgid="e6ea91213f629cfe7b14477319544ac3c343473db98bc91823ede39a4ffa3826" name="DCF" arch="src">
  <version epoch="0" ver="6.0.0" rel="9.oe2203sp4"/>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 1.0.0-5" date="1685361600">- add loongarch64 support</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1.0.0-6" date="1690545600">- Add riscv64 support</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 5.0.1-7" date="1714996800">- Update version to 5.0.1</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.0.1-8" date="1730116800">- adopt to cmake macro change</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-9" date="1730548800">- Update version to 6.0.0</changelog>
</package>
<package pkgid="73eb0df7fdf4ced1a3ea63729767a62b2d71ccb303e8286aed6c34f9e44482b8" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="4d9bde5a3466cc7a37361081c2b70ca07b810cb7530114a628168134a0c724b7" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="e81d3699b23d6eca97a048b19f0ebb2db8abc54759feb1f040837b295efaee8d" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="aaa9ed0a352fe82da0c61e0b2f24798ca937db28e62e1bcf443cc5b77e71af92" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.12-1" date="1767182400">- update to 7.1.2-12</changelog>
</package>
<package pkgid="225fda336ee727e7307e1e6904f089520e7100ba54647d235df42fd46552786f" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.13" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.12-1" date="1767182400">- update to 7.1.2-12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.13-1" date="1768910400">- Update to 7.1.2-13 for fix CVE-2026-23874, CVE-2026-23876 and CVE-2026-22770</changelog>
</package>
<package pkgid="215cfdec0bdea7c9e171fc29630cf70d32a7f198b4c4c74ae07c1b4c47fe4908" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.15" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.12-1" date="1767182400">- update to 7.1.2-12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.13-1" date="1768910400">- Update to 7.1.2-13 for fix CVE-2026-23874, CVE-2026-23876 and CVE-2026-22770</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.15-1" date="1771848000">- update to 7.1.2-15</changelog>
</package>
<package pkgid="2c23355f5e57946e2c9664cde20953beed6d36b895708f6dd0bea3811c6eb232" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.16" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.12-1" date="1767182400">- update to 7.1.2-12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.13-1" date="1768910400">- Update to 7.1.2-13 for fix CVE-2026-23874, CVE-2026-23876 and CVE-2026-22770</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.15-1" date="1771848000">- update to 7.1.2-15</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.16-1" date="1772971200">- update to 7.1.2-16</changelog>
</package>
<package pkgid="da9ca59c09afe8339ad5017f75aac17ee4346498404366a19d159e0575a04234" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.12-1" date="1767182400">- update to 7.1.2-12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.13-1" date="1768910400">- Update to 7.1.2-13 for fix CVE-2026-23874, CVE-2026-23876 and CVE-2026-22770</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.15-1" date="1771848000">- update to 7.1.2-15</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.16-1" date="1772971200">- update to 7.1.2-16</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.18-1" date="1774267200">- update to 7.1.2-18</changelog>
</package>
<package pkgid="956bd94a7275213fa776b8cbf513eea3cfb2eab0126f930e15fdf335ca7ad15a" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.2" rel="1.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.11-3" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1:7.1.1.15-1" date="1698062400">- Update to 7.1.1.15</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
</package>
<package pkgid="d50beaa60e4a90740e2101878fcae0546c8950e83bfe94c509cc23c0350747ef" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.2" rel="2.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.11-3" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1:7.1.1.15-1" date="1698062400">- Update to 7.1.1.15</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
</package>
<package pkgid="2e692194cba1aa882a69ea5058aaebdaac873138b2692c8b3545f47ad117ffbf" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.7" rel="1.oe2203sp4"/>
  <changelog author="wulei &lt;wu_lei@hoperun.com&gt; - 1:7.1.1.15-1" date="1698062400">- Update to 7.1.1.15</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
</package>
<package pkgid="39bcd29ee1ad911a9636693f509bee9d4092b8ce488e8b43798b771fddb4c288" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.8" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
</package>
<package pkgid="dd8b2ca7db47c758ae3fabcf9a9ccae2bb8905819c3fc14231670d1540e4e01b" name="ImageMagick" arch="src">
  <version epoch="1" ver="7.1.2.9" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-2" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.15-3" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.15-4" date="1755259200">- Fix CVE-2025-55004, CVE-2025-55005, CVE-2025-55154, CVE-2025-55160</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-1" date="1756382400">- Update to 7.1.2.2 for fix CVE-2025-55212, CVE-2025-55298, CVE-2025-57803</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.2.2-2" date="1757332800">- Fix CVE-2025-57807</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.7-1" date="1760529600">- update to 7.1.2-7</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.8-1" date="1761480000">- update to 7.1.2-8</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:7.1.2.9-1" date="1764590400">- update to 7.1.2-9</changelog>
</package>
<package pkgid="15de2caabf11062491a48fb6d0d64e2a4b777b4fa5f9e604935607530d845ac3" name="LibRaw" arch="src">
  <version epoch="0" ver="0.20.2" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
  <changelog author="hdliu &lt;hdliu@linx-info.com&gt; - 0.20.2-8" date="1745236800">- Fix CVE-2025-43963</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.20.2-9" date="1746532800">- Fix CVE-2025-43961,CVE-2025-43962 and CVE-2025-43964</changelog>
</package>
<package pkgid="947fdb92938c9780332b7b04693ad324eb4af4a6e625e668057661c84041a1a3" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.32.12" rel="24.oe2203sp4"/>
  <changelog author="caokeming&lt;caokeming@huawei.com&gt; - 1:1.32.12-21" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:glib-aux fix atomic pattern in nm_ref_string_unref</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:1.32.12-22" date="1753963200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix display of changelog</changelog>
  <changelog author="qinxue &lt;qinxue6@h-partners.com&gt; - 1:1.32.12-23" date="1770897600">- Type:CVE
- CVE:CVE-2025-9615
- SUG:NA
- DESC:fix CVE-2025-9615</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 1:1.32.12-24" date="1773144000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:drop ioctl fallback for finding veth's peer</changelog>
</package>
<package pkgid="37efd0e8add4cf451f3089135624baa73ce9eeaaba519c77ebfe386b8137eb7b" name="NetworkManager-libreswan" arch="src">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="3e2b83ddf81123bcc1e258cb8dac94115fef7113187e64e8e148096def093977" name="OpenEXR" arch="src">
  <version epoch="0" ver="3.1.5" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.1.5-2" date="1708948800">- Fix CVE-2023-5841</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-4" date="1763553600">- Fix CVE-2025-64181</changelog>
</package>
<package pkgid="79dd0e45ae3c4404f696c21ac11ec8ab684aa249ccf2a7c519c8cd90cd695037" name="OpenEXR" arch="src">
  <version epoch="0" ver="3.1.5" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-3" date="1713355200">- Fix CVE-2024-31047</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.1.5-4" date="1763553600">- Fix CVE-2025-64181</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-5" date="1772712000">- fix CVE-2026-27622</changelog>
</package>
<package pkgid="845082fead643d1c936f82e7ad8417161a683ff6cbca40698cfb5d1feac252d8" name="OpenIPMI" arch="src">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="171f4d77db3e3a0b0049c2ece45aa9a184eb908e6de2680f2decd109130bb507" name="abrt" arch="src">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="aac63d7496c4d82b977cddb5695eb23e7f9aa02b028e3b12227d19dd7e86c25e" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20220623.1" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-6" date="1740398400">- Type:cves
- CVE:CVE-2025-0838
- SUG:NA
- DESC:fix CVE-2025-0838</changelog>
</package>
<package pkgid="9b5eb1819fe38ba3d49e5db64ee33abec8dbfd8ee8be2290987a343df9082f53" name="aide" arch="src">
  <version epoch="0" ver="0.17.4" rel="8.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.17.4-4" date="1720094400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport upstream patch to fix error condition checking</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.17.4-5" date="1736424000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport upstream patch to use signal safe write function in signal handler</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.17.4-6" date="1744891200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport upstream patch to fix double free for SIGUSR1</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.17.4-7" date="1751976000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix history changelog</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 0.17.4-8" date="1755259200">- Type:CVE
- ID:CVE-2025-54389 CVE-2025-54409
- SUG:NA
- DESC: fix CVE-2025-54389 CVE-2025-54409</changelog>
</package>
<package pkgid="dfb1df60160f18c9a8abaa1601ffa2b19ba005ec0286f4bd984ae4c77b07c1cb" name="alsa-lib" arch="src">
  <version epoch="0" ver="1.2.5.1" rel="4.oe2203sp4"/>
  <changelog author="wangxiao &lt;wangxiao184@qq.com&gt; - 1.2.5.1-4" date="1770120000">- fix CVE-2026-25068
- remove empty alsa-ucm-conf.patch</changelog>
</package>
<package pkgid="aa38e6acd32cb500cd9948354c8828f270a5ed5a2b2c46fc91491b61a09be001" name="ansible" arch="src">
  <version epoch="0" ver="2.9.27" rel="5.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
</package>
<package pkgid="bdf3967d548aa968c22a94a76ae5d2d631b3ef48ccd90cbddcae33122f0c699a" name="ansible" arch="src">
  <version epoch="0" ver="2.9.27" rel="6.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
</package>
<package pkgid="2be1ee861ad38a71b03f2c0b995bb0040df5cd2aa933a46c8c0d656f8215103c" name="ansible" arch="src">
  <version epoch="0" ver="2.9.27" rel="7.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-7" date="1743508800">- Fix CVE-2023-5764</changelog>
</package>
<package pkgid="2439801fb219fce16b0056b77807b1b58e2a0993ab2472be42cc259ff70352eb" name="apache-commons-beanutils" arch="src">
  <version epoch="0" ver="1.9.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.9.4-4" date="1751371200">- Fix CVE-2025-48734</changelog>
</package>
<package pkgid="019f33730e27271f0b890c627f1aa5d7daff982be05474460da1de66c580db73" name="apache-commons-fileupload" arch="src">
  <version epoch="0" ver="1.4" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4-3" date="1751284800">- Fix CVE-2025-48976</changelog>
</package>
<package pkgid="ed59dd23ab21f5ad078eeeed502930b6566e3a0dfa4964f2bcf71a378b28b8cc" name="apache-commons-lang" arch="src">
  <version epoch="0" ver="2.6" rel="24.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.6-24" date="1754481600">- Fix CVE-2025-48924</changelog>
</package>
<package pkgid="2637046dedfaf29967dfde85e57d654307467c45c83126ac02edf5ea317bc87e" name="apache-commons-lang3" arch="src">
  <version epoch="0" ver="3.18.0" rel="1.oe2203sp4"/>
  <changelog author="liyajie&lt;liyajie15@h-partners.com&gt; - 3.18.0-1" date="1753099200">- Upgrade version to 3.18.0</changelog>
</package>
<package pkgid="c74b6650c5ec26c42e9065f8689414a85a58f7dc38ac76561dc5b6923667013f" name="apache-commons-vfs" arch="src">
  <version epoch="0" ver="2.1" rel="16.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.1-16" date="1753790400">- Fix CVE-2025-27553</changelog>
</package>
<package pkgid="789a155ec9cdaa3e3dfc86cae268f7f77dfa52bee8ac42925b89e60cc3f2a79a" name="apache-mime4j" arch="src">
  <version epoch="0" ver="0.8.3" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.8.3-2" date="1709208000">- Fix CVE-2024-21742</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.8.3-3" date="1758110400">- Fix CVE-2022-45787</changelog>
</package>
<package pkgid="daa534b34ceb7cf8b46d56c6076c42a849f18486fd767b8702666242a76b5594" name="apache-mina" arch="src">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="c61a2b06b86720ebf9375da313784efe4209571d34752a8b6213baa39a9f32cd" name="apache-mina" arch="src">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="14cc60b23dd59fc8bba6e427f796addc7e4afde39bbbb4f9d689baacc52aaef1" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.12.1" rel="1.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; -2.9-1" date="1688731200">- Upgrade to 2.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9-2" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.9-3" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9-4" date="1728993600">- Fix CVE-2024-6287</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.12.0-1" date="1732708800">- Update to 2.12.0
- Bootloader Images:
    * remove unused plat_try_next_boot_source
- Architecture:
    *Branch Record Buffer Extension (FEAT_BRBE)
    * allow RME builds with BRBE
- Arm:
    * avoid stripping kernel trampoline
    * add DRAM memory regions that linux kernel can share
    * add optee specific mem-size attribute
    * add secure uart interrupt in device region
    * enable FEAT_MTE2
    * fix the FF-A optee manifest by adding the boot info node
    * update the memory size allocated to optee at EL1
- Intel:
    * add cache invalidation during BL31 initialization
    * add in JTAG ID for Linux FCS
    * add in missing ECC register
    * add in watchdog for QSPI driver
    * bridge ack timing issue causing fpga config hung
    * correct macro naming
    * f2sdram bridge quick write thru failed
    * fix bridge enable and disable function
    * fix CCU for cache maintenance
    * flush L1/L2/L3/Sys cache before HPS cold reset
    * implement soc and lwsoc bridge control for burst speed
    * refactor SDMMC driver for Altera products
    * remove redundant BIT_32 macro
    * software workaround for bridge timeout
    * update Agilex5 BL2 init flow and other misc changes
    * update Agilex5 warm reset subroutines
    * update all the platforms hand-off data offset value
    * update CCU configuration for Agilex5 platform
    * update mailbox SDM printout message
    * update memcpy to memcpy_s ([e264b55]
    * update outdated code for Linux direct boot
    * update preloaded_bl33_base for legacy product
    * update sip smc config addr for agilex5
    * update the size with addition 0x8000 0000 base</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.12.1-1" date="1742472000">- Update to 2.12.1 for fix CVE-2024-7881 and CVE-2024-5660</changelog>
</package>
<package pkgid="97ed7464eb161f527e2e62eb29d9a137376d4fe78f004f480887ad8104921e68" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.3" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
</package>
<package pkgid="2a93f8b9bc68fb0a4bea53e39699bbb2441fdb6bb79e1c56c6780436c42dce04" name="arm-trusted-firmware" arch="src">
  <version epoch="0" ver="2.3" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.3-6" date="1734350400">- Fix CVE-2024-6285 CVE-2024-6287</changelog>
</package>
<package pkgid="95fc2585dc5112a2a6fc61e8dd9cb671b227db069eba30556cf779384ae95d3c" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="12.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.2.4-8" date="1767787200">- Fix CVE-2025-11277 and CVE-2025-2152</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-9" date="1769083200">- Type:CVE
- CVE:CVE-2025-5166
- SUG:NA
- DESC:fix CVE-2025-5166</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-10" date="1769428800">- Type:CVE
- CVE:CVE-2025-5165 CVE-2025-3549
- SUG:NA
- DESC:fix CVE-2025-5165 CVE-2025-3549</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-11" date="1769515200">- Type:CVE
- CVE:CVE-2025-5168
- SUG:NA
- DESC:fix CVE-2025-5168</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 5.2.4-12" date="1769688000">- Type:CVE
- CVE:CVE-2025-3548
- SUG:NA
- DESC:fix CVE-2025-3548</changelog>
</package>
<package pkgid="dfa1692d28c73b7954a05351be9f5e9d95c0f40d9765f3701137bece8c8cc5d2" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="13.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.2.4-8" date="1767787200">- Fix CVE-2025-11277 and CVE-2025-2152</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-9" date="1769083200">- Type:CVE
- CVE:CVE-2025-5166
- SUG:NA
- DESC:fix CVE-2025-5166</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-10" date="1769428800">- Type:CVE
- CVE:CVE-2025-5165 CVE-2025-3549
- SUG:NA
- DESC:fix CVE-2025-5165 CVE-2025-3549</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 5.2.4-11" date="1769515200">- Type:CVE
- CVE:CVE-2025-5168
- SUG:NA
- DESC:fix CVE-2025-5168</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 5.2.4-12" date="1769688000">- Type:CVE
- CVE:CVE-2025-3548
- SUG:NA
- DESC:fix CVE-2025-3548</changelog>
  <changelog author="majianhan &lt;majianhan@kylinos.cn&gt; - 5.2.4-13" date="1773057600">- Type:CVE
- CVE:CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
- SUG:NA
- DESC:fix CVE-2025-2752 CVE-2025-2754 CVE-2025-2755 CVE-2025-2756 CVE-2025-5200 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204</changelog>
</package>
<package pkgid="85830b737cdf65eacb124cd942df885acf82c5f3e590b14aa38041496da00098" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="e0b9bb53a9b0922814f80676ac4d4ebfaf988963ef8034303c3b47c64c47f598" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="632d857bc184f5c9bf82eb04711e9cdc11baaa995371d74d628b33e278ed2485" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="b0bd9e2ca690643fdf1752f59e99e4d029e6e8506c167391f5f171b778adc214" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="8ed0710073c222697cc3ee3a431a400ae535c9d738a92829c6e3e07d81d4ecf4" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="5c7718653195ce30b022a932542fcbf011c8d8b5c19370688619dc4ca257dada" name="assimp" arch="src">
  <version epoch="0" ver="5.2.4" rel="8.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.2.4-8" date="1767787200">- Fix CVE-2025-11277 and CVE-2025-2152</changelog>
</package>
<package pkgid="c10fccaad41f2caf746dca4d27b0765a6752ca318a807827079c294cb1e56cea" name="atf" arch="src">
  <version epoch="0" ver="0.21" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="eb75e7f4f0109a76b4a6f690d94af4f8e72b569ae522b79bdb064e190791189a" name="audiofile" arch="src">
  <version epoch="0" ver="0.3.6" rel="30.oe2203sp4"/>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 0.3.6-29" date="1761307200">- Fix CVE-2025-50950</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 0.3.6-30" date="1762516800">- Fix CVE-2019-13147</changelog>
</package>
<package pkgid="9928869705e625485595a72509abb8c7a6e460457aad46b603370274be30d3d2" name="augeas" arch="src">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="02803faa65a3a1afccfc83f91969449c9e76d1cd30855d9783276f9664934823" name="authd" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1757073600">- Use make_install to instead of deprecated macro makeinstall</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-5" date="1757592000">- Define CFLAGS and LDFLAGS to provide required options for compiling</changelog>
</package>
<package pkgid="6747b461c8106586b6372c3d15eefb09723fd1db5b458a6af2bd84e3ceec74b3" name="autogen" arch="src">
  <version epoch="0" ver="5.18.16" rel="5.oe2203sp4"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 5.18.16-4" date="1720699200">- Add version number for Obsoletes</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 5.18.16-5" date="1769083200">- fix CVE-2025-8746</changelog>
</package>
<package pkgid="0a13d10c50a82e03b262ef0d6a4700aa456bf64f0ca51a9e78a97dbc8ef28f47" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="3210b2f559568c923fdd7aeab89c6ee07dd1da0e002cb9e85df893bc06a46080" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="24.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-24" date="1757332800">- fix CVE-2024-52615 CVE-2024-52616</changelog>
</package>
<package pkgid="c2f6308e0650f729984311b2a80d8346edc8d8f718544cf0ea91f232718ed1af" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="25.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-24" date="1757332800">- fix CVE-2024-52615 CVE-2024-52616</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 0.8-25" date="1768564800">- fix CVE-2025-68471 CVE-2025-68468 CVE-2025-68276</changelog>
</package>
<package pkgid="122763dd37be71cad2d4071a2882d99317de2dac95db409a432faeb393411d99" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="26.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-24" date="1757332800">- fix CVE-2024-52615 CVE-2024-52616</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 0.8-25" date="1768564800">- fix CVE-2025-68471 CVE-2025-68468 CVE-2025-68276</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-26" date="1769342400">- fix CVE-2026-24401</changelog>
</package>
<package pkgid="6f750dcdc74f168435299e35e40c6a0051b54081610a3dbc9bc74e0348e1fc83" name="aws-sdk-cpp" arch="src">
  <version epoch="0" ver="1.11.327" rel="3.oe2203sp4"/>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-1" date="1730980800">- Initial package</changelog>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-2" date="1732276800">- fix bug</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.11.327-3" date="1732708800">- adopt to new cmake macro
- split out devel package</changelog>
</package>
<package pkgid="0290b5b387adb58dccb8b0169903c16bad510f4aaab69f37986571b9dba3af06" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="fe30eca92dbef0bb61e4780a3f0d8d079fe413825672f5f346611b56ada508a5" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="9fd5443f43de68234146eac897eed4db5e564bdd27a4c7d063a7175b7a861edb" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="cae6c1f05d57a5dfa30eb6ce52beeb19cbe7e3253f490d9e354d76521ff5e732" name="bind" arch="src">
  <version epoch="32" ver="9.16.23" rel="28.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 32:9.16.23-27" date="1753272000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ensure proper 64-bit alignment in quantize()</changelog>
  <changelog author="tangce &lt;tangce1@huawei.com&gt; - 32:9.16.23-28" date="1762344000">- Type:CVE
- CVE:CVE-2025-40778,CVE-2025-40780
- SUG:NA
- DESC:fix CVE-2025-40778,CVE-2025-40780</changelog>
</package>
<package pkgid="8ae287ee13abe1416f0d0a0d4e068954b8ebada3e9839eb6e646ee4746ee7d0d" name="bind-dyndb-ldap" arch="src">
  <version epoch="0" ver="11.10" rel="3.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-2" date="1710936000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-3" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed for bind CVE-2024-1737</changelog>
</package>
<package pkgid="930828bd033ec201778f3d4834cc385cfc476fa7546e79a31e1bead1ed328b4d" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="9116f87fcf8496d20c30ae9aaec249db342c7f06cc2bc9f4126dbba8ab7b322d" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="a5af052a412dba86a646881e2f04aab817b9545afe12baa3276bde5e34ab6137" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="36.oe2203sp4"/>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-33" date="1753185600">- Add support for Sw64 EFI (efi-*-sw_64).</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-34" date="1755604800">- [NFC] format patch names</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 2.37-35" date="1755691200">- Fix CVE-2025-7545:objcopy: Don't extend the output section size</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-36" date="1756555200">- Fix CVE-2022-44840, CVE-2025-5244, CVE-2025-5245, CVE-2025-7546</changelog>
</package>
<package pkgid="e2544c4b7ec89c6bed2d8a6c9f8b861b793afa048b387dd0c3ed6028149c6de9" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="38.oe2203sp4"/>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-33" date="1753185600">- Add support for Sw64 EFI (efi-*-sw_64).</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-34" date="1755604800">- [NFC] format patch names</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 2.37-35" date="1755691200">- Fix CVE-2025-7545:objcopy: Don't extend the output section size</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-36" date="1756555200">- Fix CVE-2022-44840, CVE-2025-5244, CVE-2025-5245, CVE-2025-7546</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.37-37" date="1756987200">- backport PR29171 to fix invalid read causing SIGSEGV</changelog>
  <changelog author="zengyao &lt;zengy@teligen.net&gt; - 2.37-38" date="1757332800">- fix SW patch</changelog>
</package>
<package pkgid="784e5a40dd5c20f960dca54fafed12b2d82fce6b56e204f32396b36025e2f65f" name="bison" arch="src">
  <version epoch="0" ver="3.8.2" rel="3.oe2203sp4"/>
  <changelog author="yueyuankun &lt;yueyuankun@kylinos.cn&gt; - 3.8.2-3" date="1756209600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix syntax error on SymbolKind.toString method
       fix interface syntax error</changelog>
</package>
<package pkgid="3646180e32ecc60e118ae87b8fe9bb0e83095d978bbc92a0ae5a7d7537c2ae82" name="brotli" arch="src">
  <version epoch="0" ver="1.0.9" rel="4.oe2203sp4"/>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 1.0.9-4" date="1762430400">- fix CVE-2025-6176</changelog>
</package>
<package pkgid="836bf2db0a190424a498eb0447e8d4af49ff0654da1670e2b2b0326568f7a0f2" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="0a3822cd14876fbd3175c23ce30dabfb4e30eaa96de10fdd9e1e852352135a87" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="e63f0c5fa4dba4e94d88fbba00ed6a363468f4b488b753c0ce8d1295988b51a2" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="a2e836dc9aa36e70149063d2e5eaae00d2e9e5687fedd62e1fb355a4d056b359" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="5877fe146b7b33f536a09406a38913fc9ec9233b0272d7bf6e2e52a702ff8198" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="26.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-26" date="1758196800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2024-58251</changelog>
</package>
<package pkgid="95121255b218f5faf33b964bd842eae44e4cf16c986bd14f0a50e8ba746e5a51" name="busybox" arch="src">
  <version epoch="1" ver="1.34.1" rel="28.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-26" date="1758196800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2024-58251</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 1:1.34.1-27" date="1772625600">- Type:enhancement
- Id:NA
- SUG:NA
- DESC:Run test cases during build</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 1:1.34.1-28" date="1773057600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2026-26157 CVE-2026-26158</changelog>
</package>
<package pkgid="1886452e8cc1c0131ab3b545b776898d1ec24788bfc2efc5807c5061dabfe094" name="bwa" arch="src">
  <version epoch="0" ver="0.7.17" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.7.17-2" date="1765195200">- Fix CVE-2019-10269</changelog>
</package>
<package pkgid="09bb4123bd7c6297fe9e5887c0f97fccbbbc00b3219d62164cb2d65ce7df3837" name="c-ares" arch="src">
  <version epoch="0" ver="1.18.1" rel="9.oe2203sp4"/>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 1.18.1-9" date="1774267200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix test failure</changelog>
</package>
<package pkgid="77c5029277a5be07b951ebb6b0898d632d91861efe5d5f7b10cd75d93ebdcc8e" name="c3p0" arch="src">
  <version epoch="0" ver="0.9.5.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.9.5.4-4" date="1773403200">- Fix CVE-2026-27830</changelog>
</package>
<package pkgid="69786268c238cccac9eb215a2c955e2db71d4ca684c9934f25348f084258c695" name="ceph" arch="src">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="f83458a78bb24f69ea53cfb4f92abe87d1deb62dfe878fc28807297f3f8627cc" name="ceph" arch="src">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="6e4ab7c6ae55cf6e2ee712844527a77ea72e422ad882ac140ca015ebe8cfa7bc" name="ceph" arch="src">
  <version epoch="2" ver="16.2.7" rel="25.oe2203sp4"/>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
  <changelog author="wang kun &lt;wang_kun1@hoperun.com&gt; - 2:16.2.7-23" date="1758110400">- fix CVE-2021-3979</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylin.cn&gt; - 2:16.2.7-24" date="1763726400">- fix-CVE-2023-43040</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 2:16.2.7-25" date="1769688000">- fix CVE-2024-47866</changelog>
</package>
<package pkgid="48b9b721eb0d4ea11d4c83e90e1f7c39c9eea7b147dc60c89383b0c91bde26cb" name="chkconfig" arch="src">
  <version epoch="0" ver="1.21" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="c225f26192553a00ab9657f9b87d11b667994d9bd7bcb3dc37c7cce2a843f6ea" name="chkconfig" arch="src">
  <version epoch="0" ver="1.21" rel="3.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.21-3" date="1757505600">- fix a double free error</changelog>
</package>
<package pkgid="e350be3890341381a6502305850bcc2a1b21d91e66512c9dc8f2644ba2827ba0" name="chrony" arch="src">
  <version epoch="0" ver="4.1" rel="7.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683547200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.1-7" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="f0bf9cc01969bbc9767d44cb40ba6972635796da9900decf317145ed23bfcf3f" name="chrpath" arch="src">
  <version epoch="0" ver="0.16" rel="14.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="5bf0cc7bb7ac8ec6fbbbcbec89350b791d267e6230574af0e98c9489d99487ae" name="cjson" arch="src">
  <version epoch="0" ver="1.7.15" rel="6.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
</package>
<package pkgid="4e19051b651fb59fba3ed6741082c530e89225570032df59db96d8b1fb33cf2e" name="cjson" arch="src">
  <version epoch="0" ver="1.7.15" rel="7.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-7" date="1759147200">- Fix CVE-2025-57052</changelog>
</package>
<package pkgid="149f50b32c9ec092098c069375a7f50fd3c51139753c7b0c7195ac98b69e2988" name="clamav" arch="src">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="08e7becfeda1d7e03ee80d0ce9079eb7721df2a416cb49853a9d3aa96bf6317a" name="clamav" arch="src">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="38ccb22f84837f1b4b4ae234b3bab0891ec6f123574a4bdf9ccbe68a176a1ad8" name="cloud-init" arch="src">
  <version epoch="0" ver="21.4" rel="36.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-27" date="1715169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ec2: Do not enable dhcp6 on EC2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-31" date="1731585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: properly handle blank lines in fstab</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-32" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:chore: set recursive=False for ensure_dir if parent path is "/"
       test(openstack): Test bond mac address
       fix: Ensure properties for bonded interfaces are properly translated</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-33" date="1741176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-34" date="1742299200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 21.4-35" date="1751889600">- Type:cve
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6174</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-36" date="1751889601">- Type:CVE
- CVE:CVE-2024-11584
- SUG:NA
- DESC:fix CVE-2024-11584</changelog>
</package>
<package pkgid="df4b1981b891140b1ffe09f73fc6ee2f346900c8f8fbd403c4b976b04aa0f855" name="cloud-init" arch="src">
  <version epoch="0" ver="21.4" rel="37.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-31" date="1731585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: properly handle blank lines in fstab</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-32" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:chore: set recursive=False for ensure_dir if parent path is "/"
       test(openstack): Test bond mac address
       fix: Ensure properties for bonded interfaces are properly translated</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-33" date="1741176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-34" date="1742299200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 21.4-35" date="1751889600">- Type:cve
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6174</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-36" date="1751889601">- Type:CVE
- CVE:CVE-2024-11584
- SUG:NA
- DESC:fix CVE-2024-11584</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-37" date="1764590400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix: Add get_connection_with_tls_context() for requests 2.32.2+</changelog>
</package>
<package pkgid="fbe5fb80d0dec2526adf8365803600ee314784d2e78e197299bb764cfe2a743f" name="cmake" arch="src">
  <version epoch="0" ver="3.22.0" rel="11.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-7" date="1702555200">- Fix abnormal empty link in cmake-data package</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 3.22.0-8" date="1706875200">- Remove Windows_TemporaryKey.pfx</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.22.0-9" date="1714305600">- Fix messy code for openssl-1.1.1wa version</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.22.0-10" date="1737633600">- remove the architecture judgment in the patches section;
- include all patches in the source package.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.22.0-11" date="1756123200">- fix CVE-2025-9301</changelog>
</package>
<package pkgid="1dd9c99000e8ba4d3d12578a3b83d9facd3e40270808c28d58634144164f25ba" name="cockpit" arch="src">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="2f17ff590ac4a622c84595912bdfc071b0a35e9c27e2a2f82a409373516a86d9" name="cogl" arch="src">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="ae140315669d2ed892c528d98e993e6cfcdadce015efa96ae53d222d03162601" name="containerd" arch="src">
  <version epoch="0" ver="1.2.0" rel="321.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-318" date="1708689600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 1.2.0-319" date="1709553600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:FIFOSet.Close() check if FIFOSet is nill to prevent NPE</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.2.0-320" date="1718712000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 sw_64 riscv64 to THP patch</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-321" date="1742299200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2024-40635</changelog>
</package>
<package pkgid="1fd16bc9f429be725f5c2d90a7de3c38a0943451f370c2d6d803b54c5a9ffb4c" name="containerd" arch="src">
  <version epoch="0" ver="1.2.0" rel="324.oe2203sp4"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-318" date="1708689600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 1.2.0-319" date="1709553600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:FIFOSet.Close() check if FIFOSet is nill to prevent NPE</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.2.0-320" date="1718712000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 sw_64 riscv64 to THP patch</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-321" date="1742299200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2024-40635</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1.2.0-322" date="1755259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix: Remove `LimitNOFILE` from `containerd.service`</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1.2.0-323" date="1756382400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix ctr snapshot mount produce invalid mount command for empty option.</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-324" date="1763640000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2024-25621 and CVE-2025-64329</changelog>
</package>
<package pkgid="477e5561aa140bb82ac860d667f9294c57e3a9bbde9c3096e825343f918499b3" name="coreutils" arch="src">
  <version epoch="0" ver="9.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-11" date="1696766400">- sync patches from community
- add backport-who-fix-only-theoretical-overflow.patch
      backport-tac-handle-short-reads-on-input.patch
      backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
      backport-who-don-t-crash-if-clock-gyrates.patch
      backport-doc-od-strings-clarify-operation.patch
      backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-12" date="1700913600">- skip testcase for overlay filesystem because of no inotify_add_watch
  add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-13" date="1701172800">- fix typo in zh_CN.po</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 9.0-14" date="1718193600">- sort: don't trust st_size on /proc files</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.0-15" date="1719316800">- remove arch judgement at patch that support sw</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-16" date="1726056000">- sync patches from community
- add backport-pinky-fix-string-size-calculation.patch
      backport-cksum-consistently-validate-length-attributes.patch
      backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
      backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
      backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
      backport-coreutils-df-direct.patch
      backport-df-fix-memory-leak.patch
      backport-ls-avoid-triggering-automounts.patch
      backport-pr-don-t-use-uninitialized-var.patch
      backport-stat-only-automount-with-cached-never.patch
      backport-touch-fix-aliasing-bug.patch
      backport-putenv-Don-t-crash-upon-out-of-memory.patch
      backport-head-off_t-not-uintmax_t-for-file-offset.patch
      backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
      backport-shuf-fix-randomness-bug.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-17" date="1732795200">- sync patches from community
- add backport-head-fix-overflows-in-elide_tail_bytes_pipe.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-18" date="1741003200">- sync patches from community
- add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
      backport-sort-fix-debug-buffer-overrun.patch
      backport-tac-avoid-out-of-bounds-access.patch
      backport-yes-avoid-failure-on-CHERI-protected-systems.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-19" date="1748260800">- backport: tail: avoid infloop with -c on /dev/zero</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.0-20" date="1748692800">- fix CVE-2025-5278</changelog>
</package>
<package pkgid="04680cf712eba07d6f473b566dcbcdffc021060f95942b2261438cc3f2dff60e" name="corosync" arch="src">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="f336388e02aab8d5a1bfedf003b6411988447840e4b382309f446cefeb4947d1" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.12.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
</package>
<package pkgid="9cfdd493a689a54b57628b23470f858c394e2ff6321f7f09c11349687fcfff81" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.12.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
</package>
<package pkgid="b5b8da65ba824632c67f2641b50df409abde5ddb118c6e468894dacbfce8649a" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.22.0" rel="1.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
</package>
<package pkgid="d0a1f08a68b3980e28f3739c7dfe3d3a592b16def7149c77ad8030b612110c1e" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.22.0" rel="2.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
</package>
<package pkgid="3453592475d7a2139313c300bfedecaa9ddaaa97e16eb55c729bf1d2251e5652" name="cpp-httplib" arch="src">
  <version epoch="0" ver="0.27.0" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.27.0-1" date="1765195200">- Update to 0.27.0 for fix CVE-2025-66570 and CVE-2025-66577</changelog>
</package>
<package pkgid="c6e928a86a4594ca8c85e9971128ce9102f0dfd55509677cb2ef44f694f0a153" name="cracklib" arch="src">
  <version epoch="0" ver="2.9.8" rel="3.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.9.8-3" date="1759060800">- Make buffer static and avoid returning stack-allocated memory</changelog>
</package>
<package pkgid="42bb7849618bfc8e81732f2e6942069e1e20187952114d6b83c8bbcacd01c924" name="crash" arch="src">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="71e112ba19b35cc18d10b83da1be5d3767c39d0e2cc419474ca1f6f2fde05d92" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="62ca722f86b369118f3b5ada3d6f1545c3efca37b1f2041bdf46e76684a85c99" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="50f3cb037d494784bcb2fbfeb5aec188223c82d374c83ba76a4336bf46eeae02" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="a4ca1a432b2d6822e7769f0569285539edbe6aed20b61c59f749b950224c6243" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="15.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-15" date="1757678400">- fix CVE-2025-58060, CVE-2025-58364
- move www files into main package due to requirement by web interface</changelog>
</package>
<package pkgid="bb8423810556b9ad21e177555ca9e2c4f9d2485497c681640ea6696845852b8a" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="16.oe2203sp4"/>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-15" date="1757678400">- fix CVE-2025-58060, CVE-2025-58364
- move www files into main package due to requirement by web interface</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-16" date="1764590400">- fix CVE-2025-61915</changelog>
</package>
<package pkgid="f25e6bad9ba774d0a188a0c8f0835d62f4e0f9da2e4fc44401584dae7bcb7ada" name="cups" arch="src">
  <version epoch="1" ver="2.4.0" rel="18.oe2203sp4"/>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-15" date="1757678400">- fix CVE-2025-58060, CVE-2025-58364
- move www files into main package due to requirement by web interface</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-16" date="1764590400">- fix CVE-2025-61915</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:2.4.0-17" date="1765454400">- fix CVE-2025-58436</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:2.4.0-18" date="1765800000">- backport upstream to add CVE-2025-58436's after patch</changelog>
</package>
<package pkgid="dfe11a9a070ecd0f619fe9f6bb383a8ef1f758c0d85ade57d8a5b5d41d7f0d2f" name="cups-filters" arch="src">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="4f6a6d14eac7f363e25c3e41aca3cbf8ef3cfc69c92ee7c3986cbdf6b246f763" name="cups-filters" arch="src">
  <version epoch="0" ver="1.28.9" rel="6.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-6" date="1763121600">- fix CVE-2025-64503 CVE-2025-57812</changelog>
</package>
<package pkgid="d0b1a1d1506410c39283a5a499eb469177884ec88ac5c80e409b5f27bd26895a" name="cups-filters" arch="src">
  <version epoch="0" ver="1.28.9" rel="7.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-6" date="1763121600">- fix CVE-2025-64503 CVE-2025-57812</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-7" date="1764072000">- fix CVE-2025-64524</changelog>
</package>
<package pkgid="1cc1058c1011e9fc29c173b299256fa41fed843c22de60d3a3c9ed922858add5" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="9f322046925bfcc8e8126836d66276e60915cf84582f24f95e85e2053a50bde6" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="36.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
</package>
<package pkgid="de43e11f74f4bcfd5941fdcbcb7d20884b465a4eefd6a54f7cd74fc960f2db39" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="38.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
</package>
<package pkgid="94e92297783946ca3caca260afc3c4a09369c70ae8dbc0e1e1e0108732bdfd8b" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="40.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
</package>
<package pkgid="0cad8cb12e38ff43be1c9b0fde7f9d91a33f1517b7f159953f357c2ec53fd375" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="42.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-41" date="1755518400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_getparam: clear argument only when needed</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-42" date="1757678400">- Type:CVE
- CVE:CVE-2025-9086
- SUG:NA
- DESC:fix CVE-2025-9086</changelog>
</package>
<package pkgid="cb0d0f686ab8fe240f5a7f4aaafa3afeb9ce39851b65aeab3a78fea170d15ead" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="46.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-41" date="1755518400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_getparam: clear argument only when needed</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-42" date="1757678400">- Type:CVE
- CVE:CVE-2025-9086
- SUG:NA
- DESC:fix CVE-2025-9086</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-43" date="1763553600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runtests: don't try to stop stunnel before trying again</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-44" date="1763553601">- Type:CVE
- CVE:CVE-2025-10966
- SUG:NA
- DESC:fix CVE-2025-10966</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-45" date="1764158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix readdir issues
       krb5_gssapi: fix memory leak on error path
       pop3: fix CAPA response termination detection
       libssh: properly free sftp_attributes</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-46" date="1768392000">- Type:CVE
- CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
- SUG:NA
- DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224</changelog>
</package>
<package pkgid="ed1055d72cdfe40a7bae68d9533de418fbb788ae49e06ae8a38ee8a0988ec7bd" name="curl" arch="src">
  <version epoch="0" ver="7.79.1" rel="48.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-41" date="1755518400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_getparam: clear argument only when needed</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-42" date="1757678400">- Type:CVE
- CVE:CVE-2025-9086
- SUG:NA
- DESC:fix CVE-2025-9086</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-43" date="1763553600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runtests: don't try to stop stunnel before trying again</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-44" date="1763553601">- Type:CVE
- CVE:CVE-2025-10966
- SUG:NA
- DESC:fix CVE-2025-10966</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-45" date="1764158400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix readdir issues
       krb5_gssapi: fix memory leak on error path
       pop3: fix CAPA response termination detection
       libssh: properly free sftp_attributes</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-46" date="1768392000">- Type:CVE
- CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224
- SUG:NA
- DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-15079 CVE-2025-15224</changelog>
  <changelog author="zhouyihang &lt;zhouyihang_z@163.com&gt; - 7.79.1-47" date="1769515200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:formdata: validate callback is non-NULL before use
       tftp: correct the filename length check</changelog>
  <changelog author="zhouyihang &lt;zhouyihang_z@163.com&gt; - 7.79.1-48" date="1773662400">- Type:CVE
- CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
- SUG:NA
- DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784</changelog>
</package>
<package pkgid="ce6b6dd65d3176d10b3f7e6d4f7d9f93fbeeaf528c23bded49cbdeb43744c728" name="custodia" arch="src">
  <version epoch="0" ver="0.6.0" rel="8.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 0.6.0-8" date="1764676800">- switch to newer HttpAdapter interface for requests 2.32.2</changelog>
</package>
<package pkgid="790f3cc4e1905d535c324490146e65c4165a92501f61b3134f315517d5b93c61" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="fdfee09e8e2b3f33248871d5b230bc2aa5ff871a9f5679bedae1e3e1f47c02b3" name="dav1d" arch="src">
  <version epoch="0" ver="0.5.2" rel="4.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 0.5.2-4" date="1756382400">- Type:CVE
- CVE:CVE-2024-1580
- SUG:NA
- DESC:fix CVE-2024-1580</changelog>
</package>
<package pkgid="7d6aa59e30d6992e3f9fa7fee29ae1f0ecefbad0de14872b56731c6a8045189a" name="dcraw" arch="src">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="47804eaa2a61cb46cec6d33aa90a33e67272b1b21b12581c8d0ac333cd65a745" name="debugedit" arch="src">
  <version epoch="0" ver="5.0" rel="9.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 5.0-6" date="1691668800">- Add support for sw_64 and loongarch64</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 5.0-7" date="1732881600">- backport upstream patch to avoid tests failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-8" date="1734004800">- backport patches from upstream</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-9" date="1745236800">- find-debuginfo: Fix skip_mini (".gnu_debugdata") handling</changelog>
</package>
<package pkgid="d8d893da65cb413e86607615b43e58680f0a7cd4fe771b303a242519e0881036" name="dejavu-fonts" arch="src">
  <version epoch="0" ver="2.37" rel="3.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.37-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.37-3" date="1722513600">- repair SOURCE file loss</changelog>
</package>
<package pkgid="aaa6695f3eb95738595bc54e47ad906d0ae969864373a760413faab520aaf390" name="deltarpm" arch="src">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="5fd27eb6fb79c4d7383ce035ed947b236fc7b1a74e27b21c9e8b991f8fe55681" name="dhcp" arch="src">
  <version epoch="12" ver="4.4.3" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
  <changelog author="luoguocui &lt;luoguocui@h-partners.com&gt; - 12:4.4.3-10" date="1764244800">- Ignore Wincompatible-pointer-types error when compiling with gcc-14.3</changelog>
  <changelog author="luoguocui &lt;luoguocui@h-partners.com&gt; - 12:4.4.3-11" date="1764244801">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2025-40778</changelog>
</package>
<package pkgid="3baea17986329df9ec79bb69df5d1450038bc701821fafacbb851799fba79d51" name="dhcp" arch="src">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="32e23f2483a38639b58c68e4c54467bf6b5ede5ac39bcf381527050a7f2348a1" name="dhcp" arch="src">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="1b74f9523e9fdc80c3935b6170d1cb5cc09777dc12dff39083b7f88ffe480dbd" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="2bb624185c4bd4f8c806c81a4dded3923f1b5c52083ffb4c4ab245d9735d2d88" name="dnf" arch="src">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="8669a56750555d12a9f0b5598fdfc7de1f7cf11122cf9e9bbd11ce7f074f4bae" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.86" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
</package>
<package pkgid="ffb384aa0d871506d8b3cfe0a992a03447776a976da56829421aa3303784a790" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.86" rel="13.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
  <changelog author="luoguocui &lt;luoguocui@h-partners.com&gt; - 2.86-12" date="1760443200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix bad reply to DHCPCONFIRM messages (wrong message type)
       Fix reply confirm packet when binding-mac-with-ip6 on</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 2.86-13" date="1774440000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix bounds checking in check_ia()
       Fix SEGV in Dbus code
       More fixes for DHCP ops in Dbus when DHCP not configured</changelog>
</package>
<package pkgid="c3f555b45aba28557456b595d84952120099f1f59d658ede0bd1271d4cfeeb9b" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp4"/>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="26e221ddcf28b198c11c28a8c163c4c6fef36811fddbecafc5fe6127514243d5" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="344.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
</package>
<package pkgid="0a91ade37bd5aefc07f16144d3eb3b59dab09cf2ffddb257f45c479c5f36f351" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="345.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-345" date="1733486400">- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623</changelog>
</package>
<package pkgid="5582007b973664b490f38f6099d13d778eea3b02084f603da70196334a2ea4fc" name="docker-engine" arch="src">
  <version epoch="2" ver="18.09.0" rel="347.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-345" date="1733486400">- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-346" date="1740225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 2:18.09.0-347" date="1774440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:rebuild for the golang version with the CVE fixed</changelog>
</package>
<package pkgid="9e38810fdc71526c27212d00c81c0d3f9a948ae26c0e395f303c396d662e547d" name="dovecot" arch="src">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="8ed05fbc5060e0d8505dd9fca4b1f37b3332574cb40a7b78d31422d040174d2f" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="69ffbb3ce288dfb32fb861ab2cba8f988ce421a3f3564bd94031912fa043b9eb" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="8b50168f638b9bd0a301d89d8727f42268cd123cb0670dfbc019604e3638389f" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="24b4421e930f82cf4f56be9ad99c9323b5916750593e1a54fc42c88734acb006" name="dpdk" arch="src">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="ec07fcced3f36883e53ab0067b906cf83612ce080824169beb1272129b384723" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.10" rel="3.oe2203sp4"/>
  <changelog author="Guangxing Deng &lt;dengguangxing@huawei.com&gt; 1.6-1" date="1701432000">- Upgrade dpu-utilities version to 1.6</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
</package>
<package pkgid="31fd3855296fa1a9fbd7afd40521d22440ec9366564334388e986646fe1de326" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.10" rel="4.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
</package>
<package pkgid="60e7617ffe205a6d22e7db2480805503868ce87849cbd13c63c8aab431cf9c79" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.10" rel="5.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
</package>
<package pkgid="b54d3143dc2dfc527f012fa5f451b9ceebc1f236eb115950089a2ce1a5fdf7f8" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.10" rel="6.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
</package>
<package pkgid="fbccf25b71afd80e528ae6c0d826330c01ed7b07a5104a8cd6fa6b2c4c28b506" name="dpu-utilities" arch="src">
  <version epoch="0" ver="1.10" rel="7.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-7" date="1732276800">- Fix rwlock caused schedule bug, change to semaphore</changelog>
</package>
<package pkgid="aefd32065cafae03c1d105db9e1a5c9a504c9dc4376611ce0272242a82c8a958" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.11" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.11-11" date="1701086400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rebuild package to ensure that the upgrade between branches is normal</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-12" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="d5dc73235f96b2b79b5eb2791a27002b0d868ec6774a185e4f131431bc0cc777" name="ed25519-java" arch="src">
  <version epoch="0" ver="0.3.0" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.3.0-5" date="1742558400">- Fix CVE-2020-36843</changelog>
</package>
<package pkgid="32c0ee1c14646c9740b7059af7314c831acc0d37742c893b96044ce9f131222e" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="45fcb5763974a47b8bdee5f528db3e67c8e61eb5b960b97ccee021722bcf22e2" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="8c7b0c4f3e8c24b661037fd8222b3a70d2775086cbd2b7d38a4dbc3547b0e3b2" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="739ba02606c9b78b3b30d1fbb4373f2dcd21f1c31d91f886fc182669a53091ac" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="cdc026a9a3ad4773ca0dc02c972d152fab09602c6b3ae09e12f95ed53987558b" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="acae48d6c3100a35674e3fcfb9f033ff38c2c15789e6d5b8d9df400ff54f414c" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="f215f2766152d1bafdbdc40920fac51168cb8fdb4267ba380454a3e59fb4eb0e" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="83cf5052c072d65fa003ef2e1db1f57e7113b7427c7206272d85abc4e68a6f2e" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="96975b302f2f68ba82930a329e1bf466e9432d3037050c898c4b64da060b10bb" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="28.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
  <changelog author="Zhang Yi &lt;yizhang@cqsoftware.com.cn&gt; - 202011-28" date="1757419200">- fix CVE-2025-3770
- fix CVE-2024-38805</changelog>
</package>
<package pkgid="92bd4d1b8c420e3bc2f1954f0413aee60d5957b0f5446a75e2437265a2af58cb" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="29.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
  <changelog author="Zhang Yi &lt;yizhang@cqsoftware.com.cn&gt; - 202011-28" date="1757419200">- fix CVE-2025-3770
- fix CVE-2024-38805</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-29" date="1760529600">- fix CVE-2025-9230</changelog>
</package>
<package pkgid="63b9866de65941133145d265c22f7aac84c069e2db430c3a94f36b89d4183465" name="edk2" arch="src">
  <version epoch="0" ver="202011" rel="30.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
  <changelog author="Zhang Yi &lt;yizhang@cqsoftware.com.cn&gt; - 202011-28" date="1757419200">- fix CVE-2025-3770
- fix CVE-2024-38805</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-29" date="1760529600">- fix CVE-2025-9230</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-30" date="1773921600">- fix CVE-2026-22795,CVE-2026-22796
- fix CVE-2025-69420
- fix CVE-2025-69421
- fix CVE-2025-68160
- fix CVE-2025-69418
- fix CVE-2025-69419</changelog>
</package>
<package pkgid="6c67ae97ec910758927856879d227ce43c1c21dc41284d366a106268ebad1b84" name="efl" arch="src">
  <version epoch="0" ver="1.25.1" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.25.1-2" date="1722859200">- Build ecore_sdl versioned so. So efl no longer requires efl-devel</changelog>
</package>
<package pkgid="d8d4a40686adafcc72935310c30752391dd822197575f92e059cf02fbe7e4b0e" name="elfutils" arch="src">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="d5327e42d8336dd9a340da1a361a618f582d03b4bff921a082a2f055c7f82b55" name="elfutils" arch="src">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="14831b249951e9563df040d5cad455aba7c63f29ed6fc1c4b75ca82ad3748851" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="94a722c6d40ef1eddbffa6ec25e9f354c109457b7cce37a7e3c5aecf2c7ce80f" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="2f4abd66d24d45147c268554373ea91707def4966abadf2941c4961e17f74fa2" name="emacs" arch="src">
  <version epoch="1" ver="27.2" rel="17.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:27.2-16" date="1762171200">- fix license</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-17" date="1763553600">- fix CVE-2024-53920</changelog>
</package>
<package pkgid="118ffe5bee51ce1e8cf00038320fd61b86bb96c73e026ecdf02ae642b74b965a" name="enscript" arch="src">
  <version epoch="0" ver="1.6.6" rel="22.oe2203sp4"/>
  <changelog author="lvzhonglin&lt;lvzhonglin@inspur.com&gt; - 1.6.6-21" date="1728475200">- update package description</changelog>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 1.6.6-22" date="1736856000">- fix CVE-2018-17942</changelog>
</package>
<package pkgid="2051f7e16d5015d31da2db8bae72474d58625290f15cba049a2ba80bb9730757" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="3e6f4b543d95e64e38207d465eefa69b67116c6e6780baede2fe5ae82f59a630" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="e6181dbd5b4c5ceccc6c0537feecaa6aa00ec70015416357b6cfc8e8b07335e5" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="a63250ef516eceeea4e99f1538c310da76033b574195e5ab7a6c59700ce4ed6f" name="erlang" arch="src">
  <version epoch="0" ver="23.3.4.9" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-8" date="1767614400">- Fix CVE-2025-48038, CVE-2025-48039 and CVE-2025-48041</changelog>
</package>
<package pkgid="6a6db6c714555d52516061ab25ad2830febafff13c612bb99936a5e51e6825ac" name="etcd" arch="src">
  <version epoch="0" ver="3.4.14" rel="11.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
</package>
<package pkgid="200d2409bc644a1393c05fbdbafcfaa626701fded05cd2c7eba0ce4c8cc57394" name="etcd" arch="src">
  <version epoch="0" ver="3.4.14" rel="12.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-12" date="1739880000">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC: backport fix CVE-2023-39325</changelog>
</package>
<package pkgid="f9479d4d0decc27586813d50151c048938f3e3c1b8375b980ce0e32c96bbb81b" name="etcd" arch="src">
  <version epoch="0" ver="3.4.14" rel="13.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-12" date="1739880000">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC: backport fix CVE-2023-39325</changelog>
  <changelog author="wubijie &lt;wubijie@kylinos.cn&gt; - 3.4.14-13" date="1751544000">- Type:CVE
- ID:CVE-2025-4673
- SUG:NA
- DESC:batch fix cve through rebuild</changelog>
</package>
<package pkgid="339d997254976648af6b3ee82ccf1195ff027400b47519b7a01b4f6a695d57e7" name="etcd" arch="src">
  <version epoch="0" ver="3.4.14" rel="6.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.4.14-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
</package>
<package pkgid="504318863b8b2a3407e993f381b08a6584adabcf99feb1f28da3fd0d21293062" name="etcd" arch="src">
  <version epoch="0" ver="3.4.14" rel="7.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
</package>
<package pkgid="4794047ebabcb818f7aed5aa1cffaa676a440765af4762174fa21afb75701cc5" name="exempi" arch="src">
  <version epoch="0" ver="2.5.2" rel="5.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 2.5.2-4" date="1695297600">- CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
- CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
- CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
- CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
- CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
- CVE-2021-42532</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.5.2-5" date="1756814400">- fix CVE-2025-30305, CVE-2025-30306, CVE-2025-30307, CVE-2025-30308,
  CVE-2025-30309</changelog>
</package>
<package pkgid="874bc3e2b7b3fc97183932c81026e025dab47468778f38bb79d0eb914abd5eaa" name="exiv2" arch="src">
  <version epoch="0" ver="0.27.5" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.27.5-4" date="1756728000">- Fix CVE-2025-54080</changelog>
</package>
<package pkgid="0daa543e4a3df2cc1c0e1262629da1f3f46870921b41db699488671d24dfa90d" name="exiv2" arch="src">
  <version epoch="0" ver="0.27.5" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.27.5-4" date="1756728000">- Fix CVE-2025-54080</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 0.27.5-5" date="1757592000">- fix Changelog repetitive packaging</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.27.5-6" date="1772971200">- fix CVE-2026-25884</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.27.5-7" date="1773144000">- Fix CVE-2026-27596, CVE-2026-27631</changelog>
</package>
<package pkgid="cd900ffaecf5f938fc70821adbc5521d48be1956a5232e1162604f55be6dcb32" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="ea3de9e6bf8e199a240e7b88d52ca7499b58ec52e6ea1b41684efbf3b5255f8e" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="9f9fb63946633a6f750d2b895189bd2682608ef9e5957e45fb824fe7773da569" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="4f640291f9f927144a56518058dfc446dd02a4ae572c81236322b661215f8ba4" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="18.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-15" date="1743163200">- fix CVE-2024-8176</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-16" date="1744113600">- backport upstream patches</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-17" date="1760097600">- fix CVE-2025-59375</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-18" date="1760529600">- "#if defined(XML_DTD) || XML_GE == 1" shoud be retained in earlier version.</changelog>
</package>
<package pkgid="9fd1fbbcf9924e984997611c545451c3b726cd2024519b022385da74bc372be8" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="19.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368000">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-15" date="1743163200">- fix CVE-2024-8176</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-16" date="1744113600">- backport upstream patches</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-17" date="1760097600">- fix CVE-2025-59375</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-18" date="1760529600">- "#if defined(XML_DTD) || XML_GE == 1" shoud be retained in earlier version.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-19" date="1761048000">- backport upstream patch</changelog>
</package>
<package pkgid="a9a998d552a6c6ff46b9290c11d5f854c02296bd05e551416c2d1501c4db9c68" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="21.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-15" date="1743163200">- fix CVE-2024-8176</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-16" date="1744113600">- backport upstream patches</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-17" date="1760097600">- fix CVE-2025-59375</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-18" date="1760529600">- "#if defined(XML_DTD) || XML_GE == 1" shoud be retained in earlier version.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-19" date="1761048000">- backport upstream patch</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-20" date="1769342400">- fix CVE-2026-24515</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 2.4.1-21" date="1770206400">- fix CVE-2026-25210</changelog>
</package>
<package pkgid="5fc1cdb69d532ae0e7b3b2a74383e940e3b5e1456066f4f3a61e007082b3e3a6" name="expat" arch="src">
  <version epoch="0" ver="2.4.1" rel="22.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-15" date="1743163200">- fix CVE-2024-8176</changelog>
  <changelog author="zhuofeng &lt;1107893276@qq.com&gt; - 2.4.1-16" date="1744113600">- backport upstream patches</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-17" date="1760097600">- fix CVE-2025-59375</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-18" date="1760529600">- "#if defined(XML_DTD) || XML_GE == 1" shoud be retained in earlier version.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-19" date="1761048000">- backport upstream patch</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-20" date="1769342400">- fix CVE-2026-24515</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 2.4.1-21" date="1770206400">- fix CVE-2026-25210</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 2.4.1-22" date="1774267200">- fix CVE-2026-32776,CVE-2026-32777,CVE-2026-32778</changelog>
</package>
<package pkgid="95906142de20f41a52d60bee639f69586c3b8182b2c2d0dea146107fff081555" name="fcgi" arch="src">
  <version epoch="0" ver="2.4.2" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
</package>
<package pkgid="5b70a1ddb8eee128103d3d44894b7b933fdf0a5813716fa9d8c1631cb0ba8003" name="fcgi" arch="src">
  <version epoch="0" ver="2.4.2" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.2-3" date="1764417600">- more patches related to CVE-2025-23016</changelog>
</package>
<package pkgid="c4957079670315b7324b56ea3855de18b34c1fc7923335f9f3f3bea9d0ee4f8a" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="e203eb098eebcaa05b704d467e4301779df306b5f501ee4ca966d4320574d23a" name="fetchmail" arch="src">
  <version epoch="0" ver="6.4.22" rel="3.oe2203sp4"/>
  <changelog author="yapxin &lt;1024769339@qq.com&gt; - 6.4.22-3" date="1760011200">- Fix CVE-2025-61962</changelog>
</package>
<package pkgid="7f3aeeb8c7458f812be5dad3f88720cc6b166c05ee5fc2532652552e4f7d99a0" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="f56363711da18815a5415f2aff8d1a8cd305ed7dd4da8ec2d3c9428e7f7dc97f" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="85084ea685110d0e141d801d42e43a40840b893a428573d32ab465db4d54ed4a" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="0717b86d0aa3060696898c380712b9abf26d6ecbce008022846fe01ee82380c6" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="b42bc1e47791540647013cbd6e2086dbbe94c29cb31ae815f8b0c70bab70ee89" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="3f5d9c39ba34976aba70a919aaa115cc6bc6ada2a04d60d5d822e004dce6d4eb" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="c5639586b2ada06b98ed0eee56eff6f187812528cc18abaaa75042c0e01427e8" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="55165a9f3ef5fe64d77b8db4f2c5c57abeb93afb296c9e490ccf24f526c532f2" name="ffmpeg" arch="src">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="d6cfe52e2a0745579006aec20883778ea26efdbedd37324f6ee6e8f6e09696ae" name="fftw" arch="src">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="adae5e4e861607a501c41ca4e4af1eeffba38a7b619edc748a7cf055a69aa65f" name="firebird" arch="src">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="ca8aca43fa29a35e10bfc4e6200430e61338de3e34974320c14fac1dff9a3e4c" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="3a128fd204c18b6ebb39cd8bbf744f46134759f8ad6ee2fc8b0e6abe1202441b" name="firefox" arch="src">
  <version epoch="0" ver="128.10.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
</package>
<package pkgid="29959e3bc696f9ae86af2d68875816cbe6e08cfaea5ef77c2181173d04c7f798" name="firefox" arch="src">
  <version epoch="0" ver="128.10.1" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
</package>
<package pkgid="ba3c7dbcdf6b584df94ec530c5e711ddf5d819dd876ad33b04b2ddbd794fa3a0" name="firefox" arch="src">
  <version epoch="0" ver="128.11.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
</package>
<package pkgid="122a2c63df8baa4e39702fc1636ab3f5aa481b5099ae2bce2c8bbe962fe723ec" name="firefox" arch="src">
  <version epoch="0" ver="128.12.0" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
</package>
<package pkgid="061cff89700de70f015f0561cb95ec7f1adbeaa03e067a73ec849f1b5d0f5b43" name="firefox" arch="src">
  <version epoch="0" ver="128.13.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
</package>
<package pkgid="922b07a033176362c7b28d48e8cce18d05d2a2323cfa335674dcee1cfa9bcb86" name="firefox" arch="src">
  <version epoch="0" ver="128.14.0" rel="1.oe2203sp4"/>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0</changelog>
</package>
<package pkgid="740677e3c1e7b451b8a40cafa50a6c544cd57a463184385b1ce2b64f847c93b3" name="firefox" arch="src">
  <version epoch="0" ver="128.8.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
</package>
<package pkgid="acebaab0148e46673bea4a1e58ddd0bb1adebb25f02cad5add0732889e47a9b9" name="firefox" arch="src">
  <version epoch="0" ver="128.9.0" rel="1.oe2203sp4"/>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
</package>
<package pkgid="c5825d5074201c39964fdf34732dd01f53ca4a31c6dbc2f4c970362a1a6c5ab9" name="firefox" arch="src">
  <version epoch="0" ver="140.3.1" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
</package>
<package pkgid="048929d9d7c3c1b459c8a8b920a30fed3f193a2fe50c011964123b76bb6462a9" name="firefox" arch="src">
  <version epoch="0" ver="140.4.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
</package>
<package pkgid="2240ece1547512ce50e499d24d715c8be1ef885d52fa5f651c783a89c47ea986" name="firefox" arch="src">
  <version epoch="0" ver="140.4.0" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
  <changelog author="Peng Haitao &lt;htpengc@isoftstone.com&gt; - 140.4.0-2" date="1761048000">- Modify openEuler to %{vendor}</changelog>
</package>
<package pkgid="5c8a7faaba102955d29ac629d15d0f52505089a7488db05c45dce07289c91581" name="firefox" arch="src">
  <version epoch="0" ver="140.5.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
  <changelog author="Peng Haitao &lt;htpengc@isoftstone.com&gt; - 140.4.0-2" date="1761048000">- Modify openEuler to %{vendor}</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-3" date="1761134400">- support building with system cbindgen
- build with system ldflags</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.5.0-1" date="1762862400">- update to 140.5.0
  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
    CVE-2025-13020</changelog>
</package>
<package pkgid="9399523e602bce2e05705588acea8e47c58923b1bed0d5dad98dbe04b7909e2d" name="firefox" arch="src">
  <version epoch="0" ver="140.7.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
  <changelog author="Peng Haitao &lt;htpengc@isoftstone.com&gt; - 140.4.0-2" date="1761048000">- Modify openEuler to %{vendor}</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-3" date="1761134400">- support building with system cbindgen
- build with system ldflags</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.5.0-1" date="1762862400">- update to 140.5.0
  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
    CVE-2025-13020</changelog>
  <changelog author="lijuzhang&lt;lijuzhang@inspur.com&gt; - 140.5.0-2" date="1764676800">- BuildRequires(cargo) add version constraint</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.6.0-1" date="1765281600">- update to 140.6.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.7.0-1" date="1768392000">- update to 140.7.0
  * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
    CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
    CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
    CVE-2026-0891</changelog>
</package>
<package pkgid="5f686976ed16043cc8b586946963d34e894d454ab16cb908a676bff95431cae4" name="firefox" arch="src">
  <version epoch="0" ver="140.8.0" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 128.14.0-1" date="1755604800">- update to 128.14.0
- Fix CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
  <changelog author="Peng Haitao &lt;htpengc@isoftstone.com&gt; - 140.4.0-2" date="1761048000">- Modify openEuler to %{vendor}</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-3" date="1761134400">- support building with system cbindgen
- build with system ldflags</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.5.0-1" date="1762862400">- update to 140.5.0
  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
    CVE-2025-13020</changelog>
  <changelog author="lijuzhang&lt;lijuzhang@inspur.com&gt; - 140.5.0-2" date="1764676800">- BuildRequires(cargo) add version constraint</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.6.0-1" date="1765281600">- update to 140.6.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.7.0-1" date="1768392000">- update to 140.7.0
  * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
    CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
    CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
    CVE-2026-0891</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.8.0-1" date="1771934400">- update to 140.8.0</changelog>
</package>
<package pkgid="2a30fc8df18d44635681b7a8ad990384138aa6ce18e2b587f1dcc6366f707c8f" name="firefox" arch="src">
  <version epoch="0" ver="140.9.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 140.3.1-1" date="1758715200">- Update to 140.3.1
- Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
  CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
  CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-1" date="1760356800">- update to 140.4.0
- fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
  CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715</changelog>
  <changelog author="Peng Haitao &lt;htpengc@isoftstone.com&gt; - 140.4.0-2" date="1761048000">- Modify openEuler to %{vendor}</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.4.0-3" date="1761134400">- support building with system cbindgen
- build with system ldflags</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.5.0-1" date="1762862400">- update to 140.5.0
  * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
    CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
    CVE-2025-13020</changelog>
  <changelog author="lijuzhang&lt;lijuzhang@inspur.com&gt; - 140.5.0-2" date="1764676800">- BuildRequires(cargo) add version constraint</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.6.0-1" date="1765281600">- update to 140.6.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.7.0-1" date="1768392000">- update to 140.7.0
  * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
    CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
    CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
    CVE-2026-0891</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.8.0-1" date="1771934400">- update to 140.8.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 140.9.0-1" date="1774353600">- update to 140.9.0</changelog>
</package>
<package pkgid="d5ad875145b8221cf89ed079e737a1abf01bfaf788d828c9a46a65f1617abc5f" name="firewalld" arch="src">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="893e2422640bf21e457c88d404e5491f0700aefd2e9531f7b8e698dd631bdc55" name="flatpak" arch="src">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="6d7a743cbd36fecd6eeb69fdb6b8ddd70f5d5c5989f5c89804291e6087a5fada" name="flatpak" arch="src">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="1b0a112497f8cfa4186745da4183a16945a24b43af761f5fd7f13d9388148fcb" name="fluidsynth" arch="src">
  <version epoch="0" ver="2.2.7" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.2.7-2" date="1768219200">- Fix CVE-2025-56225</changelog>
</package>
<package pkgid="03abe8b3540b519292c2b9075d2f81cc2f685da57e80efac386896e8a6be57a2" name="fontforge" arch="src">
  <version epoch="0" ver="20200314" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 20200314-8" date="1709035200">- Fix CVE-2024-25081 and CVE-2024-25082</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 20200314-9" date="1761307200">- Fix CVE-2025-50949</changelog>
</package>
<package pkgid="42e041f3edefdb725eb733f053537747eff4d0b66c9298a28ea00f517ce2d809" name="fonts-tweak-tool" arch="src">
  <version epoch="0" ver="0.4.5" rel="5.oe2203sp4"/>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 0.4.5-5" date="1753272000">- fix fonts-tweak-tool run error</changelog>
</package>
<package pkgid="2afadfc40917a1108083806ade6f265d67a540f307ed963eed78ff00c7106926" name="fop" arch="src">
  <version epoch="0" ver="2.2" rel="9.oe2203sp4"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.2-8" date="1694865600">- Remove the mif parameter in the help message</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-9" date="1728561600">- Fix CVE-2024-28168</changelog>
</package>
<package pkgid="59317dadf0f6b453c0aece6997d6f803740c0678bf6b065a8a562f936af81dfe" name="freeipmi" arch="src">
  <version epoch="0" ver="1.6.8" rel="6.oe2203sp4"/>
  <changelog author="Min Zhang &lt;zhangmin@cqsoftware.com.cn&gt; - 1.6.8-5" date="1724155200">- 'Added 'Buildarch:noarch' to the help subpackage</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.6.8-6" date="1774440000">- Fix CVE-2026-33554</changelog>
</package>
<package pkgid="2400615370f43dd5d22c381df9b25bf7a00d414fac3eb08ff8731e070d1b3164" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="b89b1c87d2d94aa7d19621157a2db3df778c56357cf38c46eef584c56d4e7f78" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.25" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.0.25-4" date="1755000000">- Fix radiusd service startup warning</changelog>
</package>
<package pkgid="be3543b3e6d98a7effa14d129bce3bb615a80ab1e8f6af9604bee346d8e7ca7f" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.8" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
  <changelog author="yanying &lt;201250106@smail.nju.edu.cn&gt; - 2:2.11.7-3" date="1722859200">- Fix clang incompatible function pointer error</changelog>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 2:2.11.7-4" date="1770552000">- Fix CVE-2026-22854</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.8-1" date="1772452800">- Update to 2.11.8
- Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
  CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
  CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
  CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
  CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
  CVE-2026-23884</changelog>
</package>
<package pkgid="410d0fc63d1ab0be1fd6e5903159608a080bec3a68660d150d0f6f16e0bac35f" name="freerdp" arch="src">
  <version epoch="2" ver="2.11.8" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-1" date="1713873600">- Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
  CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
  CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.7-2" date="1714996800">- Fix CVE-2024-32661</changelog>
  <changelog author="yanying &lt;201250106@smail.nju.edu.cn&gt; - 2:2.11.7-3" date="1722859200">- Fix clang incompatible function pointer error</changelog>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 2:2.11.7-4" date="1770552000">- Fix CVE-2026-22854</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:2.11.8-1" date="1772452800">- Update to 2.11.8
- Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
  CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
  CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
  CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
  CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
  CVE-2026-23884</changelog>
  <changelog author="RuGuYa &lt;shenbowen@xfusion.com&gt; - 2:2.11.8-2" date="1773748800">- Fix CVE-2026-29776</changelog>
</package>
<package pkgid="2c36fcdabd1c81b4130266d758d3f6ff664728869bfed65aa1892ec4f67d5583" name="freetype" arch="src">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="97449e1629904f5b6efe63a08900bc9532ed121d95b0a447f7da0fe8ede9cd4e" name="freetype" arch="src">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="a62ee89251b78ca76c3839b061a8e3c642e5ee72f0bdff1a22221a5a6cef0ac2" name="freetype" arch="src">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="94c1e0a7aeeef950712293073ef4bf9fedbdf6d794850ea616de65ea30ed10f3" name="fuse3" arch="src">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="8348ed1da648193d9b412fbed88f9d6bda788ba91cccce92fbcd2c61eccd6fbf" name="gala-anteater" arch="src">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp4"/>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-2" date="1673956800">- fix str2enum bug &amp; data query refactor
- add systemd service for anteater
- remove 'sys-level' config param
- add chinese descriptions
- Update TCP Establish Model &amp; Add Nic Loss Detector
- Add disk throughput detector</changelog>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-3" date="1674129600">- fix missing Requires:python3-pyyaml</changelog>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-4" date="1674216000">- eliminate 'Fail to try-restart' warning when downgrading to 1.0.1-1</changelog>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
</package>
<package pkgid="58f3b295b1d14801eb24a0517d1bbed091a44dc3c2bb073b125bc2ab0f746604" name="gala-anteater" arch="src">
  <version epoch="0" ver="1.2.1" rel="5.oe2203sp4"/>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-4" date="1674216000">- eliminate 'Fail to try-restart' warning when downgrading to 1.0.1-1</changelog>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-4" date="1731326400">- solve conflict.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-5" date="1732190400">- fixbug with wrong label in dbscan.</changelog>
</package>
<package pkgid="73612d50ac2312ad1f237016a5684b00a483365281806ddb49b64af3e583d37c" name="gala-anteater" arch="src">
  <version epoch="0" ver="1.2.1" rel="6.oe2203sp4"/>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-4" date="1731326400">- solve conflict.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-5" date="1732190400">- fixbug with wrong label in dbscan.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-6" date="1732708800">- add detect type for usad model.</changelog>
</package>
<package pkgid="3334371e3938cbc9dfdc605d78ce4d054c7340327ebaec4aed1619cf8af51496" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="a0a55bef749e0304ca6b12723c2be48a1ef6aeda6a7ba2c329370abc421ef485" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="bc9c2d4ae266cae7f1da059849f663179bdf26d5cf9b2b867ecc7a2b82544da8" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="d2042f0c32b566338a2051488049a8f4e5b93246e5c4fd595c3c2b67f2b6d01c" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="2d08dbea5f09ea9a8a25970f57109a70120496d0dc802ded985389f87aacf533" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="708530e35a204222cc396ad64f6508d2b8ee3bcb428c55cfab5203499d9d3991" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="e82a7df26f5cad707e4d15320e855bae868b7d4b6eb0705a5103084718effd11" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="76.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
</package>
<package pkgid="637b65f467b68b832719ffbd046d220affb49539b69cd9efa503c6b9e4450d7a" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="77.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
</package>
<package pkgid="0d11f59c70b05048d7c36712482a15386be7c2b83777c8bc8401423f8f016a83" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="78.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561600">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
</package>
<package pkgid="e22cb9bc37c1583c26754c01f572ee27c1ddeed0723c1b636ba13a7450b2097b" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="79.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
</package>
<package pkgid="7bfeae09973e92145bcee49473c6f34ff1826e85aa97e9d70333f5b87492ce32" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="80.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
</package>
<package pkgid="7b417b8e636ba8129870675c045d1088bc0ffcf716a144f509363d067a3ddb2b" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="84.oe2203sp4"/>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
</package>
<package pkgid="28635e4d34a465b84532ab45d79d66cdd1acaa0759cbff30f4b177d52186bd4b" name="gazelle" arch="src">
  <version epoch="0" ver="1.0.2" rel="85.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-85" date="1752062400">- sockio: fix rpc_send coredump after RPC_MSG_EXIT
- sockio: fix tcp_write not remove EPOLLOUT
- fix 20.03-LTS build failed
- sk_wait: igonre mem_thread flush signal
- sockio: fix sendmbox full return EWOULDBLOCK
- sockio: fix callback_tcp_send output too many at once
- mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
- sockctl: fix rtw broadcast close and shutdown
- poll: fix do_lwip_connected_callback not delete poll kernel fd
- sk_event: fix rtw epoll wrong event notify and remove
- sockio: fix rtw_stack_tcp_write wrong copied_total after append
- epoll: fix do_lwip_connected_callback
- sk_wait: fix lwip_wait_foreach_notify coredump at startup
- socket: fix stack_udp_readmsg return len
- sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
- mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
- sk_wait: fix lwip_tcp_allow_send coredump
- mempool: stop using cache when too many threads
- mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
- mempool: mem_get_rpc add reserve limit
- mempool: fix mbox_ring free not call recv_finish_burst
- mempool: modify mbuf num and rpc_msg num
- socket: fix sk_wait cannot be interrupted by signals
- socket: fix tcp closed
- tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
- socket: fix stack_tcp_read do not recv_finish_burst
- socket: fix connect blocking
- mempool: fix copy_mbuf_private
- dfx: support sk_wait stat
- mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
- cfg: add mem_async_mode
- cfg: add mem_cache_max and change default rpc_msg_max
- socket: adapt to tcp and udp
- socket: refactor tcp and udp
- socket: adapt to sock_event
- socket: refactor sock_event
- cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
- cleancode: remove gazelle_light_ring
- cleancode: add GAZELLE_SAME_NODE
- RTC: fixing program stuck while gazelle exit in multi-threads envirement</changelog>
</package>
<package pkgid="20ed97811c9cae67a4fc318df32f4c88ea55d01177f47f0005fdb5390bc852ae" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="7e31eab7e5dab8420e2daea2357b1c7d58e981b9d27578fadeb233139997bca4" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="5cddf407bb8144692264672731362bd6552cd6af7311e00b3397c03c0977696f" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="c256db422fc774ad67949b9fdf9f87224c9266238da5f6e0d9562e49fd2453af" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="69.oe2203sp4"/>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="huzife &lt;634763349@qq.com&gt; - 10.3.1-68" date="1736942400">- Type:Revert
- ID:NA
- SUG:NA
- DESC: Revert feature mull64</changelog>
  <changelog author="huzife &lt;634763349@qq.com&gt; - 10.3.1-69" date="1737115200">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Fix fail in cmtst patterns</changelog>
</package>
<package pkgid="7d646355257861c45dc3fd52331738d448f62fdb37374a761bee2fdffbe4dbad" name="gcc" arch="src">
  <version epoch="0" ver="10.3.1" rel="71.oe2203sp4"/>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="huzife &lt;634763349@qq.com&gt; - 10.3.1-68" date="1736942400">- Type:Revert
- ID:NA
- SUG:NA
- DESC: Revert feature mull64</changelog>
  <changelog author="huzife &lt;634763349@qq.com&gt; - 10.3.1-69" date="1737115200">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Fix fail in cmtst patterns</changelog>
  <changelog author="wangsihong &lt;wangsihong@xfusion.com&gt; - 10.3.1-70" date="1761048000">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="huzife &lt;634763349@qq.com&gt; - 10.3.1-71" date="1766145600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="11942ec76af4e6094c0a1090f74aab8f65e9f2e6ddd330ba3a7c40ac50e497e0" name="gcc-toolset-14-binutils" arch="src">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="1d0760b27e70ccd43974c5eb35f568331519d0138cf1642e41075a518463e3d9" name="gcc-toolset-14-gcc" arch="src">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="b301fae9535093e937b460f4d25fad951155b4f662aacdd1180b8a4159338149" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="585f685a80824c505e18fea47e2bc3ef66274b98b3f32a8d960e7894739077e3" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="12.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 11.1-11" date="1760011200">- fix CVE-2025-11082</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 11.1-12" date="1760097600">- fix CVE-2025-11494</changelog>
</package>
<package pkgid="a1266f42baf9d91df22a511e62eaa3ef738ac1b4270fba8cd0aaf259d73910c9" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 11.1-11" date="1760011200">- fix CVE-2025-11082</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 11.1-12" date="1760097600">- fix CVE-2025-11494</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-13" date="1761220800">- fix CVE-2021-32256</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-14" date="1761566400">- fix CVE-2025-11083</changelog>
</package>
<package pkgid="d5eb6a7b1c6653b65b26532807abd0a884b82b4ffde618c931efe66e83fea1c1" name="gdb" arch="src">
  <version epoch="0" ver="11.1" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 11.1-11" date="1760011200">- fix CVE-2025-11082</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 11.1-12" date="1760097600">- fix CVE-2025-11494</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-13" date="1761220800">- fix CVE-2021-32256</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-14" date="1761566400">- fix CVE-2025-11083</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-15" date="1761912000">- fix CVE-2025-11412</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-16" date="1762257600">- fix CVE-2025-11840</changelog>
</package>
<package pkgid="cfd1e16ecadc182481fe7562efe1b09a1cae3bafc2e0153150e0341acd80de7f" name="gdisk" arch="src">
  <version epoch="0" ver="1.0.8" rel="4.oe2203sp4"/>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1.0.8-3" date="1667044800">- remove stray debugging code</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 1.0.8-4" date="1727179200">- DESC: fix problem that caused sgdisk to crash when using the latest popt</changelog>
</package>
<package pkgid="127f1ea36df0cd71d16048be5d2b57b88d2eac35dca2544315e5ca3362cf64b1" name="gdk-pixbuf2" arch="src">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="7167b5786dabd6b08f996a8552303eda5efb01683d23af13b238572e75bcc4e6" name="gdk-pixbuf2" arch="src">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="31352836ad246abb00342066a0428557f836c02933e1ad53af11adbc67ba1936" name="gdk-pixbuf2" arch="src">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="592ca55fab53b50acc8c2f4192055f46eece08e4d1825aaf2c0b6b6802521949" name="gegl04" arch="src">
  <version epoch="0" ver="0.4.34" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.4.34-2" date="1773835200">- fix CVE-2026-2050 (same issue with CVE-2026-2049)</changelog>
</package>
<package pkgid="aac777de211b07648e562c14a1115fe20ae8c7314916259d1b9a498bc8a57886" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="75bf1a24d6c2f96e6d367b59f8a597ca772645a66417aaade682ae500ab614fb" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="e96760eced99319d23768ef840ffffd95f531fd3ce2e2db602c169903590bc5b" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="fc791eb4f1f21f4f833f6bbe09a3bc3675dd698ce102c10847ad63c5c662dcb5" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="1f875d2e33301ebc9edb11c354db592c4495fdda429dfe42e6a15e4f1ab51fc1" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="fa98a42187e7c42c6107087741c5501120544d0642f8c462f65a92819299918c" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="9ab908a1fc7992148b2992abb4044f8bc5aabbe7270086449ad623654bf68c23" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="22.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 9.55.0-22" date="1761134400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-59798,CVE-2025-59799,CVE-2025-59800</changelog>
</package>
<package pkgid="534f112320448f4eeaedeed97ab0f9218303459c706eec3a203503f41cdfe7b1" name="ghostscript" arch="src">
  <version epoch="0" ver="9.55.0" rel="23.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 9.55.0-22" date="1761134400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-59798,CVE-2025-59799,CVE-2025-59800</changelog>
  <changelog author="majianhan &lt;majianhan@kylinos.cn&gt; - 9.55.0-23" date="1773921600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-7462</changelog>
</package>
<package pkgid="17b63f49ac425350dece4e6007709ee8192df050261e791d64f7276e15e08f41" name="giflib" arch="src">
  <version epoch="0" ver="5.2.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.2-2" date="1734436800">- Fix heap-buffer overflow</changelog>
</package>
<package pkgid="70abc92e9ceb7240f2c715ecf294bc38a32f7d52639536d0e09534b62e981679" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="c1bc16df668270b5ca5113049bb0e52bd9859ccdee1ae859e555563ad72bd365" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="8c1f7cd55d119a47214b3aff63a263b4f65082125020833f63593d4648e8eba4" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="326c63f703d1580377fd053d2092c115e5f4c0e25fbc3aa83e8589cae562284a" name="git" arch="src">
  <version epoch="0" ver="2.33.0" rel="21.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fly_fzc &lt;2385803914@qq.com&gt; - 2.33.0-21" date="1773316800">- Type:CVE
- ID:CVE-2025-66413
- SUG:NA
- DESC:Fix CVE-2025-66413</changelog>
</package>
<package pkgid="796e90aca5713ad43e3c5881bc513b2b04c04509f0a933b26399f7843f634f63" name="git-lfs" arch="src">
  <version epoch="0" ver="3.5.1" rel="1.oe2203sp4"/>
</package>
<package pkgid="7accd6a781a91037199f2215869417b4469f894c5c9c3de783f83d6c3a63ae3f" name="glib-networking" arch="src">
  <version epoch="0" ver="2.68.1" rel="6.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.68.1-6" date="1765195200">- Type:CVE
- CVE:CVE-2025-60018 CVE-2025-60019
- SUG:NA
- DESC:fix CVE-2025-60018 CVE-2025-60019</changelog>
</package>
<package pkgid="aad7ba7f5b3284dc7724cb8e8b4646c5a6e2e78fdbeacf2464e1946fee22a18c" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="09e5bb324e6dfffc71fda00c848b5cd3f1d4e30d7491cdb6839c4c0b4cb68354" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="3075553f5c14d0cf02a156f53e0c08b904038b6174aac4732d21f24afcf472e0" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="22.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-22" date="1754740800">- fix CVE-2025-7039</changelog>
</package>
<package pkgid="c037a8cc743b086ce533ccbeca78f2fbd11d3620a67990d9950b99e82370786a" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="24.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-22" date="1754740800">- fix CVE-2025-7039</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-23" date="1764417600">- fix CVE-2025-13601</changelog>
  <changelog author="hanhuihui &lt;hanhuihui@h-partners&gt; - 2.72.2-24" date="1765627200">- fix CVE-2025-14087, CVE-2025-14512</changelog>
</package>
<package pkgid="e7836fe8ce9d63753b9649739a7c588f58016a53342c60c0a02ef2fb2571d653" name="glib2" arch="src">
  <version epoch="0" ver="2.72.2" rel="25.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-22" date="1754740800">- fix CVE-2025-7039</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-23" date="1764417600">- fix CVE-2025-13601</changelog>
  <changelog author="hanhuihui &lt;hanhuihui@h-partners&gt; - 2.72.2-24" date="1765627200">- fix CVE-2025-14087, CVE-2025-14512</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-25" date="1769601600">- fix CVE-2026-0988, CVE-2026-1484, CVE-2026-1485</changelog>
</package>
<package pkgid="102607d5feab1020f9c400b94101ba114ddbccadda857f121485fea3411b9a1a" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="a46cffd141efae1afbae1dc4af347488ff45f1ea09d95f974c2d68f26cc06b7f" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="b4d7524f65ef08abfcf66f0a6183345d866098c050c610bd177ab653ed35078a" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="b8e223286b1c99ec5e91eeb1ffd233f0a8ad115162f7cbf2f2ab35f8774480cd" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="a06e3bd15efbc63d58386e3a0092a217450da047407125c3e3d031b0b07c9ee5" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="cd4d9f15aa4d339203f6d6891ab29d4f66e790243d78ed1818f328aa1be97916" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="a673c391bb2b6d0fc14081e0f5383e46b2523358db51ef3b0a5cba2b01e9637c" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="d1292a153aa3842a3e03bf1e3994277857df23efca60c550b3133c915e7d2b1e" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="293b7e15cb727c68cc3ed978041db9f6602e8caa44134852ab112c7a3a83d29d" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="46934d795e625b844adace1c8fb44c5abe6de8556fc332af3dc5823af14e92c2" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="170.oe2203sp4"/>
  <changelog author="liumingran &lt;liumr1@chinatelecom.cn&gt; 2.34-169" date="1753272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fnmatch: Fix memory leak problem by backport from glibc 2.35
  https://sourceware.org/git/?p=glibc.git;a=commit;h=4e32c8f5682004d0571395fe9fa1bc1b73b40f4c</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; 2.34-170" date="1753876800">- posix: Fix double-free after allocation failure in regcomp (bug 33185) CVE-2025-8058</changelog>
</package>
<package pkgid="6bfbad9f55228c0bd87d7935ad0095ff5d8091b96a05ee35ce8ac02a22d39068" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="172.oe2203sp4"/>
  <changelog author="liumingran &lt;liumr1@chinatelecom.cn&gt; - 2.34-169" date="1753272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fnmatch: Fix memory leak problem by backport from glibc 2.35
  https://sourceware.org/git/?p=glibc.git;a=commit;h=4e32c8f5682004d0571395fe9fa1bc1b73b40f4c</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-170" date="1753876800">- posix: Fix double-free after allocation failure in regcomp (bug 33185) CVE-2025-8058</changelog>
  <changelog author="MayShao &lt;mayshao-oc@zhaoxin.com&gt; - 2.34-171" date="1756987200">- x86: Set preferred CPU features and update Shared to LLC for Zhaoxin processors</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-172" date="1768910400">- memalign: reinstate alignment overflow check (CVE-2026-0861)
- resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)</changelog>
</package>
<package pkgid="67af3592883f9549bb2faec6f0e0d947a77dde80f81c5bf63fdb5856a655d602" name="glibc" arch="src">
  <version epoch="0" ver="2.34" rel="174.oe2203sp4"/>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@h-partners.com&gt; - 2.34-174" date="1770206400">- Type:CVE
- CVE:CVE-2025-15281
- SUG:NA
- DESC:fix CVE-2025-15281</changelog>
</package>
<package pkgid="e4150a27cece1470e16cf5b8b689611834aa613cc972d16d7981c87bf337b91a" name="gmp" arch="src">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="1005aadc7f5a107d70476a3fcdc045fd41b72990e1fd46d8a710aca04673fc9b" name="gnupg2" arch="src">
  <version epoch="0" ver="2.2.32" rel="6.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-4" date="1681905600">- add BuildRequires:gnutls-devel to support TLS</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
</package>
<package pkgid="c1cc3916b1469f8b7a01505db87cbfe44c711b9b170cb4b8c6cf68a374cd4c57" name="gnupg2" arch="src">
  <version epoch="0" ver="2.2.32" rel="7.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
</package>
<package pkgid="7a3534d9ad40094dde8b50bb1a1335a848974f77c8cbd357ca884af83c852bfb" name="gnupg2" arch="src">
  <version epoch="0" ver="2.2.32" rel="9.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-8" date="1756123200">- fix read buffer over-read in uncompress_ecc_q_in_canon_sexp</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-9" date="1767009600">- fix CVE-2025-68973</changelog>
</package>
<package pkgid="aa0f79ccb970bc33aa106c8c1698297624d2fd1879868295353e8cf45735a476" name="gnuplot" arch="src">
  <version epoch="0" ver="5.0.6" rel="15.oe2203sp4"/>
  <changelog author="Chaochao Bai &lt;baichaochao@cqsoftware.com.cn&gt; - 5.0.6-15" date="1755864000">- Fix CVE-2025-31176、CVE-2025-31179、CVE-2025-31180、CVE-2025-31181、CVE-2025-3359</changelog>
</package>
<package pkgid="ece6028e8c0d94bd21a477bca7b1b37b2e4597e7c240ceacfc93cc3935822ecc" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="f2753162664bc45ec9abf29682b349c5e4d2af279fca7871652169592c6b2caa" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="17.oe2203sp4"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 3.7.2-17" date="1752580800">- fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395</changelog>
</package>
<package pkgid="ca821dd2e61ac20ec108af7f8fd2b4a746074bca2ba0ef20195a638ef5e875fc" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="19.oe2203sp4"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 3.7.2-17" date="1752580800">- fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-18" date="1767096000">- fix CVE-2025-9820</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 3.7.2-19" date="1770033600">- backport patches to fix pkcs11 bugs</changelog>
</package>
<package pkgid="61efa382d5c2c6df38dc4f217dc3e5358fd600a2e25193db0be5332d15f5193e" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.2" rel="20.oe2203sp4"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 3.7.2-17" date="1752580800">- fix CVE-2025-32988,CVE-2025-32990,CVE-2025-6395</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.7.2-18" date="1767096000">- fix CVE-2025-9820</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 3.7.2-19" date="1770033600">- backport patches to fix pkcs11 bugs</changelog>
  <changelog author="Xu Raoqing &lt;xuraoqing@h-partners.com&gt; - 3.7.2-20" date="1772712000">- fix CVE-2025-14831</changelog>
</package>
<package pkgid="2cc9add508a2e380cf19228f2f2671e3da35372b40ae356bd0767b37bba9174f" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="7c7a8810efe58b19f25d1ff3948baec1495db5a1150d03c30f561599d19d2136" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="7f369996e31c062f2c5feea484c3319a0caa1b020d88aa6f46ef83941db32a2e" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="39.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540800">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
</package>
<package pkgid="c7d8ac914642e69a512620bddd5fd641afcd54ae76ead5e1cebb0dde29dd0177" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="40.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
</package>
<package pkgid="8269f8bc5178c5919174a6e422599265a34b4a8fe079a6a916b47da356a05c1a" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="41.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
</package>
<package pkgid="936d6ed4399e45aba051c9d14209a222b7c7192a14d8df80af502f2aa14b5cd0" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="43.oe2203sp4"/>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.17.3-42" date="1756296000">- Type:CVE
- CVE:CVE-2025-22871
- SUG:NA
- DESC:fix CVE-2025-22871</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603200">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
</package>
<package pkgid="62e8ac2179d11c55c6cb506d7c6974a3b2beada3555b46888af3a69e89e68776" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="44.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.17.3-42" date="1756296000">- Type:CVE
- CVE:CVE-2025-22871
- SUG:NA
- DESC:fix CVE-2025-22871</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603200">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603201">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
  <changelog author="zhaoyifan &lt;stopire@gmail.com&gt; - 1.17.3-44" date="1763121600">- Type:CVE
- CVE:CVE-2025-58187,CVE-2025-61723
- SUG:NA
- DESC:fix CVE-2025-58187,CVE-2025-61723</changelog>
</package>
<package pkgid="c00055378b277a53b21fc67411d35861210d6df77936c2fd087fe817189f25d8" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="45.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.17.3-42" date="1756296000">- Type:CVE
- CVE:CVE-2025-22871
- SUG:NA
- DESC:fix CVE-2025-22871</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603200">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
  <changelog author="zhaoyifan &lt;stopire@gmail.com&gt; - 1.17.3-44" date="1763121600">- Type:CVE
- CVE:CVE-2025-58187,CVE-2025-61723
- SUG:NA
- DESC:fix CVE-2025-58187,CVE-2025-61723</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-45" date="1763640000">- Type:CVE
- CVE:CVE-2025-47912,CVE-2025-58186
- SUG:NA
- DESC:fix CVE-2025-47912,CVE-2025-58186</changelog>
</package>
<package pkgid="69617e2392a0ceac2ca7d49d66462a17e028102e3c721b23ffe6f90bdf6526d7" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="46.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.17.3-42" date="1756296000">- Type:CVE
- CVE:CVE-2025-22871
- SUG:NA
- DESC:fix CVE-2025-22871</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603200">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
  <changelog author="zhaoyifan &lt;stopire@gmail.com&gt; - 1.17.3-44" date="1763121600">- Type:CVE
- CVE:CVE-2025-58187,CVE-2025-61723
- SUG:NA
- DESC:fix CVE-2025-58187,CVE-2025-61723</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-45" date="1763640000">- Type:CVE
- CVE:CVE-2025-47912,CVE-2025-58186
- SUG:NA
- DESC:fix CVE-2025-47912,CVE-2025-58186</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-46" date="1764849600">- Type:CVE
- CVE:CVE-2025-61729,CVE-2025-61717
- SUG:NA
- DESC:fix CVE-2025-61729,CVE-2025-61727</changelog>
</package>
<package pkgid="0c69e50ef2bcbb659e85bf0799d071712cda8df94c4da5d1c22ce5f60ef09da5" name="golang" arch="src">
  <version epoch="0" ver="1.17.3" rel="47.oe2203sp4"/>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
  <changelog author="verbir &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-41" date="1755691200">- Type:CVE
- CVE:CVE-2025-47907 CVE-2025-47906
- SUG:NA
- DESC:fix CVE-2025-47907 CVE-2025-47906</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.17.3-42" date="1756296000">- Type:CVE
- CVE:CVE-2025-22871
- SUG:NA
- DESC:fix CVE-2025-22871</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-43" date="1762603200">- Type:CVE
- CVE:CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724
- SUG:NA
- DESC:fix CVE-2025-58183,CVE-2025-58185,CVE-2025-58189,CVE-2025-61724</changelog>
  <changelog author="zhaoyifan &lt;stopire@gmail.com&gt; - 1.17.3-44" date="1763121600">- Type:CVE
- CVE:CVE-2025-58187,CVE-2025-61723
- SUG:NA
- DESC:fix CVE-2025-58187,CVE-2025-61723</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-45" date="1763640000">- Type:CVE
- CVE:CVE-2025-47912,CVE-2025-58186
- SUG:NA
- DESC:fix CVE-2025-47912,CVE-2025-58186</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-46" date="1764849600">- Type:CVE
- CVE:CVE-2025-61729,CVE-2025-61717
- SUG:NA
- DESC:fix CVE-2025-61729,CVE-2025-61727</changelog>
  <changelog author="huzhangying &lt;huzhangying@huawei.com&gt; - 1.17.3-47" date="1772884800">- Type:CVE
- CVE:CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121
- SUG:NA
- DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-61726,CVE-2025-68121</changelog>
</package>
<package pkgid="f4f4bde90ffcc8fd286146b0a199880a3b74b11cc7b90b019bffd2e3445814cd" name="google-oauth-java-client" arch="src">
  <version epoch="0" ver="1.22.0" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.22.0-6" date="1760356800">- Fix CVE-2021-22573</changelog>
</package>
<package pkgid="b184d726cc9f8fdbee3914263f4bf388ce47a3d644306a65d9f3f67f37ab4153" name="graphviz" arch="src">
  <version epoch="0" ver="2.48.0" rel="7.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.48.0-5" date="1706875200">- Fix CVE-2023-46045</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 2.48.0-6" date="1708948800">- Modify loongarch64 and sw_64 support tcl subpackage</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 2.48.0-7" date="1756728000">- fix graphviz graphviz-graphs graphviz-docs files conflict</changelog>
</package>
<package pkgid="ce0931b4194f401d24348ff6c25d9bae7e34e5a7c85c431c722f993dcb7b00c7" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="527db8eefe9ea84b44559ce422059cf0f9ab2e7c23ee1d6f4f6c185e544b77e3" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="2bcce6487fb0b37a6e7e175540b65f4fd2869dfc511ae662fcdb1d1742b71f97" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="840662a8f6ef2609e6066cc154f3e8f3ae1e18cc4fa100530b46794f1f66d9c2" name="grub2" arch="src">
  <version epoch="1" ver="2.06" rel="53.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@h-partners.com&gt; - 1:2.06-53" date="1763726400">- Type:CVE
- CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-61663,CVE-2025-61664
- SUG:NA
- DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
       commands/usbtest: Use correct string length field
       tests/lib/functional_test: Unregister commands on module unload
       normal/main: Unregister commands on module unload
       gettext/gettext: Unregister gettext command on module unload
       kern/file: Call grub_dl_unref() after fs-&gt;fs_close()
       commands/test: Fix error in recursion depth calculation</changelog>
</package>
<package pkgid="29a906b4abfafe5b8e012335d9bbb0094e15b9c106b18b1d8dcd4d976eed2aa8" name="gsl" arch="src">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="7fde5489b29d3cedcb0ffc8b519608abe8c90944d9ee81450b0f5cb120e77fa9" name="gstreamer1" arch="src">
  <version epoch="0" ver="1.19.3" rel="4.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.19.3-4" date="1760356800">- fix CVE-2024-47606</changelog>
</package>
<package pkgid="f355d5fc90166b39b59659045030ddb339aed195d9a09995b5c51aee62671209" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.16.2" rel="12.oe2203sp4"/>
  <changelog author="yueyuankun &lt;yueyuankun@kylinos.cn&gt; - 1.16.2-10" date="1713960000">- Replace openEuler with openEuler</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 1.16.2-11" date="1766404800">- Fix CVE-2025-3887</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-12" date="1772193600">- fix CVE-2026-3082, GStreamer-SA-2026-0012</changelog>
</package>
<package pkgid="328b58ad8a809b39272b84c4c79f6ca0048bb4b716311235cbe09f9d72169857" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="10.oe2203sp4"/>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-10" date="1772107200">- fix CVE-2026-2921</changelog>
</package>
<package pkgid="68148c76a9e6f7b4d16b75946fb0797f1479235e4a07cf3ccb010e63b83313da" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="c848e3ac7239968d161f0d0f4a13ba3255f3078c9eb5b40c964891c82aea4fbe" name="gstreamer1-plugins-base" arch="src">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="51e9edfcc23dc7d5c6a7e53810850c7eb0d2724e3cbe78cee89bcaa8532d2c20" name="gstreamer1-plugins-good" arch="src">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="8f2eb82f4a87af53aaecd6432bd135d747b571f5d0f84d972c1e3433523a0674" name="gstreamer1-plugins-good" arch="src">
  <version epoch="0" ver="1.16.2" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.16.2-11" date="1757678400">- Fixes CVE-2025-47183</changelog>
</package>
<package pkgid="36cef73d77fd810737703778c6d00da34c72252601e951911bf4dd83462900f1" name="gstreamer1-plugins-good" arch="src">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="162cf6fa88917460c2bc45dc3fe1e213db0526ffdaab531d30e63a5d7a72b9c3" name="gtest" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="726dcad655424bbaebeaa91e818f0f427f98be82fc4ce6c47905f961b6aa20d0" name="gtk2" arch="src">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="25815ade71b39ab8a1eadf73206bc5dc31ebe966b9e375a7b6a45f3508cdec3b" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="6b7cec0a4a271790e18d1ccf9763c875562a3d2086af1d3ea390008c97c449bf" name="gzip" arch="src">
  <version epoch="0" ver="1.12" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.12-1" date="1698148800">- update to 1.12</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.12-2" date="1757419200">- fix -l bug with multimember files</changelog>
</package>
<package pkgid="464f140087ce74d4d93b780cadff3ebce57fd203099bf71811b195ca15124c4e" name="hadoop" arch="src">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="cd39990ae951ab15bc941173bbb92667960598fe087420e5d23b62f613794545" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="a669ee35a1ec5b634e1f67f6248a0d6cb9eebb6a114d58203f93bf42fe0809de" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="14.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
</package>
<package pkgid="497c4b96fc95f1826f7768453874f35882739dc8f45758d6431ff71bc76d0f82" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="15.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
</package>
<package pkgid="3c0a48479ad5ab88b339b932935e545f33f8240a20806c02cd7fe74bb424c3ff" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
</package>
<package pkgid="cd8deeccd79607de397c9183b65c4a02800644c7b2ea5e21b1b68c1a089b1598" name="haproxy" arch="src">
  <version epoch="0" ver="2.6.6" rel="18.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-17" date="1750680000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix slowstart behavior</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-18" date="1760011200">- Type:cves
- CVE:CVE-2025-11230
- SUG:NA
- DESC:fix CVE-2025-11230</changelog>
</package>
<package pkgid="b15144d8b798dd2c1449f70a6da90c0db0493f3927105e6b6d8e840b39ae7796" name="hdf5" arch="src">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="6abdb4934f8df5dcbbfd9a46c6a4bbf423a86ca409e69f0c829f3f9cc3dc63c7" name="hdf5" arch="src">
  <version epoch="0" ver="1.14.5" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.5-2" date="1766664000">- add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
  CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
  CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
  CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
  CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
  CVE-2025-6817, CVE-2025-6856, CVE-2025-7069</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.14.5-3" date="1767873600">- Rename the patch name</changelog>
</package>
<package pkgid="c9c6a67428d7a37a23950da198decb926c89a6b115d175ce077ee2369276021d" name="hikptool" arch="src">
  <version epoch="0" ver="1.0.0" rel="17.oe2203sp4"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-9" date="1680782400">- fix sas device info print error bug</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-10" date="1685448000">- sync code: fix PCIe and serdes, roh module problem</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-11" date="1685793600">- fix compiling specifications check problem</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-12" date="1697803200">- Added DFX for UB, NIC, MAC modules, fixed some bugs</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-13" date="1700136000">- Synchronize the code and add the DFX of the roce module to resolve some review comments</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-14" date="1713960000">- Synchronize code, fix some issues with ROH, PCIE and NIC modules</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-15" date="1716465600">- Synchronize code, the DFX register of the ECAM is added when the PCIe dumps registers</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-16" date="1732190400">- Synchronize code, Modify the review comments to increase the reliability of the code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-17" date="1742299200">- The HCCS and SDMA modules and the log collection function are added</changelog>
</package>
<package pkgid="9fa81e5f7dbed8146e6d57b88271a27170bb0094c75c4606f56519d93463882a" name="hikptool" arch="src">
  <version epoch="0" ver="1.0.0" rel="18.oe2203sp4"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-12" date="1697803200">- Added DFX for UB, NIC, MAC modules, fixed some bugs</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-13" date="1700136000">- Synchronize the code and add the DFX of the roce module to resolve some review comments</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-14" date="1713960000">- Synchronize code, fix some issues with ROH, PCIE and NIC modules</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-15" date="1716465600">- Synchronize code, the DFX register of the ECAM is added when the PCIe dumps registers</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-16" date="1732190400">- Synchronize code, Modify the review comments to increase the reliability of the code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-17" date="1742299200">- The HCCS and SDMA modules and the log collection function are added</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-18" date="1749211200">- The cpu_ring command is added.</changelog>
</package>
<package pkgid="de3eec7ff1cefc2017ac856d1cebfcb6a85a8ae27382c20f536758750c6c1c8c" name="hikptool" arch="src">
  <version epoch="0" ver="1.1.5" rel="26.oe2203sp4"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-17" date="1742299200">- The HCCS and SDMA modules and the log collection function are added</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-18" date="1749211200">- The cpu_ring command is added.</changelog>
  <changelog author="Junxian Huang &lt;huangjunxian6@hisilicon.com&gt; 1.0.0-19" date="1753531200">- Add ras support</changelog>
  <changelog author="Junxian Huang &lt;huangjunxian6@hisilicon.com&gt; 1.0.0-20" date="1753531201">- Fix coding problems</changelog>
  <changelog author="Junxian Huang &lt;huangjunxian6@hisilicon.com&gt; 1.0.0-21" date="1753531202">- Add roce debug enhancements</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-22" date="1753704000">- Optimize the ROCE SCC module register dump display</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-23" date="1756382400">- Optimize help information and modify code review comments</changelog>
  <changelog author="Junhao He &lt;hejunhao3@h-partners.com&gt; 1.0.0-24" date="1758024000">- ras: do some cleanup and refactoring of rasdfx dump</changelog>
  <changelog author="Huisong Li &lt;lihuisong@huawei.com&gt; 1.0.0-25" date="1758715200">- hccs: support HCCS dfx for HIP11</changelog>
  <changelog author="Huisong Li &lt;lihuisong@huawei.com&gt; 1.1.5-26" date="1760011200">- Add some new DFX commands and update the dynamic library version number.</changelog>
</package>
<package pkgid="7c5aa722ad42cf5d2809233b9ddf5044c64a8689898757782c73e9c7de87537b" name="hplip" arch="src">
  <version epoch="0" ver="3.23.8" rel="2.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.18.6-12" date="1681387200">- fix the problem of using hplip in python3.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.23.8-1" date="1697025600">- Upgrade to 3.23.8</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.23.8-2" date="1732190400">- fix self build failed.</changelog>
</package>
<package pkgid="b7f7bb75d12e32baf232b4210369b0cac507db4e9258e39f151ef5a3a97ce6b0" name="hsqldb" arch="src">
  <version epoch="1" ver="2.4.0" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:2.4.0-6" date="1772107200">- Fix CVE-2023-1183</changelog>
</package>
<package pkgid="21a60ddf5ae1c4c396dcc075cf38f63e143ccef2ccabe7a08f32e49d774205e7" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="c3437f3b810e6bdd6394cab76cb1b63ba50b1cbef867d8a6f0d186d1e8eb4c7c" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="686bed331e34bc806b3f3185b8a1bbc8839edd84b0c719d9eaf17367f12c57d5" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="afdd9861f7fb6bd09d423d792dacf0af20c46f3f14e4bb6e1a78fcafcc3d2bb9" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="25.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.4.51-25" date="1755172800">- Type:CVE
- CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
- SUG:NA
- DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
       mod_lua: Fix memory handling in output filters.
       Fix a regression that caused stickysession keys
       avoid ap_set_content_type when processing a _Request_Header
       set_cookie_name: ensure correct format</changelog>
</package>
<package pkgid="5c46920680d11d8b7af65eff886a4e180499e1e34aa36183580ec9695bc8add2" name="httpd" arch="src">
  <version epoch="0" ver="2.4.51" rel="27.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.4.51-25" date="1755172800">- Type:CVE
- CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
- SUG:NA
- DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
       mod_lua: Fix memory handling in output filters.
       Fix a regression that caused stickysession keys
       avoid ap_set_content_type when processing a _Request_Header
       set_cookie_name: ensure correct format</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 2.4.51-26" date="1764763200">- Type:bugfix
- CVE:
- SUG:NA
- DESC:mod_proxy: SetEnv proxy-nohalfclose to disable half-close tunneling</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 2.4.51-27" date="1767700800">- Type:CVE
- CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-55753,CVE-2025-66200
- SUG:NA
- DESC:SSI request judgment
       Request header similarity detection
       fix mod_mod error retry delay calculation to not already doubling the wait on the first error.
       stop accepting "note" in RequestHeader.</changelog>
</package>
<package pkgid="07a243c2961c578cc96612c2ed2ee63b45173f59e2f570eaccae61a42274555b" name="iSulad" arch="src">
  <version epoch="0" ver="2.1.5" rel="12.oe2203sp4"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-3" date="1711800000">- Type: update
- ID: NA
- SUG: NA
- DESC: add support for cgroup v2</changelog>
  <changelog author="jikai &lt;jikai11@huawei.com&gt; - 2.1.5-4" date="1712059200">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-5" date="1713614400">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-6" date="1713614401">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-7" date="1714046400">- Type: update
- ID: NA
- SUG: NA
- DESC: bugfix of background execution exec error command and setting negative cpu-rt issue</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-8" date="1714392000">- Type: update
- ID: NA
- SUG: NA
- DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
</package>
<package pkgid="d6d5eba1ccfbf0bc3a79270e2c8dafb277bbf4a3600b9db4ef7010100f962dc0" name="iSulad" arch="src">
  <version epoch="0" ver="2.1.5" rel="18.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-13" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: enable nri support only on specified architecture</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-14" date="1732536000">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-15" date="1732795200">- Type: update
- ID: NA
- SUG: NA
- DESC: sandboxer require isula-rust-extensions</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-16" date="1734523200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for nri</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-17" date="1735560000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-18" date="1735560001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream for refactoring sandbox and bugfixing</changelog>
</package>
<package pkgid="3402ff559c79df4f04476520a71ae1c5398e077f89313fe39d82fd12a7ed47ca" name="icu" arch="src">
  <version epoch="0" ver="72.1" rel="8.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 72.1-7" date="1707048000">- icu already supports loongarch64 architecture
- Remove loongarch64 patch and modify sw_64 support patch to use all arch</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-8" date="1753963200">- fix CVE-2025-5222</changelog>
</package>
<package pkgid="362f3d66c25ed443d990a50c06b0268e737348550d4e7c6fd30f1beac294e95e" name="iniparser" arch="src">
  <version epoch="0" ver="4.1" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-6" date="1741348800">- Fix CVE-2025-0633</changelog>
</package>
<package pkgid="5277aa9718ab7a27dbba25ff9b3ca687e6124c0dc64d7a9ceffa09847c42c45d" name="initscripts" arch="src">
  <version epoch="0" ver="10.17" rel="3.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 10.17-3" date="1707825600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename_device: free path after it is used</changelog>
</package>
<package pkgid="45fef744969d4f0c6a44d252333764eff92f98d14102dd221ae794b38aaf635c" name="iotop" arch="src">
  <version epoch="0" ver="0.6" rel="28.oe2203sp4"/>
  <changelog author="Mingzheng Xing &lt;xingmingzheng@iscas.ac.cn&gt; - 0.6-25" date="1694952000">- riscv: Add riscv64 support</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 0.6-26" date="1719921600">- loongarch64: add loongarch64 support</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; -0.6-27" date="1732017600">- Fix crash when hide UI elements on smaller terminals</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 0.6-28" date="1734436800">- Fix the iotop crash caused by non-UTF-8 characters</changelog>
</package>
<package pkgid="e02654bd8ee7a0f87ceb64e859868044278fe9c9be502ac153f23f1abf05bc52" name="iperf3" arch="src">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="67bc5749b7a627fb2b442bfb1246ed2d937e4de7b465be4b76e2048926437f1f" name="iperf3" arch="src">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="71c8007e298fa46aea8bc0df8763584698953bf57830761d17fe33db197aa30c" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="4e76a48688b761a48ac308a275374d712c1fd12db19650d50bbe3df9311ce41d" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="732e46d0edef0c081db04e69eddc73c2e09dafc23fdfbf9a126c0c483200a292" name="iproute" arch="src">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="0b80b97a2a48c1ee96a6f9007bdc4c491ecfeab5f62006a8a55415a8b96304d3" name="iptables" arch="src">
  <version epoch="0" ver="1.8.7" rel="21.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.8.7-15" date="1713441600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libxtables：Fix memleak in xtopt_parse_hostmask
       nft：Avoid memleak in error path of nft_cmd_new
       exit if called by setuid executeable
       fix for non verbose check command
       use fully random so that nft can understand
       Use xtables_malloc in mnl_err_list_node_add
       nft: Special casing for among match in compare_matches
       extensions: libipt_icmp: Fix confusion between 255/255 and any
       Revert libiptc: fix wrong maptype of base chain counters on restore
       extensions: Fix checking of conntrack --ctproto 0
       libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
       libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
       libiptc: Fix for another segfault due to chain index NULL pointer
       libiptc: Fix for segfault when renaming a chain</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1.8.7-16" date="1718366400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix license</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.8.7-17" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libxtables:Fix memleak of matches' udata
       Fix parsing of empty string arg in '-c' option</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.8.7-18" date="1727697600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix broken symbolic link</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.8.7-19" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:extensions:recent:Fix format string for unsigned values
       nft:cmd:Init struct nft_cmd::head early</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.8.7-20" date="1753876800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix display of changelog</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.8.7-21" date="1765454400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:nft:Support replacing a rule added in the same batch</changelog>
</package>
<package pkgid="384555f45f41a9efd208ebe1df7d2b419caae4a4e099f196a514d98576a870ee" name="iptraf-ng" arch="src">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.2.1-4" date="1732881600">- Type:CVE
- CVE:CVE-2024-52949
- SUG:NA
- DESC:fix CVE-2024-52949</changelog>
</package>
<package pkgid="c5696cd0f32d86ac9728040d5267f46766d7cc6d67c2c62ca05bb4c558139678" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="6.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="ddfafc733fe00804a75185d7476f60bb85bcdb39477007870b32d796181cedf4" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="7.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
</package>
<package pkgid="c620884e09bf064c084cf5edbe305b989b1e50527c6230b896e8ba3b0176e3c4" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="8.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 20221126-8" date="1753444801">- Type:cves
- CVE:CVE-2025-48964
- SUG:NA
- DESC:fix CVE-2025-48964</changelog>
</package>
<package pkgid="2a1ba1128373643eb3a5437441739f83b4173f97f85de975b723021f558ddfc0" name="iso-codes" arch="src">
  <version epoch="0" ver="4.7.0" rel="3.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 4.15.0-1" date="1698148800">- Upgrade to version 4.15.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 4.7.0-2" date="1699963200">- revert version to 4.7.0-2
- Large differences between versions 4.15.0 and 4.7.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.7.0-3" date="1744459200">- rename Chinese translation of iso_639-5</changelog>
</package>
<package pkgid="7fe92f5cc3b14eeb85404a7ba60e9ab3ca27da414ab37f4ca8487feb817eb76d" name="jakarta-mail" arch="src">
  <version epoch="0" ver="1.6.7" rel="4.oe2203sp4"/>
  <changelog author="xuyishen &lt;xuyishen3@huawei.com&gt; - 1.6.7-4" date="1753876800">- Fix CVE-2025-7962</changelog>
</package>
<package pkgid="109abcb23f0fcbaeb50965ea9ee98a8555e6432a3f213b651bff280f8b34850d" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="c5b4835761a17fc21b68c028a4a3c3a826f637a531cd3c39565afc34cd43794d" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="bcb95308c5cbc297cb1b9e72d8c34c609375e1d43d3db70f764f2423b7582543" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="ab3f04bdca41264208aa385c7520766d64b46f06d3905f25f76cfd0201492795" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.462.b08" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.462.b08-2" date="1753099200">- Fix build errors for riscv64 due to missed patch403 removal</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.462.b08-3" date="1753876800">- add Add-testcase-for-jdk.Deoptimization-and-bug-fixes-fo.patch</changelog>
</package>
<package pkgid="13060b4f99b3600c6d586c1fe80089e27436cbd3247f29c07569b7deefbff1bd" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="d778c2005d36d54ad74271f0e286e767d22c656ee02b00a74926ef5998b35117" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="254da2ce95beccb13735c58552aa43a48a673afd7553d4d21a7b2c8b9a224ae2" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="b80f473c87da476bcc67e1128822d12ada6eb9a5d940b0b2dcf53215f74281d1" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.30.7" rel="0.oe2203sp4"/>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; -1:11.0.27.6-2" date="1752580800">- add huawei-AArch64-Incorrect-matching-rule.patch</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; -1:11.0.28.6-0" date="1752580801">- update to 11.0.28+6(GA)
- delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
- modify delete_expired_certificates.patch
- modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Benshuai5D &lt;Benshuai5d@163.com&gt; -1:11.0.28.6-1" date="1752753600">- add huawei-remove-provides-in-kaeprovider-module-info.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:11.0.29.7-0" date="1760788800">- update to 11.0.29+7(GA)
- modify delete_expired_certificates.patch
- modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
- add Enable-optimizations-upon-detecting-Phytium-CPU.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; -1:11.0.29.7-1" date="1762257600">- update LoongArch64 port to 11.0.29.7</changelog>
  <changelog author="douyiwang &lt;douyiwang@huawei.com&gt; -1:11.0.29.7-2" date="1768392000">- add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:11.0.30.7-0" date="1768478400">- update to 11.0.30+7(GA)
- modify G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
</package>
<package pkgid="684733c83da42e9043e019f5e4ca8f3453c94ddbf86a571928eccef4cfb05856" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="8b713d4cfc46b499e2b97e361a5296f54abf801cd2aedaef3d826d5d74ccd254" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="b15805aa22a9276ded60a06610a36d713f94d6224be9b345585fe63a7a09828b" name="java-17-openjdk" arch="src">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="cb4ed7e7ecf2a15a30d4292e054d5567835698df066faf4788df2483e92e4b81" name="java-21-openjdk" arch="src">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="a9ecaf3d0ef035693d007e18abb389f39722cde91f2cb16127fc5ab02ab292ee" name="java-latest-openjdk" arch="src">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="8b8eb7f2373d3aad23423b4717490cc61c9718c008455f66204fbd80a996ec27" name="jbig2dec" arch="src">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="af0593e64b1835d206313c24a6a60d93c13e706b0b1ae8713d304dca26eda36e" name="jetty" arch="src">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="622e537463f40046791e29600e236994f1514aaa5095d1d244df8ad1b85b35db" name="jetty" arch="src">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="88293a45ef5fab3fd05b56dbe6c05ad1c7b160039540ab055deda201b37b9175" name="jq" arch="src">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="c4ab2162963d2b24aaa3b11e3d07a0fc7fbb2edfd55aeca01e7e1594ea1ce4d9" name="json-c" arch="src">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="333491a6b5d6bf8d5f16843a850b4236407bbe239044e310730316eec4668acf" name="json-lib" arch="src">
  <version epoch="0" ver="2.4" rel="23.oe2203sp4"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="6367a7eb4c0880f0ff428ee7232db01d33cc696ead5d52f635d6d87ac9e8dffe" name="json-smart" arch="src">
  <version epoch="0" ver="2.5.2" rel="1.oe2203sp4"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-1" date="1707048000">- update to version 2.4.8</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.5.2-1" date="1739793600">- Update to 2.5.2 for fix CVE-2024-57699</changelog>
</package>
<package pkgid="84564005e4552cea54c63109ce5f634c12b4691c9ad640904a5af56d68667184" name="jss" arch="src">
  <version epoch="0" ver="5.1.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.1.0-3" date="1739793600">- Fix CVE-2022-4132</changelog>
</package>
<package pkgid="b1da374cdce2116117e3d332eed217cca5be0644b75e727f136f284069e2802c" name="jtidy" arch="src">
  <version epoch="2" ver="1.0" rel="0.30.20100930svn1125.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2:1.0-0.30.20100930svn1125" date="1773316800">- Fix CVE-2023-34623</changelog>
</package>
<package pkgid="4b489ccbcf1133b4335300386694ff350b8f47f2c23b2cf27230eb3f1f3caae1" name="jython" arch="src">
  <version epoch="0" ver="2.7.1" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-3" date="1751889600">- Fix CVE-2025-6069</changelog>
</package>
<package pkgid="10684fcea94e649320c4f80bc866c74c0f5500a84a8b26670e86c98fb8881fd9" name="kata-containers" arch="src">
  <version epoch="0" ver="1.11.1" rel="32.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-27" date="1760529600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build check for kata-containers</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-28" date="1761307200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2020-27151</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-29" date="1761566400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify the patch of CVE-2020-27151</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-30" date="1767096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix the problem of missing kata-containers source code in the src package</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-31" date="1767614400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2025-65637</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 1.11.1-32" date="1770638400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix-CVE-2026-24054</changelog>
</package>
<package pkgid="6819dd081e97e470171b1b7f2c33a76835c046751ea07547ec39a8599aa255e0" name="kata-containers" arch="src">
  <version epoch="0" ver="1.11.1" rel="33.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-27" date="1760529600">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:fix build check for kata-containers</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-28" date="1761307200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2020-27151</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-29" date="1761566400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify the patch of CVE-2020-27151</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-30" date="1767096000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix the problem of missing kata-containers source code in the src package</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.11.1-31" date="1767614400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2025-65637</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 1.11.1-32" date="1770638400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix-CVE-2026-24054</changelog>
  <changelog author="jade_t &lt;yzd50036@gmail.com&gt; - 1.11.1-33" date="1774440000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:rebuild for the golang version with the CVE fixed</changelog>
</package>
<package pkgid="f7b28dbd544076b50bba758cd2989324bd2c0763e4557df1d0b23ad29c1352e4" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="ca942a9e7402e36b2118f22199e297fda1c5645490965c1673b8c81203247f25" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="a2250ca66b84245c50e3a377ca4a186304126b45b399f477dd06aaa07aaad71b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="f0246f7c890df5825ec81bde5a9b934cc3f45c0868bad845a29ac0c763b7d0f4" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="a4faa2f03a8130243cececb384c13d2444e8addc2006285b11b04fe99c07bc2e" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="12cf4d9da8ca5643f0a72717e8f263d72a99595ed5377d04d95b5a0decb58582" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="fcc49c01096f6452bce914f361a4e6f8f73786a5b10d467a2c7bb2bb29ed1e3d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="353d7c3258f386b10038b67331f918da1d172a4abd930ae245abd22ee391c222" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="273a40f8ee50202bc7fe10beb604d6733dda5968816c7abda162be96d395e2bb" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="84c433d8e5fb50c3c0d7d170aedf232e95339b10e2ce67e5df85d9327c3c99d8" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="029d6a717a907dc1a1def6c46b610fcc7c3dfec3b5db72ef1bd91e0efb3b7ef2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="a0995034a4c06db6c1c9dcb3db43b7f50d0a46cb15bf2ef8a00ce01c966d3ed6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="44297cd446f96c97a18eb11487bf0a41c3d1e000015dae9120f30a4ef07893b6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="a9e9f3e375e325e13b8621cf59171ba5e38948829ada8e8cfe28af57c5543320" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="f68b43c005e7f1541f2ae7c3be5e114a19e36e088ae4d4857fdfe9b1c91ba30d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="b13706b2830ed1f0b03486ab4464851d307a6b0e8e1e94a6dae365c4daee5710" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="88cb565958b3ba04d0eb9eaceda3a79994363a79f90425bbd71cfdee97ef5ab9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="7ebe9e34bbb4f8a23032886b69ac4c4de742e0f1e1923b3643470b9d70b36332" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="d06bd8c4d1bf5067bdfa32145d4facc124db01ffb769a4f949d0a83e764a9c8b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="95627d45caa4415ff1694b8ad66e11095cafae9546eb849b33622de6f0897f8d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="a9b0bda74ec9c8ca2764d6bcf2883930fe556f03e1329e4003548e3043692883" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="aa93c35812441adeb150c00edaf8894c36f3a1908b9d660189c1415248ea4e1a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="10f061e07f75b4be9eb206e7d0bfd4a9a1620775396f7060a24c98aeac722d26" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="c4f65da038e536e70b1c8cf9daf8489872ed3b2033fcb3d8c2acc07e8718857b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="ff85d73a152af66b8a8f58c04aec2139049e7eb7f488cdc455f242ec0e032d58" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="aa71520e269214a194e04eb240d25a73a1446871f2e85334345c497644d41c06" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="99e6642fbeba25d4a5edb5431303f871e1fb48a1da559e88240de830d47c4b20" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="feaccd7ec0b1845dc3659e2a8c517de40018375682b058dd240529afbde5c44c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="c3585109a88a039baa96c9b03c783c10b550f1815fd45f036b6e45bf8ffc4586" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="26cfe3dbbca5e1f0402f0e07c262cc9c798d8bc920ad18117144bff4dbc9c817" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="345254b7a2e2372a8171e2ec98ba2db9c7513e6b11849b68ccc3e5d2109b85f6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="78c420a8df06d4c773e3ba247c9f294a367d2f08d3e90c5d55240da5d663b49f" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="16b2e3a98747ef7e80d6322db65daf7413c9f26f56ec7d2fff3c5410a26b82c6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="0b1e664b075eee3ae02471f472e54159c6cea882cd0b2be82ac395468c4a8819" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="47f687a72e17532386353825494905b1cdda41d05fb3d9839b70dcb65a88ed02" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="3a9f8919715188d56a376dd756f05ac0479d796c656862eb0edefb95d2beb79e" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="b53236d572cbaed2dc307d257b25375ef67806326b8e18cc94dd7cdfb12bdacd" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="18fd400dd9c5439e34a773c30c872e02703029402a47e45f9bdb5a50e55717c1" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="ad9ca150c2957212d51046edbd89754595ea795837755b54e925d1b8ac62e022" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="89874a677e6311a36db0512251ceaabbd838f6fb7962c954f3617c6f7159ce7d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="2dcc4613f851d66636b285db99938991161c9bb4ecc2372854f5d3983989d1e7" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="9941f4727a55658d0b7e28ab7b0df4ad0608ebf95fc7e173e11a214b7a783363" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="368f5027cb994fada6a577c4c6527932c5c536fc0e122a911ec6c1a0a6f7d892" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="923e2fe58298999ca36ed47ac773312b807cd8bfae7f52317a63500c1501570c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="fb5014eff25a49fdc63354edace81586a5eea7d627572a8bb4a4f0d6bdff8515" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="8d24a8d54197853d2f34d6c36e4e31dc3a720ba5f317e8ac7260f182317502fa" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="275d2269ae2b1e495f23fa69476c3dd26bba332e0c71c3860727db43369563f2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="f9b0be93b4cfb91ac038eec0beb9e109458e9e95f9d50a035cccfcdd35963502" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="32e77129d6fcd7cc1ba101e6d003fe80b4d9a610055f7770f119f729b3956457" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="386f952ec33fc54175ab0f55caad9d38eb9ff5cf23e883abef913db47357bc23" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="6cfb735b532b6f46b9d1a125d10fb29a1ce57977e5a572b271315e8981601304" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="eedc204c420525db932cb233989abd2902d64bd7c23dffc196fb96644c7c4e6f" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="b01de8bc80c833782efebd33f32162a9166ff94c210cb18b76c47c2790848bff" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="277.0.0.180.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
</package>
<package pkgid="cea70fb749ff878a0572f731c41bb63db912d7791cd8f0fdd3bdc1673570882a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="278.0.0.181.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
</package>
<package pkgid="b043631b8abb1a218c0e2ffe012d067b0d9f0ea5121bbcc768336b363da8c0eb" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="279.0.0.182.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
</package>
<package pkgid="bbe1f0fc8c63b936aa0364113b1ba44f0bf35a98409381d5904b07081719f36a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="280.0.0.183.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
</package>
<package pkgid="4e58558b539f71f319ed905042df7193374333d1cb47e672eb092a275af37b79" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="281.0.0.184.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
</package>
<package pkgid="7cac7d4b15eee735106a0747fa9cfa4f162d4a26113096f82a4d78d9b8a37289" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="282.0.0.185.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
</package>
<package pkgid="b30d2be7dadef4f9cdbc99c751b2d8dc72767f69a9d98f9a788fd36ffacaedea" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="283.0.0.186.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
</package>
<package pkgid="c9adf4bb66872f6453afc75bcbbc9fb804538d9fd83c678823ab49436b4ea09a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="284.0.0.187.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
</package>
<package pkgid="8cab68d0cb9248bde1d1018d4892883d62994a1dfea51e0427465f949d0d5ce9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="285.0.0.188.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
</package>
<package pkgid="6e08cda67d468786cff4c49e8540d7511198dffa00f712b51b825e3b741f9a59" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="286.0.0.189.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-277.0.0.180" date="1755086400">- !17505  CVE-2024-58237
- !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- !17503  sctp: detect and prevent references to a freed transport in sendmsg
- !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
- !17506 ROH: fix variable type inconsistency issue
- !17437 [OLK-5.10]:update patches for sw64 architecture
- ROH: fix variable type inconsistency issue
- bpf: consider that tail calls invalidate packet pointers
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- sctp: detect and prevent references to a freed transport in sendmsg
- !17486  net: atm: fix use after free in lec_send()
- !17485  vlan: enforce underlying device type
- !17484  net: gso: fix ownership in __udp_gso_segment
- net: atm: fix use after free in lec_send()
- vlan: enforce underlying device type
- net: gso: fix ownership in __udp_gso_segment
- !17466  arm-smmu-v3: adjust ecmdq log level
- drivers:misc:sdma-dae: fix incorrect debugfs print
- arm-smmu-v3: adjust ecmdq log level
- !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
- sw64: kvm: fix compile error of kvm.ko
- sw64: kvm: remove the duplicated Kconfig selection of KVM
- sw64: cpuidle: add dedicated driver
- sw64: crypto: implement crc32 assembly optimization
- sw64: efi: remove meaningless code from asm/efi.h
- sw64: cpufreq: using PLL0 to provide clock for idle cores
- sw64: kvm: enable dirty log gradually in small chunks for core4
- sw64: fix guest kdump function
- sw64: use wait/complete for smp boot
- sw64: fix sw64_rrk_store() wrap handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
</package>
<package pkgid="89dbfd3f1758bd3fffa187c4dd0f3cb90a8ed13f0fd4df9960b41509182308a9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="287.0.0.190.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-278.0.0.181" date="1755604800">- !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
- !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
- comedi: aio_iiro_16: Fix bit shift out of bounds
- !17566  hugelb: do not sleep during spinlock hugetlb_lock
- hugelb: do not sleep during spinlock hugetlb_lock
- !17480  HID: core: fix __hid_request when no report ID is used
- !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
- !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
- !17543  net: sch: Fix CVE-2025-37798
- !17539  wifi: at76c50x: fix use after free access in at76_disconnect
- !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17532  sched: Fix sched tunable parameter range overflow
- !15064  arm64: mm: Update PBHA related variable name
- net_sched: drr: Fix double list add in class with netem as child qdisc
- net_sched: qfq: Fix double list add in class with netem as child qdisc
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()
- sch_ets: make est_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_htb: make htb_qlen_notify() idempotent
- wifi: at76c50x: fix use after free access in at76_disconnect
- net: vlan: Fix kabi breakage of struct vlan_info
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
- !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
- sched: Fix sched tunable parameter range overflow
- !17494 v2  kernfs performance optimization
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
- !17525  fix CVE-2022-49623
- PCI/ASPM: Fix link state exit during switch upstream function removal
- !17522  CVE-2025-38180
- powerpc/xive/spapr: correct bitmap allocation size
- powerpc/xive: Add some error handling code to 'xive_spapr_init()'
- net: atm: fix /proc/net/atm/lec handling
- net: atm: add lec_mutex
- kernfs: don't create a negative dentry if inactive node exists
- kernfs: also call kernfs_set_rev() for positive dentry
- kernfs: dont call d_splice_alias() under kernfs node lock
- kernfs: use i_lock to protect concurrent inode updates
- kernfs: switch kernfs to use an rwsem
- kernfs: use VFS negative dentry caching
- kernfs: add a revision to identify directory node changes
- HID: core: do not bypass hid_hw_raw_request
- HID: core: ensure __hid_request reserves the report ID as the first byte
- HID: core: ensure the allocated report buffer can contain the reserved report ID
- arm64: mm: Update PBHA related variable name</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
</package>
<package pkgid="513d45a058a8ecaced03158f2accf7b88003b1f72a09daddc2b6e7caaf57fd8d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="288.0.0.191.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-279.0.0.182" date="1756209600">- !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
- !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
- !17675  ftrace: Also allocate and copy hash for reading of filter files
- !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !15618  partitions: mac: fix handling of bogus partition table
- trace/fgraph: Fix the warning caused by missing unregister notifier
- !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17727  CVE-2025-38465
- !17454  md/raid1: Fix stack memory use after return in raid1_reshape
- !17452  blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- netlink: avoid infinite retry looping in netlink_unicast()
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: Fix wraparounds of sk-&gt;sk_rmem_alloc.
- perf/core: Don't leak AUX buffer refcount on allocation failure
- mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
- !17631  perf/core: Exit early on perf_mmap() fail
- ftrace: Also allocate and copy hash for reading of filter files
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
- !17603  two bugfix for arm64 support HVO
- !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
- selftests/bpf: Add remaining ASSERT_xxx() variants
- !17614  xfrm: state: fix out-of-bounds read during lookup
- !17626  Fix CVE-2025-37780
- !17627  Fix CVE-2024-58069
- !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
- !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- !17621  CVE-2025-38052
- !17619  tipc: Fix use-after-free in tipc_conn_close().
- !17620  net: clear the dst when changing skb protocol
- !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
- !17617  net: fix udp gso skb_segment after pull from frag_list
- !17616  atm: Fix NULL pointer dereference
- !17615  udp: Fix memory accounting leak.
- !17613  macsec: fix UAF bug for real_dev
- !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
- perf/core: Exit early on perf_mmap() fail
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- isofs: Prevent the use of too small fid
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- net: tipc: fix refcount warning in tipc_aead_encrypt
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
- net: clear the dst when changing skb protocol
- tipc: Fix use-after-free in tipc_conn_close().
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
- net: fix udp gso skb_segment after pull from frag_list
- atm: Fix NULL pointer dereference
- udp: Fix memory accounting leak.
- xfrm: state: fix out-of-bounds read during lookup
- macsec: fix UAF bug for real_dev
- vfio/pci: Properly hide first-in-list PCIe extended capability
- !17376 net_sched: Flush gso_skb list too during -&gt;change()
- !17576  net/sched: Fix CVE-2025-37890
- arm64: mm: HVO: fix deadlock in split vmemmap pmd
- mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
- !17581  tracing: Add down_write(trace_event_sem) when adding trace event
- !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
- tracing: Add down_write(trace_event_sem) when adding trace event
- !17579 v2  two cve fix
- iio: adc: ti-ads8688: fix information leak in triggered buffer
- vfio/platform: check the bounds of read/write syscalls
- powerpc/mm/fault: Fix kfence page fault reporting
- net/sched: ets: use old 'nbands' while purging unused classes
- net/sched: Always pass notifications when child class becomes empty
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
- md/raid1: Fix stack memory use after return in raid1_reshape
- blk-mq: don't touch -&gt;tagset in blk_mq_get_sq_hctx
- net_sched: Flush gso_skb list too during -&gt;change()
- partitions: mac: fix handling of bogus partition table</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
</package>
<package pkgid="39197658373cb2bda6969622907182258136c6aaafd6ea35600619be2d10cc2d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="289.0.0.192.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-280.0.0.183" date="1756814400">- !17849 [OLK-5.10]:update patches for sw64 architecture
- !17852  cpufreq: Init policy-&gt;rwsem before it may be possibly used
- sw64: fix for userspace asking for syscall(-1)
- sw64: update junzhang default config file
- sw64: kvm: introduce pmd_thp_or_huge for PMD hugepage checking
- sw64: add cross-page check in software unaligned write handling
- sw64: ptrace: fail system calls on invalid address access in PEEKUSR
- sw64: ptrace: fix a bug in return value handling in PEEKUSR AND POKEUSR
- !17738  CVE-2024-53216 &amp;&amp; CVE-2024-56558
- cpufreq: Init policy-&gt;rwsem before it may be possibly used
- !17801  page_pool: Fix use-after-free in page_pool_recycle_in_ring
- !17799  iwlwifi: Add missing check for alloc_ordered_workqueue
- !17817  vmci: Prevent the dispatching of uninitialized payloads
- !17680 Add Model specific EPP adjustment support for EMR/SPR/GNR
- !17667 cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- !17682 Add TPMI RAPL PMU support for GNR/CWF and later Intel Xeon machines
- !17664 intel_pstate support OOB mode for EMR/GNR/SRF/CWF
- !17662 platform/x86: ISST: Add Clearwater Forest to support list
- !17820  mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
- !17767 RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- !17806  pinmux: fix race causing mux_owner NULL with active mux_usecount
- !17805  f2fs: fix to avoid out-of-boundary access in devs.path
- vmci: Prevent the dispatching of uninitialized payloads
- pinmux: fix race causing mux_owner NULL with active mux_usecount
- f2fs: fix to avoid out-of-boundary access in devs.path
- !17795  perf/core: Prevent VMA split of buffer mappings
- !17316 [OLK-5.10] backport the follow important bugfix for nvme driver from upstream linux-5.10.y
- !17791  ipv6: mcast: extend RCU protection in igmp6_send()
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
- page_pool: fix inconsistency for page_pool_ring_[un]lock()
- net: page_pool: use in_softirq() instead
- iwlwifi: Add missing check for alloc_ordered_workqueue
- !17573 ROH: Add crc_err_cnt and retry_cnt mib statistics
- perf/core: Prevent VMA split of buffer mappings
- !17773  thunderbolt: Do not double dequeue a configuration request
- !17793 v2  fix some CVEs
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- rapidio: fix an API misues when rio_add_net() fails
- filemap: avoid truncating 64-bit offset to 32 bits
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
- drm/amd/display: Fix memory leak
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- ipv6: mcast: extend RCU protection in igmp6_send()
- !17759  CVE-2025-37834
- !17749  mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- !17688  netfilter: fix CVE-2022-49622
- !17698  netfilter: nft_tunnel: fix geneve_opt type confusion addition
- !17686  net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- !17710  bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- !17765  mm/smaps: fix race between smaps_hugetlb_range and migration
- !17740  Fix trace may OOB when trace_get_user failed
- !17743  i2c: qup: jump out of the loop in case of timeout
- thunderbolt: Do not double dequeue a configuration request
- RDMA/hns: Fix bond not cleared when the configuration becomes invalid
- mm/smaps: fix race between smaps_hugetlb_range and migration
- mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
- mm/vmscan: don't try to reclaim hwpoison folio
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- i2c: qup: jump out of the loop in case of timeout
- tracing: Limit access to parser-&gt;buffer when trace_get_user failed
- tracing: Remove unneeded goto out logic
- nfsd: fix UAF when access ex_uuid or ex_stats
- SUNRPC: no need get cache ref when protected by rcu
- nfsd: no need get cache ref when protected by rcu
- SUNRPC: introduce cache_check_rcu to help check in rcu context
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- nfsd: release svc_expkey/svc_export with rcu_work
- SUNRPC: make sure cache entry active before cache_show
- nfsd: make sure exp active before svc_export_show
- platform/x86: ISST: Add Clearwater Forest to support list
- powercap: intel_rapl_tpmi: Enable PMU support
- powercap: intel_rapl: Introduce APIs for PMU support
- powercap: intel_rapl: Sort header files
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
- cpufreq: intel_pstate: Allow model specific EPPs
- bitfield: add FIELD_PREP_CONST()
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Support Clearwater Forest OOB mode
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
- selftests: netfilter: add test case for nf trace infrastructure
- netfilter: nf_tables: fix crash when nf_trace is enabled
- netfilter: nf_tables: avoid skb access on nf_stolen
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- ROH: Add crc_err_cnt and retry_cnt mib statistics
- nvme-tcp: fix premature queue removal and I/O failover</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-281.0.0.184" date="1757419200">- !17933  CVE-2025-38502
- bpf: Fix updating attached freplace prog in prog_array map
- bpf: Resolve fext program type when checking map compatibility
- Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND
- bpf: Fix oob access in cgroup local storage
- bpf: Move cgroup iterator helpers to bpf.h
- bpf: Move bpf map owner out of common struct
- bpf: Add cookie object to bpf maps
- bpf: generalise tail call map compatibility check
- !17904 [OLK-5.5] perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !16636 [OLK-5.10] dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- !17912  net/mlx5: Check device memory pointer before usage
- net/mlx5: Check device memory pointer before usage
- !17885 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
- !17867  scsi: core: ufs: Fix a hang in the error handler
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
- !17443  scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
- scsi: core: ufs: Fix a hang in the error handler
- dma: phyitum: enable CONFIG_PHYTIUM_ERRATUM_FT3386
- dma: pswiotlb: Move platform-identification to cpu errata
- dma: pswiotlb: Move pswiotlb dma functions behind dma_map_ops
- dma: Fix kabi breakage due to "dma: phytium: Add PSWIOTLB mechanism to improve DMA performance"
- dma: phyitum: enable CONFIG_PSWIOTLB
- dma: phytium: Add PSWIOTLB mechanism to improve DMA performance
- scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
</package>
<package pkgid="a9ea07b75de9356902427dbf7a127947451bde4a944b50c89fd8ebd1935c69a3" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="291.0.0.194.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-282.0.0.185" date="1758024000">- !17999  gfs2: Validate i_depth for exhash directories
- !17970  nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
- gfs2: Validate i_depth for exhash directories
- !17995  media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
</package>
<package pkgid="1b4eb32700699330b7341b453abdd53fbc15dd9432dc1093ad4bce8213be9f32" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="292.0.0.195.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-283.0.0.186" date="1758715200">- !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
- !18025  trace/fgraph: Fix error handling
- !18100  Fix CVE-2022-50255
- !18102  bpf: Fix memleak due to fentry attach failure
- bpf: Fix memleak due to fentry attach failure
- tracing: Have the user copy of synthetic event address use correct context
- tracing: Fix reading strings from synthetic events
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header
- net: bridge: fix soft lockup in br_multicast_query_expired()
- trace/fgraph: Fix error handling</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
</package>
<package pkgid="5cc47a541e09fd768612b1ec40ae02b25df11dfce85e1ac60a2975f4ff291117" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="293.0.0.196.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-284.0.0.187" date="1760011200">- !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
- !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
- !17990 perf: backport community patches
- !18229  net: ch9200: fix uninitialised access during mii_nway_restart
- RDMA/hns: Fix wrong WQE data when QP wraps around
- net: dsa: Avoid cross-chip syncing of VLAN filtering
- !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
- net: ch9200: fix uninitialised access during mii_nway_restart
- perf: Always feature test reallocarray
- perf comm str: Avoid sort during insert
- perf comm: Fix comm_str__put() for reference count checking
- perf comm: Add reference count checking to 'struct comm_str'
- libperf rc_check: Make implicit enabling work for GCC
- libperf rc_check: Enable implicitly with sanitizers
- libperf: Add reference count checking macros
- !18122  nfsd: call op_release, even when op_func returns an error
- !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
- !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
- !17876 fs/ntfs3: cancle set bad inode after removing name fails
- !17927 spufs: fix a leak on spufs_new_file() failure
- !17929 bus: fsl-mc: fix double-free on mc_dev
- !18138  VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- !18155  ARM: rockchip: fix kernel hang during smp initialization
- x86/MCE: Always save CS register on AMD Zen IF Poison errors
- ARM: rockchip: fix kernel hang during smp initialization
- !18112  tee: fix NULL pointer dereference in tee_shm_put
- !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
- !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- VMCI: check context-&gt;notify_page after call to get_user_pages_fast() to avoid GPF
- scsi: target: iscsi: Fix a race condition between login_work and the login thread
- nfsd: call op_release, even when op_func returns an error
- tee: fix NULL pointer dereference in tee_shm_put
- nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
- fs: writeback: fix use-after-free in __mark_inode_dirty()
- bus: fsl-mc: fix double-free on mc_dev
- spufs: fix a leak on spufs_new_file() failure
- fs/ntfs3: cancle set bad inode after removing name fails
- net: ravb: Fix missing rtnl lock in suspend/resume path</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
</package>
<package pkgid="6a857be80754e4f252d481ad1f2cac76c69258dc423c4a3c555ab7bc2c2da32f" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="294.0.0.197.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-285.0.0.188" date="1760443200">- !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
- !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
- !18043 [OLK-5.10] Add SEV-ES hypervisor support
- x86/paravirt: Fix build due to __text_gen_insn() backport
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
- !18052  fix oenetcls bugs
- sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
- KVM: SVM: Add Hygon CSV2 detection for confidential computing support
- KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
- KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
- KVM: SVM: Add support for booting APs in an SEV-ES guest
- KVM: SVM: fix 32-bit compilation
- KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
- KVM: SVM: Provide support to launch and run an SEV-ES guest
- KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
- KVM: SVM: Provide support for SEV-ES vCPU loading
- KVM: SVM: Provide support for SEV-ES vCPU creation/loading
- KVM: SVM: Update ASID allocation to support SEV-ES guests
- KVM: SVM: Set the encryption mask for the SVM host save area
- KVM: SVM: Add NMI support for an SEV-ES guest
- KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
- KVM: SVM: Do not report support for SMM for an SEV-ES guest
- KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
- KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
- KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
- KVM: SVM: Add support for EFER write traps for an SEV-ES guest
- KVM: SVM: Support string IO operations for an SEV-ES guest
- KVM: SVM: Support MMIO for an SEV-ES guest
- KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
- KVM: SVM: Create trace events for VMGEXIT processing
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
- KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
- KVM: SVM: Add initial support for a VMGEXIT VMEXIT
- KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
- KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
- KVM: SVM: Do not allow instruction emulation under SEV-ES
- KVM: SVM: Prevent debugging under SEV-ES
- KVM: SVM: Add required changes to support intercepts under SEV-ES
- KVM: x86: introduce complete_emulated_msr callback
- KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
- KVM: x86: remove bogus #GP injection
- KVM: x86: Mark GPRs dirty when written
- KVM: SVM: Add support for the SEV-ES VMSA
- KVM: SVM: Add GHCB accessor functions for retrieving fields
- KVM: SVM: Add support for SEV-ES capability in KVM
- NFSD: Protect against send buffer overflow in NFSv2 READ
- net/oenetcls: use workqueue for ntuple cfg
- net/oenetcls: remove oenetcls trace hook
- net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
- net/oenetcls: Fix oecls_numa_info_table memleak</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
</package>
<package pkgid="263072cacd2c7160aea16d65606b5d1c8fe65de6250785cc57b67cabedfa735d" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="295.0.0.198.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-286.0.0.189" date="1761048000">- !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
- KVM: arm64: vgic-v4: Restore pending state on host userspace write
- !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !18150  CVE-2022-50306
- !18314  fs: quota: create dedicated workqueue for quota_release_work
- !17400  fscrypt: Don't use problematic non-inline crypto engines
- scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
- !15216  Fix kfree mismatch reported by cocci
- !18424  net/hinic3: Modify driver version
- net/hinic3: Modify driver version
- !18202  blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- !18197 v2  loop: Avoid updating block size under exclusive owner
- !18007  scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- !17991  CVE-2025-39697
- !18361  umount performance fix
- !18353  net/oenetcls: Fix memleak when clean flow table
- do_make_slave(): choose new master sanely
- change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
- change_mnt_propagation() cleanups, step 1
- net/oenetcls: Fix memleak when clean flow table
- fs: quota: create dedicated workqueue for quota_release_work
- blk-mq: fix NULL dereference on q-&gt;elevator in blk_mq_elv_switch_none
- block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
- loop: Avoid updating block size under exclusive owner
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ext4: factor out ext4_fc_get_tl()
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- scsi: libiscsi: Initialize iscsi_conn-&gt;dd_data only if memory is allocated
- NFS: Fix a race when updating an existing write
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
- fscrypt: Don't use problematic non-inline crypto engines
- Fix kfree mismatch reported by cocci</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
</package>
<package pkgid="292199fe0259ee1f473f974c344745a07c485682d5cb12eb0aee131075697cc2" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="296.0.0.199.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-287.0.0.190" date="1761652800">- !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18537  posix-timers: Ensure timer ID search-loop limit is valid
- hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
- !18549  i40e: fix idx validation in config queues msg
- i40e: fix idx validation in config queues msg
- !18534 [OLK-5.10]:update patches for sw64 architecture
- !18530 drivers:misc:sdma-dae: optimize kernel code
- posix-timers: Ensure timer ID search-loop limit is valid
- drivers:misc:sdma-dae: optimize kernel code
- sw64: fix the condition for enabling hw_una_enabled
- sw64: add trap related macros
- sw64: add missing memory clobbers
- sw64: optimize ipi handling
- sw64: Add inline find_next_set/and/clear_bit()
- sw64: optimize asid clearation
- sw64: update cflags for new compiler
- sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
- sw64: efi: fix compile error when CONFIG_EFI=n
- sw64: powercap: fix misuse of an uninitialized temporary variable
- sw64: powercap: increase the interval of polling mode
- sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
- sw64: powercap: avoid checking meaningless target freq
- sw64: irqchip: update effective affinity for INTx
- sw64: msi: fix affinity change of managed irq
- sw64: use orig_r0 as syscall nr
- sw64: revert ioremap() to __va() in ioport_map()
- sw64: fix unresolved reference error when close pci
- sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
- !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
- tracing: probes: Fix a possible race in trace_probe_log APIs
- !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
- iio: adc: at91: call input_free_device() on allocated iio_dev
- !18490 v2  Add some bugfix for l0.
- hisi: l0: fix security risks for l0
- hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
- hisi: l3t: fix l3t unlock order
- hisi: l3t: fix conflict between HISI050 and HISI021
- !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
- !18470  e1000e: fix heap overflow in e1000_set_eeprom
- RDMA/hns: Fix more wrong WQE data cases when QP wraps around
- e1000e: fix heap overflow in e1000_set_eeprom
- scsi: target: target_core_configfs: Add length check to avoid buffer overflow</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
</package>
<package pkgid="727b087b210347f34c8cd04fa7572fb3cc3c782f38909af0f5de6659a728a022" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="297.0.0.200.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-288.0.0.191" date="1762344000">- !18738  fs: udf: fix OOB read in lengthAllocDescs handling
- !2934 e1000e: Add support for the next LOM generation
- !18783  padata: Reset next CPU when reorder sequence wraps around
- !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
- !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
- padata: Reset next CPU when reorder sequence wraps around
- !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !14672 IXIC:add phytium ixic d2000 driver
- !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- !18728  *** CVE-2025-39973 ***
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
- fs: udf: fix OOB read in lengthAllocDescs handling
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- i40e: add validation for ring_len param
- i40e: increase max descriptors for XL710
- !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- !18687 v2  net/oenetcls: Balancing softirq to improve performance
- !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
- net/oenetcls: Balancing softirq to improve performance
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
- !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18628  tracing: dynevent: Add a missing lockdown check on dynevent
- perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
- !18617  Fix CVE-2025-39993
- tracing: dynevent: Add a missing lockdown check on dynevent
- media: rc: fix races with imon_disconnect()
- media: imon: grab lock earlier in imon_ir_change_protocol()
- media: imon: Fix race getting ictx-&gt;lock
- openeuler_defconfig: clean up invalid kernel configurations
- sched/fair: remove qos_reweight logic under non-SMP scenario
- Rate-limit the logging of dirty-page and SPECTRE_V2 messages
- IXIC:add phytium ixic d2000 driver
- IXIC:add phytium ixic d2000 DT binding docs
- e1000e: Add support for the next LOM generation</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
</package>
<package pkgid="fc040a3b61cf7745e62dc10516e02f7074ea50a043b83116b5e7c5bbfe9241fa" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="298.0.0.201.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-289.0.0.192" date="1762862400">- !18365 [OLK-5.10]Support request attestation report from CSV guest
- !14859 net :stmmac add support for Phytium GMAC controller
- !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
- !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
- !17396  Squashfs: check return result of sb_min_blocksize
- !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
- !18808  net/oenetcls: Add mode 2 for rps numa affinity
- !18864  net/oenetcls: work around l0 cache
- net/oenetcls: work around l0 cache
- net: stmmac: Add Phytium GMAC glue layer
- !18746  mainline patch backport
- net/oenetcls: Add mode 2 for rps numa affinity
- KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
- driver/virt/coco: Add HYGON CSV Guest dirver.
- KVM: x86: Support VM_ATTESTATION hypercall
- KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
- KVM: SVM: Move SEV module params/variables to sev.c
- x86/sev: Drop redundant and potentially misleading 'sev_enabled'
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
- x86/umip: Check that the instruction opcode is at least two bytes
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: processor: idle: Fix memory leak when register cpuidle device failed
- KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
- KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
- KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
- KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
- KVM: x86: Add dedicated helper to get CPUID entry with significant index
- KVM: x86: Move lookup of indexed CPUID leafs to helper
- KVM: x86: Check .flags in kvm_cpuid_check_equal() too
- KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
- KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
- KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
- KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
- KVM: x86: add guest_cpuid_is_intel
- perf/x86/intel: Add PMU support for Clearwater Forest
- x86/cpu: Update Intel Family comments
- perf/x86/intel: Fix event constraints for LNC
- perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
- perf/x86/intel/ds: Add PEBS format 6
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- tools/include: Sync uapi/linux/perf.h with the kernel sources
- perf/x86/intel: Support new data source for Lunar Lake
- perf/x86/intel: Rename model-specific pebs_latency_data functions
- perf/x86: Add Lunar Lake and Arrow Lake support
- perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
- perf/x86/intel: Fix broken fixed event constraints extension
- perf/x86/intel: Add common intel_pmu_init_hybrid()
- perf/x86/intel: Clean up the hybrid CPU type handling code
- perf/x86/intel: Apply the common initialization code for ADL
- perf/x86/intel: Factor out the initialization code for ADL e-core
- perf/x86/intel: Factor out the initialization code for SPR
- perf/x86/intel: Use the common uarch name for the shared functions
- perf/x86/intel/uncore: Support customized MMIO map size
- perf/x86/intel/uncore: Support MSR portal for discovery tables
- perf/x86/intel/uncore: Add Clearwater Forest support
- perf vendor events: Add Clearwaterforest events
- perf/x86/intel/uncore: Support more units on Granite Rapids
- perf/x86/intel/uncore: Clean up func_id
- Squashfs: check return result of sb_min_blocksize
- dt-bindings: net: Add bindings for Phytium GMAC
- RNPVF: NET: Fix core-dump while enable sriov for rnp</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
</package>
<package pkgid="c3167c4b6edea3a2113509689a1b29de6ccfae61ac872220735de455fb323fb9" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="299.0.0.202.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-290.0.0.193" date="1763467200">- !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
- !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
- !19017 [OLK-5.10] Fix CVE-2025-39757
- !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
- KVM: arm64: Deactivate the spurious vtimer interrupt
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
- x86/boot/compressed/64: Add 32-bit boot #VC handler
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
- x86/boot/compressed/64: Reload CS in startup_32
- x86/boot/compressed/64: Cleanup exception handling before booting kernel
- x86/sev-es: Split vc_decode_insn()
- x86/sev-es: Remove subtraction of res variable
- !18989  zcopy: A zero-copy data transfer mechanism
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
- !18951  Backport kunpeng920G to OLK-5.10
- crypto: ccp: Add config to openeuler_defconfig
- crypto: ccp: add new pci device id for HYGON C86-4G
- crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
- crypto: ccp - Don't initialize SEV support without the SEV feature
- linux: tcm: add Hygon TCM2 driver
- linux: tpm: add Hygon TPM2 driver
- crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
- crypto: tdm: Add Hygon TDM driver
- crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
- crypto: ccp: Add a new interface for X86 sending command to PSP
- !18873  mm: introduce memalloc_flags_{save,restore}
- zcopy: enable ZCOPY module
- zcopy: Add ZCOPY documentation
- zcopy: Add debug inerface dump_pagetable
- zcopy: Add tracepoint for PageAttach
- zcopy: Extend PMD trans hugepage mapping ability
- zcopy: Introduce the pageattach interface
- zcopy: Initialize zcopy module
- iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
- iommu: avoid taking iova_rbtree_lock twice
- dma-mapping: benchmark: Add support for multi-pages map/unmap
- iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
- !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
- !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
- !18878  wakeup kswapd during node_reclaim
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- mm: node_reclaim: add wakeup kswapd mode
- mm: vmscan: wakeup kswapd during node_reclaim
- arm64/numa: Make node reclaim distance adjustment always available
- mm: introduce memalloc_flags_{save,restore}
- EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
- EDAC/i10nm: Add Intel Granite Rapids-D support
- EDAC/i10nm: Fix the bitwise operation between variables of different sizes
- EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
- EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
- EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
- EDAC/i10nm: Explicitly set the modes of the RRL register sets
- EDAC/{i10nm,skx,skx_common}: Support UV systems
- EDAC/i10nm: Add Intel Clearwater Forest server support
- EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
- EDAC/i10nm: Add Intel Grand Ridge micro-server support
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- memblock: use numa_valid_node() helper to check for invalid node ID</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-291.0.0.194" date="1763726400">- !19062  mm: proc: use per_vma mmap_lock for vma traversal.
- !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
- !19102  Fix CVE-2025-40123
- selftests/bpf: Add test case for different expected_attach_type
- bpf: Enforce expected_attach_type for tailcall compatibility
- !19094  zcopy: Remove the dump_pagetable interface
- zcopy: Remove the dump_pagetable interface
- !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- mm: proc: use per_vma mmap_lock for vma traversal.
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
- usb: dwc3: gadget: check that event count does not exceed event buffer length</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
</package>
<package pkgid="d6aa4a519587ab03c09af8820de2ee4b3830bf0603698d28db853f663d9ba8e0" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="301.0.0.204.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-292.0.0.195" date="1764072000">- !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !19241  CVE-2025-40168
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
- net: Add locking to protect skb-&gt;dev access in ip_output
- !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
- !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
- !18866 [OLK-5.10] Fix CVE-2025-39766
- !19004 [OLK-5.10]Fix CVE-2025-39751
- !18816  CVE-2025-22121
- !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
- !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
- !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
- !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- !19169  crypto: essiv - Check ssize for decryption and in-place encryption
- !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
- !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
- !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
- !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
- !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- crypto: essiv - Check ssize for decryption and in-place encryption
- !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
- !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
- !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
- Optimize VIA CPU Temp Monitoring During Suspend/Resume
- hwmon: zhaoxin-cputemp: Update for KH-50000
- perf/zhaoxin/core: Tailor FMS for KH-50000
- KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
- openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
- Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
- USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
- crypto: zhaoxin - Update Kconfig dependencies and defaults
- crypto: zhaoxin/padlock-sha - Update CPU matching
- crypto: zhaoxin/padlock-aes: Update CPU matching
- crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
- EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
- EDAC/amd64: Correct the address translation for hygon family 18h model 4h
- ext4: Restore the deleted check paths of the xattr.
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
- ext4: introduce ITAIL helper
- PCI/MSI: Set device flag indicating only 32-bit MSI support
- configs: enable Zhaoxin I2C driver as module
- i2c: Driver for Zhaoxin I2C controller
- cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
- Revert "xhci: Adjust the UHCI Controllers bit value"
- x86/mce: Set bios_cmci_threshold for CMCI threshold
- hwrng: add Zhaoxin rng driver base on rep_xstore instruction
- Update cputemp driver with using the same MSR uniformly
- Add MWAIT Cx support for Zhaoxin CPUs.
- Turning off Zhaoxin ahci controller runtime pm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
</package>
<package pkgid="ab533327fd063e6ce9e24d8f3363c57a609c7d20119864a6f810c309fcaf0870" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="302.0.0.205.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-293.0.0.196" date="1764763200">- !19413  Fix CVE-2025-39994
- !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
- !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
- !19380 [OLK-5.10] Fix CVE-2025-22107
- !19387 [OLK-5.10] Fix CVE-2025-21945
- !19375 [OLK-5.10] Fix CVE-2025-37899
- Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
- !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- !19407  CVE-2025-37786
- !19406  sctp: Fix MAC comparison to be constant-time
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: tunner: xc5000: Refactor firmware load
- !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
- smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
- net: dsa: free routing table on probe failure
- net: dsa: rename teardown_default_cpu to teardown_cpu_ports
- sctp: Fix MAC comparison to be constant-time
- !19379  mmc: core: use sysfs_emit() instead of sprintf()
- !19221  NFSv4: Fix deadlock during the running of state manager
- !19369  net/sched: sch_qfq: Fix CVE-2025-38477
- !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- !19246  dmaengine: ti: k3-udma: Add missing locking
- !19217  sbitmap: fix infinite loop caused by negative wait_cnt
- Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- usb: typec: ucsi: displayport: Fix NULL pointer access
- !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- ksmbd: fix use-after-free in smb2_lock
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
- mmc: core: use sysfs_emit() instead of sprintf()
- !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ksmbd: fix use-after-free in session logoff
- !18836  CVE-2025-37997
- drivers:misc:sdma-dae: add channel depth info in debugfs
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
- !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
- !19345  sched: Fix race between yield_to() and try_to_wake_up()
- !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
- !19347  Fixes of page cache limit
- mm: Replace deferrable timer with delay timer for shrink worker
- mm: Add page cache limit check before queueing shrink worker
- sched: Fix race between yield_to() and try_to_wake_up()
- !19333  bpf: Sync pending IRQ work before freeing ring buffer
- !19335  drm/omap: fix misleading indentation in pixinc()
- mm: proc: fix compile warning when CONFIG_NUMA=n
- drm/omap: fix misleading indentation in pixinc()
- bpf: Sync pending IRQ work before freeing ring buffer
- !19304  Add Support for Disabling Hugetlb in soft_offline_page
- !19309  Fix CVE-2025-40200
- !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !18967 [OLK-5.10] force use dma api when AMD SEV is actived
- !18818 [OLK-5.10]:update patches for sw64 architecture
- !19307  net: Netdev use RCU protection
- Squashfs: reject negative file sizes in squashfs_read_inode()
- Squashfs: add additional inode sanity checking
- !19186  Squashfs: fix uninit-value in squashfs_get_parent
- !19232  drm/vmwgfx: Fix Use-after-free in validation
- !19259  scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- net: use dst_dev_rcu() in sk_setup_caps()
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
- net: dst: Fix kabi-breakage for struct dst_entry
- ipv4: start using dst_dev_rcu()
- tcp_metrics: use dst_dev_net_rcu()
- net: dst: introduce dst-&gt;dev_rcu
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- net: dst: add four helpers to annotate data-races around dst-&gt;dev
- !19299  pid: Add a judgment for ns null in pid_nr_ns
- !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- !19283  fix cves
- mm/memory-failure: support disabling soft offline for HugeTLB pages
- mm/memory-failure: userspace controls soft-offlining pages
- pid: Add a judgment for ns null in pid_nr_ns
- !19296  sched: Fix incorrect cluster mask
- sched: Fix incorrect cluster mask
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
- mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
- mm/hugetlb: unshare page tables during VMA split, not before
- hugetlb: unshare some PMDs when splitting VMAs
- mm: zswap: move allocations during CPU init outside the lock
- mm: zswap: properly synchronize freeing resources during CPU hotunplug
- mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
- media: davinci: vpif: Fix memory leak in probe error path
- media: davinci: vpif: fix use-after-free on driver unbind
- scsi: ufs: core: Fix handling of lrbp-&gt;cmd
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
- dmaengine: ti: k3-udma: Add missing locking
- drm/vmwgfx: Fix Use-after-free in validation
- NFSv4: Fix deadlock during the running of state manager
- ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
- Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
- sbitmap: fix infinite loop caused by negative wait_cnt
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
- Squashfs: fix uninit-value in squashfs_get_parent
- x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
- virtio_ring: force use dma api when AMD SEV is actived
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- netfilter: ipset: fix region locking in hash types
- sw64: paravirt: add pv steal time support in guest side
- sw64: kvm: add pv steal time support
- sw64: use ioremap to map IO address in functions like __get_cpu_nums()
- sw64: move non-boot core's kernel page table enabling logic to hmcode
- sw64: define run_mode_host_key as false
- sw64: add memclear template and ____memclr_simd()
- sw64: optimize simd version of copy/clear_page()
- sw64: disallow users modifying PS in pt_regs
- sw64: enable kernel page table
- sw64: use ioremap to map IO address
- sw64: map legacy I/O to K segment
- sw64: setup early_ioremap
- sw64: reset ATC for kvm
- sw64: setup mapping for efi_mm
- sw64: set protection for kernel page table
- sw64: modify codes with fixmap
- sw64: map the early and the final page table
- sw64: add fixmap support
- sw64: control CSR_INT_EN directly in host kernel
- sw64: pci: remove redundant debug control
- x86/cpu: Remove pointless evaluation of x86_coreid_bits</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-302.0.0.205" date="1771934400">- !20737  pNFS: Fix a deadlock when returning a delegation during open()
- !20725  tracing: Add recursion protection in kernel stack trace recording
- !20746 Fix CVE-2026-22990
- !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- pNFS: Fix a deadlock when returning a delegation during open()
- tracing: Add recursion protection in kernel stack trace recording
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- irqchip/gic-v3-its: Avoid truncating memory addresses</changelog>
</package>
<package pkgid="8be8844b9298466f9e241ad95b35e4676431a4594db61fdff346a7577605f68a" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="303.0.0.206.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-294.0.0.197" date="1765368000">- !19384 [OLK-5.10] Fix CVE-2025-22039
- !19543 [OLK-5.10] Fix CVE-2025-21968
- !19534 [OLK-5.10] Fix CVE-2024-57911
- !19606 [OLK-5.10] Fix CVE-2023-53466
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- !19542 [OLK-5.10] Fix CVE-2022-49196
- ksmbd: fix overflow in dacloffset bounds check
- wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
- !19583  CVE-2023-53491 v3
- !19578  net/oenetcls: Prioritize oenetcls hooks over rps
- !19575  Bugfix for three issues
- !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
- !19573  Bluetooth: Fix hci_suspend_sync crash
- !19572  net/smc: fix UAF on smcsk after smc_listen_out()
- !19571  i40e: remove read access to debugfs files
- !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
- !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
- !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
- !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- !19565  ipv6: reject malicious packets in ipv6_gso_segment()
- start_kernel: use unreachable too fix __noreturn build warning
- start_kernel: Add __no_stack_protector function attribute
- net/oenetcls: Prioritize oenetcls hooks over rps
- zcopy: Fix NULL pointer dereference while attach conflict with free
- zcopy: Fix softlockup while attach PUD-SIZE page
- zcopy: Fix invalid paging request while attach transhugepage to same addr
- Bluetooth: hci_event: call disconnect callback before deleting conn
- Bluetooth: Fix hci_suspend_sync crash
- net/smc: fix UAF on smcsk after smc_listen_out()
- i40e: remove read access to debugfs files
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- vsock: Do not allow binding to VMADDR_PORT_ANY
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
- ipv6: reject malicious packets in ipv6_gso_segment()
- !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19523  KVM: arm64: Prevent access to vCPU events before init
- powerpc/pseries: Fix use after free in remove_phb_dynamic()
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
- !19349 net:don't dump stack on queue timeout
- KVM: arm64: Prevent access to vCPU events before init
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
- !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- !19449  ksmbd: fix Preauh_HashValue race condition
- !19498  mainline patch backport
- timers: Fix NULL function pointer race in timer_shutdown_sync()
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- net: don't dump stack on queue timeout
- !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
- arm64: kdump: Skip kmemleak scan reserved memory for kdump
- !19315 [OLK-5.10] Fix CVE-2024-57907
- !19308 [OLK-5.10] Fix CVE-2025-21905
- !18648 [OLK-5.10] Fix CVE-2025-38729
- !19003 [OLK-5.10]Fix CVE-2025-38706
- !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- ksmbd: fix use-after-free in smb_break_all_levII_oplock()
- ksmbd: fix Preauh_HashValue race condition
- !19443  CVE-2025-22022
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
- !19436 RDMA/hns: Fix a memory issue in roce bonding
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
- usb: xhci: move link chain bit quirk checks into one helper function.
- !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- !19425  net: openvswitch: fix nested key length validation in the set() action
- !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
- !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- !19419  media: venus: hfi: add check to handle incorrect queue size
- RDMA/hns: Fix a memory issue in roce bonding
- RDMA/hns: Fix memory issues in roce reserve PD/CQ
- RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
- RDMA/core: Prevent soft lockup during large user memory region cleanup
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
- net: openvswitch: fix nested key length validation in the set() action
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
- media: venus: hfi: add check to handle incorrect queue size
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
- wifi: iwlwifi: limit printed string from FW file
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-302.0.0.205" date="1771934400">- !20737  pNFS: Fix a deadlock when returning a delegation during open()
- !20725  tracing: Add recursion protection in kernel stack trace recording
- !20746 Fix CVE-2026-22990
- !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- pNFS: Fix a deadlock when returning a delegation during open()
- tracing: Add recursion protection in kernel stack trace recording
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- irqchip/gic-v3-its: Avoid truncating memory addresses</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-303.0.0.206" date="1772539200">- !20899 Fix CVE-2026-23216
- !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- !20839  bpf, cpumap: Make sure kthread is running before map update returns
- bpf, cpumap: Make sure kthread is running before map update returns
- !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
- !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20801  ACPI/IORT: Add PMCG platform information for 162001900
- !20814  migrate: correct lock ordering for hugetlb file folios
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20800  fix CVE-2026-23054
- migrate: correct lock ordering for hugetlb file folios
- ACPI/IORT: Add PMCG platform information for 162001900
- arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
- net: hv_netvsc: reject RSS hash key programming without RX indirection table
- hv_netvsc: Allocate rx indirection table size dynamically
- RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI</changelog>
</package>
<package pkgid="7fa5e70052556f84f28261e4ffe998b43584df57d7657215272091f7d4c170b6" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="304.0.0.207.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-295.0.0.198" date="1765886400">- !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
- KVM: x86: Always set kvm_run-&gt;if_flag
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
- KVM: SEV: WARN if SEV-ES is marked active but SEV is not
- KVM: SEV-ES: Set guest_state_protected after VMSA update
- !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
- !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
- iommu/arm-smmu-v3-sva: Fix mm use-after-free
- !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
- !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
- !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19540  vfs: Don't leak disconnected dentries on umount
- !19539  fs/proc: fix uaf in proc_readdir_de()
- !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
- !19537  Fix CVE-2025-40190
- Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
- !19651  CVE-2023-53254
- drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
- fbdev: bitblit: bound-check glyph index in bit_putcs*
- !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
- efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
- efi: Fix kabi breakage of efi
- docs: security: Add secrets/coco documentation
- efi: Register efi_secret platform device if EFI secret area is declared
- virt: Add efi_secret module to expose confidential computing secrets
- efi: Save location of EFI confidential computing area
- vfs: Don't leak disconnected dentries on umount
- fs/proc: fix uaf in proc_readdir_de()
- fs: Prevent file descriptor table allocations exceeding INT_MAX
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: nested locking for xattr inode
- smb: client: fix mid_q_entry memleak leak with per-mid locking
- KVM: SEV: Acquire vcpu mutex when updating VMSA
- x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
- KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
- KVM: SVM: Do not set sev-&gt;es_active until KVM_SEV_ES_INIT completes
- KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
- x86/sev-es: Optimize __sev_es_ist_enter() for better readability
- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
- ata: zhaoxin: update for rename symbols
- Add platform-specific quirks for ZX-200 device</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-302.0.0.205" date="1771934400">- !20737  pNFS: Fix a deadlock when returning a delegation during open()
- !20725  tracing: Add recursion protection in kernel stack trace recording
- !20746 Fix CVE-2026-22990
- !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- pNFS: Fix a deadlock when returning a delegation during open()
- tracing: Add recursion protection in kernel stack trace recording
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- irqchip/gic-v3-its: Avoid truncating memory addresses</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-303.0.0.206" date="1772539200">- !20899 Fix CVE-2026-23216
- !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- !20839  bpf, cpumap: Make sure kthread is running before map update returns
- bpf, cpumap: Make sure kthread is running before map update returns
- !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
- !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20801  ACPI/IORT: Add PMCG platform information for 162001900
- !20814  migrate: correct lock ordering for hugetlb file folios
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20800  fix CVE-2026-23054
- migrate: correct lock ordering for hugetlb file folios
- ACPI/IORT: Add PMCG platform information for 162001900
- arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
- net: hv_netvsc: reject RSS hash key programming without RX indirection table
- hv_netvsc: Allocate rx indirection table size dynamically
- RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-304.0.0.207" date="1773144000">- !21136  sched/rt: Skip currently executing CPU in rto_next_cpu()
- !21131  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21093  kexec: derive purgatory entry from symbol
- !21140  ksmbd: fix use-after-free in kerberos authentication
- !21132  SUNRPC: Ensure the transport backchannel association
- ksmbd: fix use-after-free in kerberos authentication
- sched/rt: Skip currently executing CPU in rto_next_cpu()
- SUNRPC: Ensure the transport backchannel association
- procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21112  CVE-2024-57979
- !21111  ALSA: aloop: Fix racy access at PCM trigger
- pps: Fix kabi in pps_device
- pps: Fix a use-after-free
- ALSA: aloop: Fix racy access at PCM trigger
- kexec: derive purgatory entry from symbol
- ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21072 v2  arm64/mpam: enable MPAM feature and
- !20883  RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- !21021  CVE-2026-23209
- arm64/mpam: fix the bitmap written during mpam device reset
- arm64/mpam: only allow L3 cache MPAM device created
- arm64/mpam: fix inadvertently updating after repeatedly updating
- arm64/mpam: set default feedback of last_cmd_status interface as null string
- !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- !19837 KVM: Drop tlbs_dirty
- !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !21014  bpf selftest cross compile fixes
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path
- macvlan: fix error recovery in macvlan_common_newlink()
- !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- selftests/bpf: Pass target triple to get_sys_includes macro
- selftests/bpf: Enable cross-building
- net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- net: hns3: modify code of judging if SMMU DMA is enabled
- !20976  support apei_page_offline_policy
- nvmet-tcp: pass iov_len instead of sg-&gt;length to bvec_set_page()
- nvmet-tcp: don't map pages which can't come from HIGHMEM
- nvmet-tcp: fix regression in data_digest calculation
- nvmet-tcp: fix memory leak when performing a controller reset
- !20971 Fix CVE-2026-23074
- apei/ghes: Add sysctl interface to control soft-offline page isolation
- Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
- !20887  HiSock Enhancement
- net/sched: Enforce that teql can only be used as root qdisc
- drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !20891  dcache: Limit the minimal number of bucket to two
- !20956  CVE-2025-39967
- fbcon: Fix OOB access in font allocation
- fbcon: fix integer overflow in fbcon_do_set_font
- overflow: Allow mixed type arguments
- nvmet-tcp: add an helper to free the cmd buffers
- dcache: Limit the minimal number of bucket to two
- bpf: Deprecate hisock unused helpers and orig ingress logic
- bpf: Add local connect support for hisock
- bpf: Add ipv4-mapped ipv6 addr support for hisock
- bpf: Add target comm parse to hisock_cmd
- bpf: Add multi port parse to hisock_cmd
- bpf: Only deploy hisock in server
- bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
- bpf: Add bpf_handle_ingress/egress_ptype helper function
- bpf: Add bpf_set_ingress/egress_dev helper function
- bpf: Add bpf_get_skb_ethhdr helper function
- bpf: Add bpf_set_ingress_dst helper function
- bpf: Add BPF_HISOCK_INGRESS attach type
- net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h
- RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- KVM: Drop tlbs_dirty</changelog>
</package>
<package pkgid="fa194e31326ebbca5f424a706fd4b96d3c80ee380f3b4c18879014fedabc2a1b" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="305.0.0.208.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-296.0.0.199" date="1766491200">- !19740 merge refs/pull/19740/head into OLK-5.10
- !19764 merge patch-1766387978 into OLK-5.10
- hisi: l3t: enable l3t with specific cpuid
- !19705 [OLK-5.10]:update patches for sw64 architecture
- !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
- !19372  padata: Fix pd UAF once and for all
- !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
- !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
- net: atlantic: fix fragment overflow handling in RX path
- !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
- locking/rwsem: Optimize down_read_trylock() under highly contended case
- !19724  mm/mem_reliable: use percise count during limit check
- mm/mem_reliable: use percise count during limit check
- !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- !19614  NFSD: Fix crash in nfsd4_read_release()
- !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()
- !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
- sw64: set PTBR_SYS before accessing vmalloc area
- sw64: set execute permission for virtual machine's hmcode text section
- sw64: fix simd version of copy/clear_page()
- sw64: fix random mmap base range
- firewire: net: fix use after free in fwnet_finish_incoming_packet()
- NFSD: Fix crash in nfsd4_read_release()
- crypto: ccp: add ccp-mdev functionality to the ccp module.
- padata: Fix pd UAF once and for all
- KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
- KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
- KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
- KVM: x86: Pass emulation type to can_emulate_instruction()
- KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
- KVM: SVM: Don't intercept #GP for SEV guests
- swiotlb: do not zero buffer in set_memory_decrypted()
- crypto: ccp - Add SEV_INIT rc error logging on init
- dma-direct: always leak memory that can't be re-encrypted
- dma-direct: factor out dma_set_{de,en}crypted helpers
- KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
- KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
- KVM: SEV-ES: keep INS functions together
- KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- KVM: x86: split the two parts of emulator_pio_in
- KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- KVM: x86: leave vcpu-&gt;arch.pio.count alone in emulator_pio_in_out
- KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- KVM: SEV-ES: fix length of string I/O
- x86/sev-es: Do not unroll string I/O for SEV-ES guests
- x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-297.0.0.200" date="1767700800">- !19833 merge patch-1766715015 into OLK-5.10
- !19911 merge patch-1767492639 into OLK-5.10
- !19635 merge refs/pull/19635/head into OLK-5.10
- !19903 merge patch-1767161454 into OLK-5.10
- !19864 merge patch-1766990471 into OLK-5.10
- !19865 merge patch-1766990523 into OLK-5.10
- mm: mem_reliable: prevent excessive direct reclaim loops
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- !19899 merge patch-1767098709 into OLK-5.10
- erofs: validate the extent length for uncompressed pclusters
- !19885 merge patch-1767076771 into OLK-5.10
- !19876 merge patch-1767011340 into OLK-5.10
- scsi: qla2xxx: Clear cmds after chip reset
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
- !19856 merge patch-1766976937 into OLK-5.10
- !19857 merge patch-1766976979 into OLK-5.10
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
- virtio-net: ensure the received length does not exceed allocated size
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tracing: Fix memory leaks in create_field_var()
- !19760 merge patch-1766370959 into OLK-5.10
- !19786 merge patch-1766474397 into OLK-5.10
- !19548 merge refs/pull/19548/head into OLK-5.10
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
- !19739 merge refs/pull/19739/head into OLK-5.10
- !19732 merge refs/pull/19732/head into OLK-5.10
- !19719 merge refs/pull/19719/head into OLK-5.10
- bnxt_en: Fix memory corruption when FW resources change during ifdown
- bnxt_en: Fix possible crash after creating sw mqprio TCs
- x86/fpu: Ensure XFD state on signal delivery
- drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
- usb: storage: Fix memory leak in USB bulk transport
- nfs4_setup_readdir(): insufficient locking for -&gt;d_parent-&gt;d_inode dereferencing
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- cpufreq: ACPI: Fix max-frequency computation
- tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
- tools headers: Update tools's copy of x86/asm headers
- tools headers cpufeatures: Sync with the kernel sources
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-302.0.0.205" date="1771934400">- !20737  pNFS: Fix a deadlock when returning a delegation during open()
- !20725  tracing: Add recursion protection in kernel stack trace recording
- !20746 Fix CVE-2026-22990
- !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- pNFS: Fix a deadlock when returning a delegation during open()
- tracing: Add recursion protection in kernel stack trace recording
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- irqchip/gic-v3-its: Avoid truncating memory addresses</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-303.0.0.206" date="1772539200">- !20899 Fix CVE-2026-23216
- !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- !20839  bpf, cpumap: Make sure kthread is running before map update returns
- bpf, cpumap: Make sure kthread is running before map update returns
- !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
- !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20801  ACPI/IORT: Add PMCG platform information for 162001900
- !20814  migrate: correct lock ordering for hugetlb file folios
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20800  fix CVE-2026-23054
- migrate: correct lock ordering for hugetlb file folios
- ACPI/IORT: Add PMCG platform information for 162001900
- arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
- net: hv_netvsc: reject RSS hash key programming without RX indirection table
- hv_netvsc: Allocate rx indirection table size dynamically
- RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-304.0.0.207" date="1773144000">- !21136  sched/rt: Skip currently executing CPU in rto_next_cpu()
- !21131  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21093  kexec: derive purgatory entry from symbol
- !21140  ksmbd: fix use-after-free in kerberos authentication
- !21132  SUNRPC: Ensure the transport backchannel association
- ksmbd: fix use-after-free in kerberos authentication
- sched/rt: Skip currently executing CPU in rto_next_cpu()
- SUNRPC: Ensure the transport backchannel association
- procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21112  CVE-2024-57979
- !21111  ALSA: aloop: Fix racy access at PCM trigger
- pps: Fix kabi in pps_device
- pps: Fix a use-after-free
- ALSA: aloop: Fix racy access at PCM trigger
- kexec: derive purgatory entry from symbol
- ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21072 v2  arm64/mpam: enable MPAM feature and
- !20883  RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- !21021  CVE-2026-23209
- arm64/mpam: fix the bitmap written during mpam device reset
- arm64/mpam: only allow L3 cache MPAM device created
- arm64/mpam: fix inadvertently updating after repeatedly updating
- arm64/mpam: set default feedback of last_cmd_status interface as null string
- !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- !19837 KVM: Drop tlbs_dirty
- !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !21014  bpf selftest cross compile fixes
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path
- macvlan: fix error recovery in macvlan_common_newlink()
- !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- selftests/bpf: Pass target triple to get_sys_includes macro
- selftests/bpf: Enable cross-building
- net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- net: hns3: modify code of judging if SMMU DMA is enabled
- !20976  support apei_page_offline_policy
- nvmet-tcp: pass iov_len instead of sg-&gt;length to bvec_set_page()
- nvmet-tcp: don't map pages which can't come from HIGHMEM
- nvmet-tcp: fix regression in data_digest calculation
- nvmet-tcp: fix memory leak when performing a controller reset
- !20971 Fix CVE-2026-23074
- apei/ghes: Add sysctl interface to control soft-offline page isolation
- Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
- !20887  HiSock Enhancement
- net/sched: Enforce that teql can only be used as root qdisc
- drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !20891  dcache: Limit the minimal number of bucket to two
- !20956  CVE-2025-39967
- fbcon: Fix OOB access in font allocation
- fbcon: fix integer overflow in fbcon_do_set_font
- overflow: Allow mixed type arguments
- nvmet-tcp: add an helper to free the cmd buffers
- dcache: Limit the minimal number of bucket to two
- bpf: Deprecate hisock unused helpers and orig ingress logic
- bpf: Add local connect support for hisock
- bpf: Add ipv4-mapped ipv6 addr support for hisock
- bpf: Add target comm parse to hisock_cmd
- bpf: Add multi port parse to hisock_cmd
- bpf: Only deploy hisock in server
- bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
- bpf: Add bpf_handle_ingress/egress_ptype helper function
- bpf: Add bpf_set_ingress/egress_dev helper function
- bpf: Add bpf_get_skb_ethhdr helper function
- bpf: Add bpf_set_ingress_dst helper function
- bpf: Add BPF_HISOCK_INGRESS attach type
- net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h
- RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- KVM: Drop tlbs_dirty</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-305.0.0.208" date="1773748800">- !21262  arm64/mpam: Extending MPAM features and bugfix
- arm64/mpam: Allow MBMIN to be set to 0
- arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
- arm64/mpam: Add quirk to shrink MATA PMG range
- !21211  scsi: hisi_sas: Change the debugfs parameters dump count default value
- scsi: hisi_sas: Change the debugfs parameters dump count default value
- !21163  gic: Add hip09 support for HISILICON_ERRATUM_165010801
- gic: Add hip09 support for HISILICON_ERRATUM_165010801</changelog>
</package>
<package pkgid="16b5000b1dd3ad0cae04d73b2174c019a47338f17082add2e49d9a710434262c" name="kernel" arch="src">
  <version epoch="0" ver="5.10.0" rel="307.0.0.210.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-298.0.0.201" date="1768305600">- !19798 merge OLK-5.10 into OLK-5.10
- !19972 merge patch-1767691219 into OLK-5.10
- !19974 merge patch-1767691279 into OLK-5.10
- !19973 merge patch-1767691254 into OLK-5.10
- !19713 merge refs/pull/19713/head into OLK-5.10
- !19832 merge OLK-5.10-ringbuffer into OLK-5.10
- qed: Don't collect too many protection override GRC elements
- i40e: fix validation of VF state in get resources
- i40e: fix input validation logic for action_meta
- KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- KVM: SVM: Skip SEV cache flush if no ASIDs have been used
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
- x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- mm: x86: Fix kabi breakage of pv_ops
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- KVM: x86: Assume a 64-bit hypercall for guests with protected state
- KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
- KVM: SVM: Fix SEV SEND_START session length &amp; SEND_UPDATE_DATA query length after commit 238eca821cee
- crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
- x86/kvm: Add kexec support for SEV Live Migration.
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
- EFI: Introduce the new AMD Memory Encryption GUID.
- mm: x86: Invoke hypercall when page encryption status is changed
- x86/kvm: Add AMD SEV specific Hypercall3
- KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- KVM: SVM: fix missing sev_decommission in sev_receive_start
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
- KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
- KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
- KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
- KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
- KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
- KVM: SVM: Add KVM_SEV_SEND_FINISH command
- KVM: SVM: Add KVM_SEND_UPDATE_DATA command
- KVM: SVM: Add KVM_SEV SEND_START command
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-299.0.0.202" date="1769601600">- !19047 [OLK-5.10] Fix CVE-2025-39839
- !18614 [OLK-5.10] Fix CVE-2025-39737
- !18654 [OLK-5.10] Fix CVE-2025-38705
- !18782 【OLK-5.10】fix CVE-2025-38712
- !18612 [OLK-5.10] Fix CVE-2025-38713
- !18635 [OLK-5.10] Fix CVE-2025-38714
- !18862 [OLK-5.10] Fix CVE-2025-38697
- !20058  CVE-2025-38111
- !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
- !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
- !20309 hwmon: constify pointers to hwmon_channel_info
- hwmon: fix kabi of struct hwmon_channel_info
- !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
- !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- hwmon: constify pointers to hwmon_channel_info
- mlxsw: spectrum_router: Fix neighbour use-after-free
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
- !20316  um: virtio_uml: Fix use-after-free after put_device in probe
- !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
- um: virtio_uml: Fix use-after-free after put_device in probe
- !20300  software node: Correct a OOB check in software_node_get_reference_args()
- !20299  jfs: add sanity check for agwidth in dbMount
- !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
- !20277  e1000: fix OOB in e1000_tbi_should_accept()
- !20285  hwmon: (ibmpex) fix use-after-free in high/low store
- mm/kmemleak: move up cond_resched() call in page scanning loop
- !19953 【OLK-5.10】 power_meter patchs from 6.6
- software node: Correct a OOB check in software_node_get_reference_args()
- jfs: add sanity check for agwidth in dbMount
- hwmon: (ibmpex) fix use-after-free in high/low store
- !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !20271  KVM: x86: use array_index_nospec with indices that come from guest
- !19788  ima: Handle error code returned by ima_filter_rule_match()
- iavf: fix off-by-one issues in iavf_config_rss_reg()
- e1000: fix OOB in e1000_tbi_should_accept()
- !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
- !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- !20202  scsi: qla2xxx: Fix premature hw access after PCI error
- !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
- KVM: x86: use array_index_nospec with indices that come from guest
- drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
- !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- RDMA/hns: Support config and query the CNP DSCP for HIP09
- !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
- !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
- !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
- Revert "RDMA/hns: Fix mismatch exception rollback"
- RDMA/hns: Support drain SQ and RQ
- RDMA/hns: Return actual error code instead of fixed EINVAL
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
- RDMA/hns: Fix WQ_MEM_RECLAIM warning
- RDMA/hns: Fix RoCEv1 failure due to DSCP
- !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
- !20050  smb: client: Fix use-after-free in cifs_fill_dirent
- !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
- !19816  scsi: sg: Do not sleep in atomic context
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
- scsi: qla2xxx: Fix premature hw access after PCI error
- ACPI: APEI: Handle repeated SEA error interrupts storm
- !20150  tracing: Do not register unsupported perf events
- !20163  tracing: Fix enabling of tracing on file release
- !19938 net: hns3: add VLAN id validation before using
- !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
- !20044 【openEuler-22.03-LTS-SP4】Memory copy error
- !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
- !20025 [OLK-5.10]Support SMT control on arm64.
- !19922  NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
- !20026  fs/buffer: fix use-after-free when call bh_read() helper
- !19962  i40e: add max boundary check for VF filters
- !20103  kmemleak: Fix kmemleak false warnings
- !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- !20052  CVE-2024-21823
- !18962  erofs: Fix erofs_bmap error
- !20016  kernfs: Fix UAF issue
- !19694  ARM: fix hash_name() issue
- !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- !20065  Fix CVE-2022-50737
- !20066  smb: client: fix race with concurrent opens in rename(2)
- !20151 v2  Fix CVE-2025-40016
- hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
- hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
- hwmon: (acpi_power_meter) Fix update the power trip points on failure
- hwmon: (acpi_power_meter) Fix uninitialized variables
- !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
- hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
- hwmon: (acpi_power_meter) Fix style issues
- hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
- hwmon: acpi_power_meter: Get rid of ACPICA message printing
- ACPI: utils: Introduce acpi_evaluation_failure_warn()
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
- hwmon: (acpi_power_meter) clean up freeing code
- x86/sev: merge continuous pages into a large range when notifying range enc status changes
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
- tracing: Fix enabling of tracing on file release
- cifs: fix session state check in reconnect to avoid use-after-free issue
- media: uvcvideo: Use heuristic to find stream entity
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- media: uvcvideo: Allow extra entities
- tracing: Do not register unsupported perf events
- wifi: cfg80211: fix use-after-free in cmp_bss()
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
- arm64: kdump: fix kmemleak unknown object warning when crash base is set
- arm64: kdump: fix kmemleak unknown object warning
- x86/sev: Use "SEV: " prefix for messages from sev.c
- x86/sev: Propagate #GP if getting linear instruction address failed
- smb: client: fix race with concurrent opens in rename(2)
- fs/ntfs3: Add null pointer checks
- fs/ntfs3: Validate buffer length while parsing index
- fs/ntfs3: Validate index root when initialize NTFS security
- net/mdiobus: Fix potential out-of-bounds read/write access
- net: mdio: C22 is now optional, EOPNOTSUPP if not provided
- dmaengine: idxd: Fix -&gt;poll() return value
- dmaengine: idxd: Fix allowing write() from different address spaces
- dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
- dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
- dmaengine: idxd: add per DSA wq workqueue for processing cr faults
- dmaengine: idxd: add a write() method for applications to submit work
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- smb: client: Fix use-after-free in cifs_fill_dirent
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
- tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
- x86: don't use REP_GOOD or ERMS for small memory clearing
- x86: don't use REP_GOOD or ERMS for small memory copies
- fs/buffer: fix use-after-free when call bh_read() helper
- powerpc/kexec: Enable SMT before waking offline CPUs
- cpu/SMT: Enable SMT only if a core is online
- cpu/SMT: Create topology_smt_thread_allowed()
- powerpc/topology: Check if a core is online
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- cpu/SMT: Provide a default topology_is_primary_thread()
- powerpc: Add HOTPLUG_SMT support
- Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
- kernfs: Fix kabi broken in struct kernfs_root
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: fix potential NULL dereference in __kernfs_remove
- kernfs: fix NULL dereferencing in kernfs_remove
- kernfs: remove redundant kernfs_rwsem declaration.
- kernfs: prevent early freeing of root node
- kernfs: switch global kernfs_rwsem lock to per-fs lock
- KVM: SVM: Make sure GHCB is mapped before updating
- KVM: SVM: check CR4 changes against vcpu-&gt;arch
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
- x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
- x86/sev: Fix error message in runtime #VC handler
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- i40e: add max boundary check for VF filters
- net: hns3: add VLAN id validation before using
- net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
- ACPI: thermal: Move to dedicated function sysfs extra attr creation
- ACPI: thermal: Use thermal_zone_device()
- thermal: core: Encapsulate tz-&gt;device field
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
- drivers:misc:sdma-dae: add NULL judgement of global variables
- md/raid0, raid10: Don't set discard sectors for request queue
- scsi: sg: Do not sleep in atomic context
- ima: Handle error code returned by ima_filter_rule_match()
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
- ARM: fix hash_name() fault
- ARM: allow __do_kernel_fault() to report execution of memory faults
- configs: enable CONFIG_MICROCODE_ZHAOXIN
- x86/microcode: Add Zhaoxin cpu microcode update driver
- drm/amd/pm: fix null pointer access
- batman-adv: fix OOB read/write in network-coding decode
- PCI: Fix PCIe unplug Enumeration Long Blocking Issue
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- erofs: Fix erofs_bmap error
- jfs: upper bound check of tree index in dbAllocAG
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-300.0.0.203" date="1770206400">- !20464  rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20318 net: hns3: check pf tc cfg when setting vf tc
- !20522  CVE-2022-50616
- !20423  use SYS_CNTVCTSS_EL0 for gettimeofday
- regulator: core: Fix resolve supply lookup issue
- regulator: core: Use different devices for resource allocation and DT lookup
- !20382 [OLK 5.10]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
- !19965  nvme-fc: use lock accessing port_state and rport state
- !20226  leapraid: supports LeapRaid controller
- !20436  fix CVE-2026-22998
- rcu: Protect -&gt;defer_qs_iw_pending from data race
- !20449  scsi/hiraid: Support New Raid feature
- !20252  ntfs: set dummy blocksize to read boot_block when mounting
- !19920 [OLK-5.10] Backport patches soc_cache for kunpeng soc
- !20335  Fix CVE-2025-37947
- mm: Add PAGE_ALIGN_DOWN macro
- soc cache: fix walk page parameter and drop incorrect check
- soc cache: Fix incorrect error path of ioctl
- soc cache: Fix incorrect size validation
- soc cache: Enforce maintain type check
- soc cache: Modify default config to compile HiSilicon SoC cache driver
- !19858 [OLK-5.10] perf support for HiSilicon HIP12
- !20331 Fix CVE-2025-39835
- !20439 Fix CVE-2025-39945
- !20251 Fix CVE-2025-38480
- !20184 Fix CVE-2025-37770
- !20185 Fix CVE-2022-49829
- !20183 Fix CVE-2025-23138
- !20240 Fix CVE-2025-21981
- !20409  net: xfrm: Fix CVE-2025-40215
- !20408  net: xfrm: Fix CVE-2025-39797
- !20407  netfilter: allow exp not to be removed in nf_ct_find_expectation
- !20406  bpf, sockmap: Avoid using sk_socket after free when sending
- !20405  can: bcm: add locking for bcm_op runtime updates
- !20404  RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- soc cache: Support cache maintenance for HiSilicon SoC Hydra Home Agent
- scsi/hiraid: Support New Raid feature
- !19950 【OLK-5.10】 Drivers GPU Patches from 6.6
- !20422  driver core: fix potential null-ptr-deref in device_add()
- cnic: Fix use-after-free bugs in cnic_delete_task
- !20421  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- !20420  usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- !20418  drivers: base: Free devm resources when unregistering a device
- !20417  driver core: fix resource leak in device_add()
- !20416  Fix CVE-2022-49309
- !20415  kernel/resource: fix kfree() of bootmem memory again
- !20414  drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- !20413  of: check previous kernel's ima-kexec-buffer against memory bounds
- !20412  HID: core: Harden s32ton() against conversion to 0 bits
- !20411  iommu/amd: Avoid stack buffer overflow from kernel cmdline
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
- nvmet-tcp: remove boilerplate code
- !20390  drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- vdso: do cntvct workaround in the VDSO
- arm64: vdso: remove two .altinstructions related symbols
- arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday
- arm64: alternative: patch alternatives in the vDSO
- arm64: module: move find_section to header
- driver core: fix potential null-ptr-deref in device_add()
- arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
- usb: early: xhci-dbc: Fix a potential out-of-bound memory access
- drivers: base: Free devm resources when unregistering a device
- driver core: fix resource leak in device_add()
- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- !20383  usb: cdns3: fix random warning message when driver load
- kernel/resource: fix kfree() of bootmem memory again
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
- of: check previous kernel's ima-kexec-buffer against memory bounds
- HID: core: Harden s32ton() against conversion to 0 bits
- !19959 【OLK-5.10】Support NMI Watchdog
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
- xfrm: delete x-&gt;tunnel as we delete x
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- xfrm: Duplicate SPI Handling
- netfilter: allow exp not to be removed in nf_ct_find_expectation
- bpf, sockmap: Avoid using sk_socket after free when sending
- can: bcm: add locking for bcm_op runtime updates
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
- x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
- arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
- watchdog/perf: Provide function for adjusting the event period
- config: enable CONFIG_ARM64_NMI and CONFIG_HARDLOCKUP_DETECTOR_PERF for arm64
- irqchip/gic-v3: Fix one race condition due to NMI withdraw
- watchdog: Fix call trace when failed to initialize sdei
- watchdog: Support watchdog_sdei coexist with existing watchdogs
- init: only move down lockup_detector_init() when sdei_watchdog is enabled
- arm64: enable perf events based hard lockup detector
- arm64: add hw_nmi_get_sample_period for preparation of lockup detector
- usb: cdns3: fix random warning message when driver load
- !20051  smb3: fix for slab out of bounds on mount to ksmbd
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
- watch_queue: fix pipe accounting mismatch
- drm/amd/pm/powerplay: Prevent division by zero
- !20357  ext4: fix e4b bitmap inconsistency reports
- ice: fix memory leak in aRFS after reset
- drm/hisilicon/hibmc: hibmc-drm bugfix for DP
- !19940 [OLK-5.10] Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802 patches from 6.6
- drm/hisilicon/hibmc:fix KVM is not displaying when GRUB VGA is on
- drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local
- drm/hisilicon/hibmc: fix HPD interrupts triggering the wrong behavior
- drm/hisilicon/hibmc: Getting connector info and EDID by using AUX channel
- drm/hisilicon/hibmc: Add vga connector detect functions
- drm/hisilicon/hibmc: Add MSI irq getting and requesting for HPD
- drm/hisilicon/hibmc: Enable this hot plug detect of irq feature
- drm/hisilicon/hibmc: Add colorbar-cfg feature and its debugfs file
- drm/hisilicon/hibmc: Refactor the member of drm_aux in struct hibmc_dp
- drm/hisilicon/hibmc: Add dp serdes cfg in dp process
- drm/hisilicon/hibmc: Add dp serdes cfg to adjust serdes rate, voltage and pre-emphasis
- drm/hisilicon/hibmc: Restructuring the header dp_reg.h
- drm/hisilicon/hibmc: select CONFIG_DRM_DISPLAY_DP_HELPER
- drm: Call drm_atomic_helper_shutdown() at shutdown time for misc drivers
- drm/ast: Implement polling for VGA and SIL164 connectors
- drm/sysfs: Register "ddc" symlink later
- drm/hisilicon/hibmc: add dp module in hibmc
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: add dp hw moduel in hibmc driver
- drm/hisilicon/hibmc: add dp link moduel in hibmc drivers
- drm/hisilicon/hibmc: add dp aux in hibmc drivers
- gic: increase the arch_timer priority to avoid hardlockup
- openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
- drm/scheduler: fix fence ref counting
- !19855 [OLK-5.10] Backport patches of cpufreq features and kunpeng topology
- ext4: fix e4b bitmap inconsistency reports
- !20305 irqchip/gic-v3-its: Remove DevID Pool's restriction
- !20256 Fix CVE-2025-39828
- !20339  wifi: prevent A-MSDU attacks in mesh networks
- wifi: prevent A-MSDU attacks in mesh networks
- ksmbd: fix stream write failure
- ksmbd: prevent out-of-bounds stream writes by validating *pos
- xfs: do not propagate ENODATA disk errors into xattr code
- net: hns3: check pf tc cfg when setting vf tc
- net: hns3: support tc limit speed
- net: hns3: the multi-tcs VF can be configured only when the interface is down
- irqchip/gic-v3-its: Remove DevID Pool's restriction
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
- perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
- perf: Update .gitignore file
- perf stat: Enable iostat mode for x86 platforms
- perf stat: Helper functions for PCIe root ports list in iostat mode
- perf: Fix tt_core mismatch over PG CPU
- perf iostat: Use system-wide mode if the target cpu_list is unspecified
- perf arm_spe: Correct memory level for remote access
- Documentation: hisi-pmu: Add introduction to HiSilicon V3 PMU
- Documentation: hisi-pmu: Fix of minor format error
- drivers/perf: hisi: Add support for L3C PMU v3
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- arm64: topology: Setup amu fie when cpu hotplugging
- topology: Set capacity_freq_ref in all cases
- arm64/amu: Use capacity_ref_freq() to set AMU ratio
- cpufreq/cppc: Set the frequency used for computing the capacity
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- energy_model: Use a fixed reference frequency
- cpufreq/schedutil: Use a fixed reference frequency
- cpufreq: Use the fixed and coherent frequency for scaling capacity
- sched/topology: Add a new arch_scale_freq_ref() method
- arch_topology: Introduce thermal pressure update function
- riscv: export cpu/freq invariant to scheduler
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: Allow drivers to advertise boost enabled
- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret'
- openeuler_defconfig: Enable CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE
- cpufreq: CPPC: Fix unused-function warning
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- cpufreq: Initialize cpufreq-based invariance before subsys
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: ACPI: Only set boost MSRs on supported CPUs
- cpufreq: ACPI: Defer setting boost MSRs
- cpufreq: acpi: Remove acpi_cpufreq_cpu_ready()
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- Documentation: power: Add description about new callback for EM registration
- arch_topology: Avoid use-after-free for scale_freq_data
- cpufreq: Exit governor when failed to start old governor
- cpufreq: Move the check of cpufreq_driver-&gt;get into cpufreq_verify_current_freq()
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Hold cpufreq_driver_lock when assigning cpufreq_driver-&gt;set_boost
- cpufreq: Remove duplicate check in __cpufreq_offline()
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- cpufreq: Remove the -&gt;stop_cpu() driver callback
- cpufreq: intel_pstate: Combine -&gt;stop_cpu() and -&gt;offline()
- cpufreq: powernv: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- docs/zh_CN: add cpu-freq cpu-drivers.rst translation
- cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs
- cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em()
- cpufreq: CPPC: Do not return a value from populate_efficiency_class()
- cpufreq: CPPC: Remove cpu_data_list
- cpufreq: CPPC: Remove forward declaration of hisi_cppc_cpufreq_get_rate()
- cpufreq: CPPC: Register EM based on efficiency class information
- PM: EM: Change the order of arguments in the .active_power() callback
- cpufreq: Add callback to register with energy model
- PM: EM: Add .get_cost() callback
- cpufreq: CPPC: Add per_cpu efficiency_class
- cpufreq: remove useless INIT_LIST_HEAD()
- ACPI: CPPC: Disable FIE if registers in PCC regions
- ACPI: CPPC: Add emtpy stubs of functions for CONFIG_ACPI_CPPC_LIB unset
- cpufreq: cppc: Fix invalid return value in hisi_cppc_cpufreq_get_rate()
- cpufreq: cppc: Fix invalid return value in .get() callback
- cppc_cpufreq: Fix possible null pointer dereference
- cpufreq: CPPC: Fix error handling in cppc_scale_freq_workfn()
- cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus
- cpufreq: CPPC: Add support for frequency invariance
- arch_topology: Export arch_freq_scale and helpers
- cpufreq: CPPC: Pass structure instance by reference
- cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
- cpufreq: CPPC: Migrate to -&gt;exit() callback instead of -&gt;stop_cpu()
- cppc_cpufreq: replace per-cpu data array with a list
- cppc_cpufreq: expose information on frequency domains
- cppc_cpufreq: clarify support for coordination types
- arch_topology: Allow multiple entities to provide sched_freq_tick() callback
- sched/topology,schedutil: Wrap sched domains rebuild
- arch_topology: Rename freq_scale as arch_freq_scale
- arm64: topology: Drop the useless update to per-cpu cycles
- arm64: topology: Make AMUs work with modular cpufreq drivers
- arm64: topology: Reorder init_amu_fie() a bit
- arm64: topology: Avoid the have_policy check
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- cpufreq: prevent NULL dereference in cpufreq_online()
- cpufreq: CPPC: Fix wrong max_freq in policy initialization
- cppc_cpufreq: simplify use of performance capabilities
- cpufreq: Introduce a more generic way to set default per-policy boost flag
- cpufreq: Fix re-boost issue after hotplugging a CPU
- cpufreq: Support per-policy performance boost
- ntfs: set dummy blocksize to read boot_block when mounting
- leapraid: supports LeapRaid controller
- perf mem: Count L2 HITM for c2c statistic
- perf mem: Add statistics for peer snooping
- perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
- tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
- perf arm-spe: augment the data source type with neoverse_spe list
- tools arm64: Import cputype.h
- arm64: cputype: Add cputype definition for HIP12
- drivers/perf: hisi: Add events and rename event "cycle" for pa_pmu
- drivers/perf: hisi: Fixes the incorrect bitmask limit for the CPA event sysfs interface
- drivers/perf: hisi: Add cacheable option for L3C PMU
- perf: Remove unstable events for uncore L3C PMU
- drivers/perf: hisi: Clarifying event names and fix event ID for pa_pmu
- perf iostat: hisi: Fix port range retrival
- drivers/perf: hisi: Add support for L3C PMU v3
- drivers/perf: hisi: Refactor the event configuration of L3C PMU
- drivers/perf: hisi: Extend the field of tt_core
- drivers/perf: hisi: Extract the event filter check of L3C PMU
- drivers/perf: hisi: Simplify the probe process of each L3C PMU version
- drivers/perf: hisi: Export hisi_uncore_pmu_isr()
- drivers/perf: hisi: Relax the event ID check in the framework
- drivers/perf: hisi: Add support for HiSilicon MN PMU driver
- drivers/perf: hisi: Add support for HiSilicon NoC PMU
- drivers/perf: hisi: Support PMUs with no interrupt
- drivers/perf: hisi: Relax the event number check of v2 PMUs
- drivers/perf: hisi: Add support for HiSilicon SLLC v3 PMU driver
- drivers/perf: hisi: Use ACPI driver_data to retrieve SLLC PMU information
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- drivers/perf: hisi: Simplify the probe process for each DDRC version
- drivers/perf: hisi: Delete redundant blank line of DDRC PMU
- drivers/perf: hisi: Fix incorrect variable name "hha_pmu" in DDRC PMU driver
- drivers/perf: hisi: Export associated CPUs of each PMU through sysfs
- drivers/perf: hisi: Provide a generic implementation of cpumask/identifier
- drivers/perf: convert sysfs snprintf family to sysfs_emit
- perf: hisi: Constify static struct attribute_group
- perf/hisi: Constify static attribute_group structs
- drivers/perf: hisi: Add a common function to retrieve topology from firmware
- drivers/perf: hisi: Extract topology information to a separate structure
- drivers/perf: hisi: Refactor the detection of associated CPUs
- drivers/perf: hisi: Migrate to one online CPU if no associated one online
- drivers/perf: hisi: Don't update the associated_cpus on CPU offline
- drivers/perf: hisi: Define a symbol namespace for HiSilicon Uncore PMUs
- perf stat: Enable iostat mode for HiSilicon PCIe PMU
- perf stat: Add struct perf_stat_aggr to perf_stat_evsel
- perf stat: Display iostat headers correctly
- perf stat: Don't display metric header for non-leader uncore events
- perf stat: Basic support for iostat in perf
- perf arm-spe: Refactor arm-spe to support operation packet type
- perf arm-spe: Use SPE data source for neoverse cores
- perf arm-spe: Don't set data source if it's not a memory operation
- perf tools: Sync addition of PERF_MEM_SNOOPX_PEER
- tools: arm64: Import sysreg.h
- smb3: fix for slab out of bounds on mount to ksmbd
- watchdog/perf: adapt the watchdog_perf interface for async model
- watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
- irqchip/gic-v3: Fix a system stall when using pseudo NMI with CONFIG_ARM64_NMI closed
- irqchip/gic-v3: Fix hard LOCKUP caused by NMI being masked
- irqchip/gic-v3: Implement FEAT_GICv3_NMI support
- arm64/nmi: Add Kconfig for NMI
- arm64/nmi: Add handling of superpriority interrupts as NMIs
- arm64/irq: Document handling of FEAT_NMI in irqflags.h
- arm64/entry: Don't call preempt_schedule_irq() with NMIs masked
- arm64/nmi: Manage masking for superpriority interrupts along with DAIF
- nvme-fc: use lock accessing port_state and rport state
- KVM: arm64: Hide FEAT_NMI from guests
- arm64/cpufeature: Detect PE support for FEAT_NMI
- arm64/hyp-stub: Enable access to ALLINT
- arm64/asm: Introduce assembly macros for managing ALLINT
- arm64/sysreg: Add definitions for immediate versions of MSR ALLINT
- arm64/booting: Document boot requirements for FEAT_NMI
- irqchip/gic-v3: Fix priority mask handling
- irqchip/gic-v3: Refactor ISB + EOIR at ack time
- irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
- soc cache: Add framework driver for HiSilicon SoC cache</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-301.0.0.204" date="1770811200">- !20333 phytium-tpcm-sig-8-hadler-reg-s5000c
- !20767  Revert hibmc patches to fix null-ptr-deref
- Revert "!19950 【OLK-5.10】 Drivers GPU Patches from 6.6"
- Revert "!20738 drm/hisilicon: Using the to_hibmc_drm_private to convert"
- !20740 cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- cpufeaure: fix the warning of ID_AA64PFR1_NMI_SHIFT
- !20738 drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Using the to_hibmc_drm_private to convert
- drm/hisilicon: Code refactoring for hibmc_drm_drv
- !19010 [OLK-5.10] Drivers for Zhaoxin GMI SM3 &amp; SM4 algorithm
- !20666  CVE-2023-53712
- !20673 Fix CVE-2025-39957
- !20686  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20687  i40e: Fix potential invalid access when MAC list is empty
- !20692  ipv6: sr: Fix MAC comparison to be constant-time
- !20699  sctp: linearize cloned gso packets in sctp_rcv
- !20688  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- !20698  libceph: fix potential use-after-free in have_mon_and_osd_map()
- !20697  tipc: Fix use-after-free in tipc_mon_reinit_self().
- sctp: linearize cloned gso packets in sctp_rcv
- libceph: fix potential use-after-free in have_mon_and_osd_map()
- tipc: Fix use-after-free in tipc_mon_reinit_self().
- ipv6: sr: Fix MAC comparison to be constant-time
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-&gt;cork.
- i40e: Fix potential invalid access when MAC list is empty
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
- !20119 Add 950 KVM feature support
- !20008 [OLK-5.10] Introduce the Ring Buffer mechanism to accelerate CSV virtual machine migration
- !20638  ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- !20637  net/sched: sch_qfq: do not free existing class in qfq_change_class()
- !20636 v2  macvlan: fix possible UAF in macvlan_forward_source()
- wifi: mac80211: increase scan_ies_len for S1G
- !20566  crypto: lzo - Fix compression buffer overrun
- KVM: arm64: PMU: Avoid inappropriate use of host's PMUVer
- KVM: arm64: ipiv: Fix compilation warning
- KVM: arm64: check if IPIV is enabled in BIOS
- kvm: hisi: print error for IPIV
- KVM: arm64: using kvm_vgic_global_state for ipiv
- kvm: hisi: Don't allow to change mpidr in IPIv
- kvm: hisi: make sure vcpu_id and vcpu_idx have same value in IPIv
- KVM: arm64: fix live migration bug of IPIv
- irqchip/gic: Add HiSilicon PV SGI support
- KVM: arm64: Implement PV_SGI related calls
- KVM: arm64: Document PV-sgi interface
- KVM: arm64: Introduce ipiv enable ioctl
- arm64/config: add config to control whether enable IPIV feature
- kvm: hisi_virt: Fix compilation error due to missing ACPI configuration
- kvm: hisi_virt: Probe and configure IPIV capacity on HIP12
- kvm: arm64: Add interface KVM_CAP_ARM_IPIV_MODE
- kvm: hisi_virt: Register ipiv exception interrupt
- irqchip: gicv3-its: Set base address of vm table and targe ITS when vpe schedule and deschedule
- kvm: arm64: avoid sending multi-SGIs in IPIV
- kvm: hisi_virt: Allocate VM table and save vpeid in it
- KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
- KVM: arm64: fix memory leak in TLBI
- KVM: arm64: Add new HiSi CPU type to support DVMBM
- kvm: hisi_virt: Update TLBI broadcast feature for hip12
- kvm: hisi_virt: fix kernel panic when enable DVMBM in nVHE
- ARM: 9317/1: kexec: Make smp stop calls asynchronous
- !20654  scsi: qla4xxx: Prevent a potential error pointer dereference
- !20653  bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- !20655  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- !20656  firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- !20274 [Hygon][5.10][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
- x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
- firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
- mm/slub: avoid accessing metadata when pointer is invalid in object_err()
- scsi: qla4xxx: Prevent a potential error pointer dereference
- bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
- macvlan: fix possible UAF in macvlan_forward_source()
- !20597  team: fix check for port enabled in team_queue_override_port_prio_changed()
- !20593  CVE-2025-39744 fixup
- !20465  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- !20178 v3  Fix CVE-2024-53179
- team: fix check for port enabled in team_queue_override_port_prio_changed()
- rcu: Fix racy re-initialization of irq_work causing hangs
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
- rcu: Use IRQ_WORK_INIT_HARD() to avoid rcu_read_unlock() hangs
- !20523 [Hygon][5.10][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
- !20428  wifi: mt76: do not run mt76u_status_worker if the device is not running
- !20427  RDMA/bnxt_re: Prevent handling any completions after qp destroy
- !20466  pptp: ensure minimal skb length in pptp_xmit()
- !20426  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- !20574  RDMA/cm: Fix leaking the multicast GID table reference
- !20573  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- !20565 Fix CVE-2023-53521
- !20521 Fix CVE-2026-23038
- RDMA/cm: Fix leaking the multicast GID table reference
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
- crypto: lzo - Fix compression buffer overrun
- !20502 [OLK-5.10] backport important bugfix for bnxt driver from upstream linux-5.10.y
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- eth: bnxt: move and rename reset helpers
- x86: Resolve FPU state corruption between atomic and non-atomic contexts
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- pptp: ensure minimal skb length in pptp_xmit()
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
- wifi: mt76: do not run mt76u_status_worker if the device is not running
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
- phytium: add tpcm sgi handler for s5000c
- smb: client: fix use-after-free of signing key
- cifs: missed ref-counting smb session in find
- KVM: SVM: Add RECEIVE_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add SEND_UPDATE_DATA command helper to support KVM_CSV_COMMAND_BATCH
- KVM: SVM: Prepare memory pool to allocate buffers for KVM_CSV_COMMAND_BATCH
- KVM: SVM: Add KVM_CSV_COMMAND_BATCH command for applying CSV RING_BUFFER mode
- crypto: ccp: Add support for issue commands in CSV RING_BUFFER mode
- crypto: ccp: Add support to switch to CSV RING_BUFFER mode
- crypto: ccp: Add support for dequeue status in CSV RING_BUFFER mode
- crypto: ccp: Add support for enqueue command pointers in CSV RING_BUFFER mode
- crypto: ccp: Introduce init and free helpers to manage CSV RING_BUFFER queues
- openeuler_defconfig: Enable CONFIG_CRYPTO_SM*_ZHAOXIN_GMI
- crypto: Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
- crypto: Add support for Zhaoxin GMI SM3 Secure Hash algorithm</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-302.0.0.205" date="1771934400">- !20737  pNFS: Fix a deadlock when returning a delegation during open()
- !20725  tracing: Add recursion protection in kernel stack trace recording
- !20746 Fix CVE-2026-22990
- !20671  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- !20669  irqchip/gic-v3-its: Avoid truncating memory addresses
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
- pNFS: Fix a deadlock when returning a delegation during open()
- tracing: Add recursion protection in kernel stack trace recording
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
- irqchip/gic-v3-its: Avoid truncating memory addresses</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-303.0.0.206" date="1772539200">- !20899 Fix CVE-2026-23216
- !20885  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- !20799 RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- !20839  bpf, cpumap: Make sure kthread is running before map update returns
- bpf, cpumap: Make sure kthread is running before map update returns
- !20022 [OLK-5.10] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
- !20818  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20801  ACPI/IORT: Add PMCG platform information for 162001900
- !20814  migrate: correct lock ordering for hugetlb file folios
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
- !20800  fix CVE-2026-23054
- migrate: correct lock ordering for hugetlb file folios
- ACPI/IORT: Add PMCG platform information for 162001900
- arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
- net: hv_netvsc: reject RSS hash key programming without RX indirection table
- hv_netvsc: Allocate rx indirection table size dynamically
- RDMA/hns: Remove the accidentally added hns_roce_trace.h file
- irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-304.0.0.207" date="1773144000">- !21136  sched/rt: Skip currently executing CPU in rto_next_cpu()
- !21131  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21075 ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21093  kexec: derive purgatory entry from symbol
- !21140  ksmbd: fix use-after-free in kerberos authentication
- !21132  SUNRPC: Ensure the transport backchannel association
- ksmbd: fix use-after-free in kerberos authentication
- sched/rt: Skip currently executing CPU in rto_next_cpu()
- SUNRPC: Ensure the transport backchannel association
- procfs: fix missing RCU protection when reading real_parent in do_task_stat()
- !21112  CVE-2024-57979
- !21111  ALSA: aloop: Fix racy access at PCM trigger
- pps: Fix kabi in pps_device
- pps: Fix a use-after-free
- ALSA: aloop: Fix racy access at PCM trigger
- kexec: derive purgatory entry from symbol
- ipmi: Add HiSilicon IPMI Page Soft Offline driver
- !21072 v2  arm64/mpam: enable MPAM feature and
- !20883  RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- !21021  CVE-2026-23209
- arm64/mpam: fix the bitmap written during mpam device reset
- arm64/mpam: only allow L3 cache MPAM device created
- arm64/mpam: fix inadvertently updating after repeatedly updating
- arm64/mpam: set default feedback of last_cmd_status interface as null string
- !21000 net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- !19837 KVM: Drop tlbs_dirty
- !20773 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !21014  bpf selftest cross compile fixes
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path
- macvlan: fix error recovery in macvlan_common_newlink()
- !21003 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- selftests/bpf: Pass target triple to get_sys_includes macro
- selftests/bpf: Enable cross-building
- net: hns3: hns3 driver should be initialized when VF multi tcs is configured
- net: hns3: modify code of judging if SMMU DMA is enabled
- !20976  support apei_page_offline_policy
- nvmet-tcp: pass iov_len instead of sg-&gt;length to bvec_set_page()
- nvmet-tcp: don't map pages which can't come from HIGHMEM
- nvmet-tcp: fix regression in data_digest calculation
- nvmet-tcp: fix memory leak when performing a controller reset
- !20971 Fix CVE-2026-23074
- apei/ghes: Add sysctl interface to control soft-offline page isolation
- Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
- !20887  HiSock Enhancement
- net/sched: Enforce that teql can only be used as root qdisc
- drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
- !20891  dcache: Limit the minimal number of bucket to two
- !20956  CVE-2025-39967
- fbcon: Fix OOB access in font allocation
- fbcon: fix integer overflow in fbcon_do_set_font
- overflow: Allow mixed type arguments
- nvmet-tcp: add an helper to free the cmd buffers
- dcache: Limit the minimal number of bucket to two
- bpf: Deprecate hisock unused helpers and orig ingress logic
- bpf: Add local connect support for hisock
- bpf: Add ipv4-mapped ipv6 addr support for hisock
- bpf: Add target comm parse to hisock_cmd
- bpf: Add multi port parse to hisock_cmd
- bpf: Only deploy hisock in server
- bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
- bpf: Add bpf_handle_ingress/egress_ptype helper function
- bpf: Add bpf_set_ingress/egress_dev helper function
- bpf: Add bpf_get_skb_ethhdr helper function
- bpf: Add bpf_set_ingress_dst helper function
- bpf: Add BPF_HISOCK_INGRESS attach type
- net: move the ptype_all and ptype_base declarations to include/linux/netdevice.h
- RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
- KVM: Drop tlbs_dirty</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-305.0.0.208" date="1773748800">- !21262  arm64/mpam: Extending MPAM features and bugfix
- arm64/mpam: Allow MBMIN to be set to 0
- arm64/mpam: Add quirk for MPAM MSMON_MBWU monitor NRDY bit
- arm64/mpam: Add quirk to shrink MATA PMG range
- !21211  scsi: hisi_sas: Change the debugfs parameters dump count default value
- scsi: hisi_sas: Change the debugfs parameters dump count default value
- !21163  gic: Add hip09 support for HISILICON_ERRATUM_165010801
- gic: Add hip09 support for HISILICON_ERRATUM_165010801</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-306.0.0.209" date="1774353600">- !21336  arm64/mpam: Add nrdy latency to mbw_rdmon.
- arm64/mpam: Add nrdy latency to mbw_rdmon.
- !21243  fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
- !20753 [OLK-5.10] Fix the issue that vm can't access to host with virtio-net
- !21301 [OLK-5.10]:update patches for sw64 architecture
- !21274  l2tp: fix double dst_release() on sk_dst_cache race
- !21215 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-6.6.y
- sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled
- sw64: add support for batched TLB flushing during unmap
- sw64: fix the parameter passing logic of memblock_mark_nomap
- sw64: add HUGE_VMAP support for c4
- sw64: adjust the value of CONFIG_RELOCATION_TABLE_SIZE
- sw64: define get_cycles macro
- sw64: cpuidle: refine C6 state stability
- sw64: fix mmap_base exceeding Java assertion address
- sw64: add memb before/after atomic
- sw64: add EDAC support with dynamic node and MC detection
- sw64: fix: getcpu passed a null pointer error
- sw64: add barriers and tlb flush for set_atc
- sw64: adapt kernel page table for kdump
- sw64: adapt kernel page table for memory hotplug
- sw64: adjust the marking and definitions of some kernel mapping functions
- sw64: adapt kernel page table for S4
- sw64: iommu: refactor iommu v2 initialization
- sw64: fix an inappropriate lock in __set_memory
- sw64: cache: fix shared_cpu_map when PPTT is invalid
- sw64: add alternative runtime patching
- sw64: pci: fix IO_BASE if numa_off
- sw64: use ioremap to map spaces for cpufreq and S3
- sw64: add definitions for kernel-required CPU capabilities
- sw64: pci: add sunway pci controller for Command Completed errata
- sw64: kvm: add qemu-gdb watchpoint support
- sw64: kvm: fix srcu lock leak in pv steal time
- !21277  mm: make sure freeram is smaller than totalram
- mm: make sure freeram is smaller than totalram
- l2tp: fix double dst_release() on sk_dst_cache race
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
- nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
- vhost: move smp_rmb() into vhost_get_avail_idx()
- vhost: correct misleading printing information</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-307.0.0.210" date="1775044800">- !21428  RDMA/umad: Reject negative data_len in ib_umad_write
- !21420 v3  CVE-2026-23352
- !21383  fat: avoid parent link count underflow in rmdir
- !21435 Fix CVE-2026-23388
- !21392  ext4: fix memory leak in ext4_ext_shift_extents()
- !21385  ext4: fix dirtyclusters double decrement on fs shutdown
- !21384  ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
- Squashfs: check metadata block offset is within range
- RDMA/umad: Reject negative data_len in ib_umad_write
- !21404  fix queue start/stop imbalance under race
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
- x86/efi: defer freeing of boot services memory
- dm: fix queue start/stop imbalance under remove/resume races
- dm: fix queue start/stop imbalance under suspend/load/resume races
- ext4: fix memory leak in ext4_ext_shift_extents()
- ext4: fix dirtyclusters double decrement on fs shutdown
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
- fat: avoid parent link count underflow in rmdir
- !21376 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- Revert "Fixed the wrong debugfs node name in hisi_spi debugfs initialization"
- !21321  nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
- nfs: return EISDIR on nfs3_proc_create if d_alias is a dir</changelog>
</package>
<package pkgid="76397940d56f19e6648ac1f615b3095c7e94c1d5f8b37d63570cc408bfcb6d81" name="kmod-kvdo" arch="src">
  <version epoch="0" ver="8.1.0.316" rel="3.oe2203sp4"/>
  <changelog author="xurui &lt;rui.xu@shingroup.cn&gt; - 8.1.0.316-2" date="1709899200">- Add support for ppc64le</changelog>
  <changelog author="fengxueyan &lt;fengxy@teligen.net&gt; - 8.1.0.316-3" date="1747828800">- Fix Error in POSTlN scriptlet in rpmpackage kmod-kvdo</changelog>
</package>
<package pkgid="29cfb336c7ef3eeca6b81e69e334fd61173a0d92c3bfe6a8c93ec88f38d5a147" name="kpatch" arch="src">
  <version epoch="1" ver="0.9.5" rel="11.oe2203sp4"/>
  <changelog author="Bin Hu&lt;hubin73@huawei.com&gt; -1:0.9.5-7" date="1666008000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync patch from master to openEuler-22.03-LTS-Next</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:0.9.5-8" date="1695643200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error in making hotpatch when local_match be empty</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:0.9.5-9" date="1710331200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add gcc-plugin-devel to BuildRequires for ppc64le</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 1:0.9.5-10" date="1715342400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add gcc-c++ to BuildRequires for ppc64le</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1:0.9.5-11" date="1720872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic</changelog>
</package>
<package pkgid="62b4c9bf6a1cfc401f58e62e1292044759a10469117df5632fd5eb0872a2ae5e" name="kpatch" arch="src">
  <version epoch="1" ver="0.9.5" rel="12.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:0.9.5-8" date="1695643200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix error in making hotpatch when local_match be empty</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:0.9.5-9" date="1710331200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add gcc-plugin-devel to BuildRequires for ppc64le</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 1:0.9.5-10" date="1715342400">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add gcc-c++ to BuildRequires for ppc64le</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1:0.9.5-11" date="1720872000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1:0.9.5-12" date="1731067200">- Type:bugfix
- ID:NA                                                                                                         
- SUG:NA
- DESC:adpat kpatch bundle symbols to kernel change</changelog>
</package>
<package pkgid="b3935f9b66904404029667681a26ac6c9a73b54a261b5f6b1e216d697a41c393" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="17.oe2203sp4"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-8" date="1686830400">- add version for Obsoletes and Provides of workstation</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.19.2-9" date="1692100800">- fix CVE-2023-36054</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-10" date="1695124800">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-11" date="1701345600">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-12" date="1703073600">- backport patches to fix umimportant memory leaks</changelog>
  <changelog author="xuraoqing&lt;xuraoqing@huawei.com&gt; - 1.19.2-13" date="1703851200">- backport patches</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
</package>
<package pkgid="5a023eacc26167083f926288acb69752737bf86cf31abd3c3150f07837d25eb7" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="23.oe2203sp4"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.19.2-14" date="1706184000">- Backport patches from upstream community</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-15" date="1710849600">- backport patches from upstream</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 1.19.2-16" date="1718625600">- backport patches from upstream</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 1.19.2-18" date="1720785600">- Fix memory leak in OTP kdcpreauth module</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-19" date="1723723200">- Change krb5_get_credentials() endtime behavior</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 1.19.2-20" date="1724846400">- Fix uncommon PKINIT memory leak</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 1.19.2-21" date="1733313600">- backport upstream patches</changelog>
  <changelog author="liuh &lt;liuhuan01@kylinos.cn&gt; - 1.19.2-22" date="1733918400">- backport patches from upstream</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.19.2-23" date="1738238400">- fix CVE-2025-24528</changelog>
</package>
<package pkgid="ad58efc094cf61675e1e8d1c3b426cacb255161fd043b279eb706509d1e66110" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="26.oe2203sp4"/>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 1.19.2-17" date="1720094400">- backport patches to fix bugs and CVE-2024-37370 CVE-2024-37371</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 1.19.2-18" date="1720785600">- Fix memory leak in OTP kdcpreauth module</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.19.2-19" date="1723723200">- Change krb5_get_credentials() endtime behavior</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 1.19.2-20" date="1724846400">- Fix uncommon PKINIT memory leak</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 1.19.2-21" date="1733313600">- backport upstream patches</changelog>
  <changelog author="liuh &lt;liuhuan01@kylinos.cn&gt; - 1.19.2-22" date="1733918400">- backport patches from upstream</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.19.2-23" date="1738238400">- fix CVE-2025-24528</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 1.19.2-24" date="1742817600">- backport patches to fix bugs</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 1.19.2-25" date="1754913600">- backport upstream patches</changelog>
  <changelog author="XuRaoqing &lt;xuraoqing@h-partners.com&gt; - 1.19.2-26" date="1755000000">- fix CVE-2025-3576</changelog>
</package>
<package pkgid="cacef7659d9c915bc1260c9882040fa0a9fbde2dc84fd3f4daed6cd9829cb2fe" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="29.oe2203sp4"/>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 1.19.2-20" date="1724846400">- Fix uncommon PKINIT memory leak</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 1.19.2-21" date="1733313600">- backport upstream patches</changelog>
  <changelog author="liuh &lt;liuhuan01@kylinos.cn&gt; - 1.19.2-22" date="1733918400">- backport patches from upstream</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.19.2-23" date="1738238400">- fix CVE-2025-24528</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 1.19.2-24" date="1742817600">- backport patches to fix bugs</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 1.19.2-25" date="1754913600">- backport upstream patches</changelog>
  <changelog author="XuRaoqing &lt;xuraoqing@h-partners.com&gt; - 1.19.2-26" date="1755000000">- fix CVE-2025-3576</changelog>
  <changelog author="zhangyaqi &lt;zhangyaqi@kylinos.cn&gt; - 1.19.2-27" date="1761912000">- backport upstream patches</changelog>
  <changelog author="zhangyaqi &lt;zhangyaqi@kylinos.cn&gt; - 1.19.2-28" date="1763467200">- Delete the last submitted patch</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 1.19.2-29" date="1765886400">- backport patches to fix bugs</changelog>
</package>
<package pkgid="b78e88c25ca9dc6b3e8c4cfe85f53ce12185f771f5d6a43654457084effe9945" name="lasso" arch="src">
  <version epoch="0" ver="2.7.0" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.7.0-2" date="1762516800">- Fix CVE-2025-46404, CVE-2025-46705, CVE-2025-46784 and CVE-2025-47151</changelog>
</package>
<package pkgid="d978a3cc37e349a12a6c20d0ba28576070f62dbd4618385d400056975ac0f804" name="lcr" arch="src">
  <version epoch="0" ver="2.1.4" rel="12.oe2203sp4"/>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 2.1.4-9" date="1723809600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add nri struct definitions</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 2.1.4-10" date="1724068800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add nri def in host config</changelog>
  <changelog author="yuanchao&lt;1050706328@qq.com&gt; - 2.1.4-11" date="1725364800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:fix invalid usage of arrtibute visibility</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.1.4-12" date="1729166400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:unify nri variable format</changelog>
</package>
<package pkgid="a384c2692b3de8158da8a601159ab5416434d7c200838985da60bb4d9bcd94e7" name="lcr" arch="src">
  <version epoch="0" ver="2.1.4" rel="13.oe2203sp4"/>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 2.1.4-9" date="1723809600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add nri struct definitions</changelog>
  <changelog author="zhongtao&lt;zhongtao17@huawei.com&gt; - 2.1.4-10" date="1724068800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:add nri def in host config</changelog>
  <changelog author="yuanchao&lt;1050706328@qq.com&gt; - 2.1.4-11" date="1725364800">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:fix invalid usage of arrtibute visibility</changelog>
  <changelog author="wujichao&lt;wujichao1@huawei.com&gt; - 2.1.4-12" date="1729166400">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:unify nri variable format</changelog>
  <changelog author="liuxu&lt;liuxu156@huawei.com&gt; - 2.1.4-13" date="1732536000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:sync from upstream</changelog>
</package>
<package pkgid="b5cad7bd13996db125fc266bbccde28453f5b05da2bd731e4307cabe2d6745d3" name="libX11" arch="src">
  <version epoch="0" ver="1.7.2" rel="10.oe2203sp4"/>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 1.7.2-10" date="1773057600">- fix CVE-2025-26597</changelog>
</package>
<package pkgid="dd95c424cd1e73c81d41828ab5d5ef2446c679d7c3177e6cf622bc1df7d6da18" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="10.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-10" date="1764072000">- fix CVE-2025-60753</changelog>
</package>
<package pkgid="a944150fdd5880965a50246c4b607b3f04999dc86009b365551d661ebd3a8b61" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="11.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-10" date="1764072000">- fix CVE-2025-60753</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-11" date="1767009600">- fix the regression caused by the fix for CVE-2025-60753</changelog>
</package>
<package pkgid="dbed1e17a7f983ce7873f9d8d39ece24022decdf5fca524b82c11c9a3bd5e3e4" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="12.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-10" date="1764072000">- fix CVE-2025-60753</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-11" date="1767009600">- fix the regression caused by the fix for CVE-2025-60753</changelog>
  <changelog author="zhaoheqi &lt;zhaoheqi@xfusion.com&gt; - 3.5.2-12" date="1773662400">- fix CVE-2026-4111</changelog>
</package>
<package pkgid="ce13526788ecc6d0cff17fe0dc7f264034cfd81177b8fb1968151bb0f6ba7e6e" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="8.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
</package>
<package pkgid="e36dae48c047378e2b439c649ea49aebc860eb1fd08e61b1238efc5220aed51e" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.2" rel="9.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
</package>
<package pkgid="1cdc1411c9a30230a6f66bffd516350aeb73c85fe2be35c7681730ba26dafaec" name="libblockdev" arch="src">
  <version epoch="0" ver="2.26" rel="5.oe2203sp4"/>
  <changelog author="liyanan &lt;liyana61@h-partners.com&gt; - 2.26-4" date="1704196800">- remove require vdo</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.26-5" date="1750420800">- fix CVE-2025-6019</changelog>
</package>
<package pkgid="f99534579fbc39f79bd6da15138935c2edcbbc1712beac41535dafbf4afc3b1c" name="libbpf" arch="src">
  <version epoch="2" ver="0.8.1" rel="19.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; 2:0.8.1-10" date="1701432000">- backport patches from openEuler-22.03-LTS-SP2:
  0001-remove-nonexistent-helper-functions-and-add-new-help.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-11" date="1701950400">- backport patches from upstream:
  backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
  backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
  backport-libbpf-Fix-is_pow_of_2.patch
  backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-12" date="1713182400">- backport patches from upstream:
  backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
  backport-libbpf-Fix-str_has_sfxs-return-value.patch
  backport-libbpf-Initialize-err-in-probe_map_create.patch</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 2:0.8.1-13" date="1714305600">- backport patch from upstream:
  backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch</changelog>
  <changelog author="xiesongyang &lt;xiesongyang@huawei.com&gt; - 2:0.8.1-14" date="1718884800">- backport patch from upstream:
  backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-15" date="1727265600">- backport patch from upstream:
  backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-16" date="1728475200">- backport patch from upstream:
  backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
  backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
  backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-17" date="1735560000">- backport patch from upstream:
  backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-18" date="1741953600">- backport patch from upstream:
  backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
  backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
  backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
  backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
  backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
  backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; 2:0.8.1-19" date="1750680000">- Adaption for sched type eBPF program:
  backport-libbpf-Adaption-for-sched-type-eBPF-program.patch</changelog>
</package>
<package pkgid="9bd5de9b8db05e26c90c4f2efdbe27740748ad6eb4c3a753172c667d03e464c3" name="libbpf" arch="src">
  <version epoch="2" ver="0.8.1" rel="21.oe2203sp4"/>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-12" date="1713182400">- backport patches from upstream:
  backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
  backport-libbpf-Fix-str_has_sfxs-return-value.patch
  backport-libbpf-Initialize-err-in-probe_map_create.patch</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 2:0.8.1-13" date="1714305600">- backport patch from upstream:
  backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch</changelog>
  <changelog author="xiesongyang &lt;xiesongyang@huawei.com&gt; - 2:0.8.1-14" date="1718884800">- backport patch from upstream:
  backport-libbpf-Fix-an-error-in-64bit-relocation-value-comput.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-15" date="1727265600">- backport patch from upstream:
  backport-libbpf-Avoid-uninitialized-value-in-BPF_CORE_READ_BI.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-16" date="1728475200">- backport patch from upstream:
  backport-libbpf-Add-NULL-checks-to-bpf_object__prev_map,next_.patch
  backport-libbpf-Apply-map_set_def_max_entries-for-inner_maps-.patch
  backport-libbpf-Fix-uninitialized-warning-in-btf_dump_dump_ty.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-17" date="1735560000">- backport patch from upstream:
  backport-libbpf-Dont-take-direct-pointers-into-BTF-data-from-.patch</changelog>
  <changelog author="zhangmingyi &lt;zhangmingyi5@huawei.com&gt; 2:0.8.1-18" date="1741953600">- backport patch from upstream:
  backport-libbpf-Do-not-resolve-size-on-duplicate-FUNCs.patch
  backport-libbpf-Fix-bpf_object__open_skeleton-s-mishandling-o.patch
  backport-libbpf-Fix-segfault-due-to-libelf-functions-not-sett.patch
  backport-libbpf-Fixed-getting-wrong-return-address-on-arm64-a.patch
  backport-libbpf-fix-sym_is_subprog-logic-for-weak-global-subp.patch
  backport-libbpf-move-global-data-mmap-ing-into-bpf_object__lo.patch</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; 2:0.8.1-19" date="1750680000">- Adaption for sched type eBPF program:
  backport-libbpf-Adaption-for-sched-type-eBPF-program.patch</changelog>
  <changelog author="andy &lt;liuyang01@kylinos.cn&gt; 2:0.8.1-20" date="1753876800">- backport patch from upstream:
  backport-libbpf-Fix-out-of-bound-read.patch
  backport-libbpf-fix-LDX_STX_ST-CO-RE-relocation-size-adjustment-logic.patch
  backport-libbpf-Fix-hypothetical-STT_SECTION-extern-NULL-deref-case.patch</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; 2:0.8.1-21" date="1757764800">- Add bpf_cpumask_op API to support prefered cpu control in eBPF program:
  backport-libbpf-Add-bpf_cpumask_op-API-to-support-prefered-cp.patch</changelog>
</package>
<package pkgid="9f5c2ecf167bccf1bb754985896c80dcce945546ea7c6352ba1eaa18336319df" name="libcap" arch="src">
  <version epoch="0" ver="2.61" rel="8.oe2203sp4"/>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2.61-5" date="1685361600">- fix CVE-2023-2602/CVE-2023-2603 &amp;&amp; fix memory leaks</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2.61-6" date="1688385600">- VFS_CAP_U32 can not ensure that XATTR_NAME_CAPS is defined, and failed to build</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.61-7" date="1711368000">- backport upstream patches:
  getcpcaps: fix program name in help message
  Stop using _pam_overwrite() in pam_cap.c</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.61-8" date="1741089600">- fix CVE-2025-1390</changelog>
</package>
<package pkgid="c91103c7c44ba57d1b73fc732758ab819bc8d9b5f8194c340c3cf661f9741283" name="libexif" arch="src">
  <version epoch="0" ver="0.6.22" rel="6.oe2203sp4"/>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 0.6.22-6" date="1773662400">- fix CVE-2026-32775</changelog>
</package>
<package pkgid="a741f63ec0197e3bc0a0d96ed7d2f244a717834829fd544cfc9c9909452a1c35" name="libffi" arch="src">
  <version epoch="0" ver="3.4.2" rel="10.oe2203sp4"/>
  <changelog author="zhangruifang&lt;zhangruifang1@h-partners.com&gt; - 3.4.4-1" date="1698321600">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:update version to 3.4.4</changelog>
  <changelog author="zhangruifang&lt;zhangruifang1@h-partners.com&gt; - 3.4.2-8" date="1699963200">- revert version to 3.4.2-8
- compatibility issues exist between versions</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.4.2-9" date="1736769600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
       Robustify floating point comparison in test
       Fix floating point compare</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 3.4.2-10" date="1753790400">- fix bugs in the x86-64 and x32 target</changelog>
</package>
<package pkgid="738291037247539ed771395a17d4d55197398ca7614c6fb6fc6a4e20ebe7d1e8" name="libgsf" arch="src">
  <version epoch="0" ver="1.14.47" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.14.47-2" date="1728043200">- fix CVE-2024-36474, CVE-2024-42415</changelog>
</package>
<package pkgid="bfda762d36390e9527c5cc2612ed90ba32905fff62060aa936acd6c1b0a84c79" name="libkperf" arch="src">
  <version epoch="0" ver="v1.2" rel="2.oe2203sp4"/>
  <changelog author="echo &lt;2220386943@qq.com&gt; - 1.1-1" date="1723204800">- Package init</changelog>
  <changelog author="echo &lt;2220386943@qq.com&gt; - 1.2-2" date="1732017600">- update version to 1.2-2
- support new create thread
- description of supplementary documents
- support event grouping
- add the mangleName in symbol.h</changelog>
</package>
<package pkgid="1d240870412a281b15c8283a17fea7612c8e50f2bee88d23210809979192480b" name="libksba" arch="src">
  <version epoch="0" ver="1.6.4" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.4-2" date="1760529600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix src_repo in yaml file</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.4-3" date="1772193600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix double increment in DN parser while counting hexdigits</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.6.4-4" date="1773144000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix a memory leak in _ksba_ber_decoder_decode</changelog>
</package>
<package pkgid="e339f5c87c6f00257ccc0476e180717a33f33be3cfad776b03a0e79913a5341c" name="libmediaart" arch="src">
  <version epoch="0" ver="1.9.6" rel="2.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.9.6-2" date="1727179200">- Added 'Buildarch: noarch' to the help subpackage.</changelog>
</package>
<package pkgid="02e7db93cbb243b303eb57c525355acd7d6cb00e61c787c131165f869e5e32cc" name="libpaper" arch="src">
  <version epoch="0" ver="1.1.29" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.29-2" date="1764936000">- Add D series paper (common in China) and ZL envelope dimensions</changelog>
</package>
<package pkgid="9d2d289dfce4cca3d34841ac5f7eb7ee4aeb52025a6e11b36be277325cabbd72" name="libpcap" arch="src">
  <version epoch="14" ver="1.10.3" rel="2.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 14:1.10.3-1" date="1675684800">- Type:requirements
- ID:NA
- SUG:NA
- DESC:update libpcap to 1.10.3</changelog>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.3-2" date="1727092800">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
</package>
<package pkgid="7ebc6c0dc677df534787386c5fec65dab2992f2843a2fb47298c32ecb0ea3629" name="libpcap" arch="src">
  <version epoch="14" ver="1.10.3" rel="4.oe2203sp4"/>
  <changelog author="xingwei14 &lt;xingwei14@h-partners.com&gt; - 14:1.10.3-2" date="1727092800">- Type:CVE
- CVE:CVE-2023-7256 CVE-2024-8006
- SUG:NA
- DESC:fix CVE-2023-7256 and CVE-2024-8006</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 14:1.10.3-3" date="1767528000">- Type:CVE
- CVE:CVE-2025-11961
- SUG:NA
- DESC:fix CVE-2025-11961</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 14:1.10.3-4" date="1767960000">- Type:CVE
- CVE:CVE-2025-11964
- SUG:NA
- DESC:fix CVE-2025-11964</changelog>
</package>
<package pkgid="3dd2f814b421d2a3e1343d2aa7984b1ed656c23c8e78974c0fff94a33e5e95be" name="libpng" arch="src">
  <version epoch="2" ver="1.6.38" rel="3.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:1.6.38-3" date="1763985600">- Type:cves
- CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
- SUG:NA
- DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720</changelog>
</package>
<package pkgid="8e032b84cc79b2dc477586596e7d719ceec8222afffafc34d199b920d9da8f19" name="libpng" arch="src">
  <version epoch="2" ver="1.6.38" rel="4.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:1.6.38-3" date="1763985600">- Type:cves
- CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
- SUG:NA
- DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:1.6.38-4" date="1764849600">- fix CVE-2025-66293</changelog>
</package>
<package pkgid="f2655346157b1443f5f15981e5b218ebcf2070f8dd4ef306732d97662ca0dab1" name="libpng" arch="src">
  <version epoch="2" ver="1.6.38" rel="5.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:1.6.38-3" date="1763985600">- Type:cves
- CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
- SUG:NA
- DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:1.6.38-4" date="1764849600">- fix CVE-2025-66293</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 2:1.6.38-5" date="1768478400">- fix CVE-2026-22695 CVE-2026-22801</changelog>
</package>
<package pkgid="2827a8a2e911322a979943cb51db1b5284587ab43de7b3729c8631c5344e50c2" name="libpng" arch="src">
  <version epoch="2" ver="1.6.38" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:1.6.38-3" date="1763985600">- Type:cves
- CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
- SUG:NA
- DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:1.6.38-4" date="1764849600">- fix CVE-2025-66293</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 2:1.6.38-5" date="1768478400">- fix CVE-2026-22695 CVE-2026-22801</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 2:1.6.38-6" date="1769601600">- fix CVE-2025-28162 CVE-2025-28164</changelog>
</package>
<package pkgid="e1077a870bd632e2dcbab84c845877e5af1848fbfa6da01998b2c6c25c1b8ca2" name="libpng" arch="src">
  <version epoch="2" ver="1.6.38" rel="7.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2:1.6.38-3" date="1763985600">- Type:cves
- CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
- SUG:NA
- DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:1.6.38-4" date="1764849600">- fix CVE-2025-66293</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 2:1.6.38-5" date="1768478400">- fix CVE-2026-22695 CVE-2026-22801</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 2:1.6.38-6" date="1769601600">- fix CVE-2025-28162 CVE-2025-28164</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:1.6.38-7" date="1770724800">- fix CVE-2026-25646</changelog>
</package>
<package pkgid="85f2f61d90ddfeb379da665794e950be5fc099ecb18e619f1eb9625075a091df" name="libpq" arch="src">
  <version epoch="0" ver="13.17" rel="1.oe2203sp4"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; - 13.7-2" date="1669896000">- add loongarch support</changelog>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1695643200">- add loongarch64 sw_64 support</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700481600">- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17</changelog>
</package>
<package pkgid="bf3ba607b4d52a7f658b9c9aaf0b2c7d8dec39b3c461c95d0146b1c5a32a5858" name="libpq" arch="src">
  <version epoch="0" ver="13.20" rel="1.oe2203sp4"/>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1695643200">- add loongarch64 sw_64 support</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700481600">- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20 to fix CVE-2025-1094</changelog>
</package>
<package pkgid="08d37ee68122ea8b4406e6faa69553d43aedfa68fc9cd37f2a3611e5955b0604" name="libpq" arch="src">
  <version epoch="0" ver="13.21" rel="1.oe2203sp4"/>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1695643200">- add loongarch64 sw_64 support</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700481600">- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
</package>
<package pkgid="2d2f9cdf410583a1ae8c86ee4aa0abc73fb3fbd6857f49de3b66748fb8a738d9" name="libpq" arch="src">
  <version epoch="0" ver="13.22" rel="1.oe2203sp4"/>
  <changelog author="ZhengZhenyu &lt;zhengzhenyu@openeuler.sh&gt; - 13.12-1" date="1693483200">- aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1695643200">- add loongarch64 sw_64 support</changelog>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700481600">- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.22-1" date="1755259200">- update to 13.22</changelog>
</package>
<package pkgid="82fed565a5d3da67d953603680c6654a660c6cd287b0a8e890226c4a25469715" name="libpq" arch="src">
  <version epoch="0" ver="13.23" rel="1.oe2203sp4"/>
  <changelog author="dillon chen&lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700481600">- upgrade libpq to 13.13, fix CVE-2023-5868/5869/5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.22-1" date="1755259200">- update to 13.22</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.23-1" date="1763121600">- update to 13.23</changelog>
</package>
<package pkgid="104447d2efc79402ce0ffb83858f17dbbea64e13bb003185ad2fdcdc5b42b30f" name="libpwquality" arch="src">
  <version epoch="0" ver="1.4.5" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-3" date="1660132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix doc about difok</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.4-4" date="1661256000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:change the files order in patch file fix-doc-about-difok.patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.5-1" date="1697803200">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:update to 1.4.5</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.4.5-2" date="1719921600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch to fix maxclassrepeat=1</changelog>
</package>
<package pkgid="d2abfff12a72f8a1ffdd535ed94d20b0ece057e60dbab899f182ddbb74e1d9a8" name="librdkafka" arch="src">
  <version epoch="0" ver="2.1.1" rel="2.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 0.11.4-5" date="1652270400">- License compliance rectification</changelog>
  <changelog author="huyab&lt;1229981468@qq.com&gt; - 1.9.2-1" date="1667304000">- update version to 1.9.2-1</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1.1-1" date="1687262400">- Update to 2.1.1</changelog>
  <changelog author="lishunlong &lt;lishunlong@kylinsec.com.cn&gt; - 2.1.1-2" date="1710936000">- Fix recognition of WITH_LDS when compiling</changelog>
</package>
<package pkgid="74b01575ad2a10dcbd125e8135485e01780093aa0bae80da235d62102d613a7a" name="libreport" arch="src">
  <version epoch="0" ver="2.15.2" rel="6.oe2203sp4"/>
  <changelog author="caixiaomeng&lt;caixiaomeng2@huawei.com&gt; - 2.15.2-5" date="1716897600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify testcase port for avoid conflict with k8s in 8080</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.15.2-6" date="1759579200">- drop useless requires on fros</changelog>
</package>
<package pkgid="1bb1edce913657482828e07d6098bdc32c076318283b2ee4073449f42847bc2d" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.31" rel="5.oe2203sp4"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 1.0.31-3" date="1694433600">- Add opus-devel to satisfy configure requirements check</changelog>
  <changelog author="EulerOSWander &lt;314264452@qq.com&gt; - 1.0.31-4" date="1700049600">- libsndfile:fix CVE-2022-33065</changelog>
  <changelog author="zhangnaichuan &lt;zhangnaichuan@huawei.com&gt; - 1.0.31-5" date="1735560000">- libsndfile:fix CVE-2024-50612</changelog>
</package>
<package pkgid="099740e417bda8d2d69052043e239d06c1a19c2826f64a2d23c28cd6535e1d30" name="libsodium" arch="src">
  <version epoch="0" ver="1.0.18" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.0.18-2" date="1767355200">- fix CVE-2025-69277</changelog>
</package>
<package pkgid="4615e09f4103ff6fd6ece4368f02b0b56d92f0a3d448fd8031a1a94b876414e3" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="10.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-8" date="1745409600">- Type:cves
- ID:CVE-2025-32907 CVE-2025-32914
- SUG:NA
- DESC:fix CVE-2025-32907 CVE-2025-32914</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-9" date="1745928000">- Type:cves
- ID:CVE-2025-46420 CVE-2025-46421
- SUG:NA
- DESC:fix CVE-2025-46420 CVE-2025-46421</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-10" date="1748520000">- Type:cves
- ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
- SUG:NA
- DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969</changelog>
</package>
<package pkgid="7894275eacf7a876f09d6aeb813ee1a55a66056c6fa13f1ce9d1122730352d10" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="12.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-8" date="1745409600">- Type:cves
- ID:CVE-2025-32907 CVE-2025-32914
- SUG:NA
- DESC:fix CVE-2025-32907 CVE-2025-32914</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-9" date="1745928000">- Type:cves
- ID:CVE-2025-46420 CVE-2025-46421
- SUG:NA
- DESC:fix CVE-2025-46420 CVE-2025-46421</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-10" date="1748520000">- Type:cves
- ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
- SUG:NA
- DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-11" date="1769601600">- Type:cves
- ID:CVE-2025-14523 CVE-2026-0719
- SUG:NA
- DESC:fix CVE-2025-14523 CVE-2026-0719</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-12" date="1770638400">- Type:cves
- ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
- SUG:NA
- DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716</changelog>
</package>
<package pkgid="9cac8a3aeafd0b9696a22d39fbd396c9da8a6ae1d6239c683a09f45768f9bb55" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="13.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-8" date="1745409600">- Type:cves
- ID:CVE-2025-32907 CVE-2025-32914
- SUG:NA
- DESC:fix CVE-2025-32907 CVE-2025-32914</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-9" date="1745928000">- Type:cves
- ID:CVE-2025-46420 CVE-2025-46421
- SUG:NA
- DESC:fix CVE-2025-46420 CVE-2025-46421</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-10" date="1748520000">- Type:cves
- ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
- SUG:NA
- DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-11" date="1769601600">- Type:cves
- ID:CVE-2025-14523 CVE-2026-0719
- SUG:NA
- DESC:fix CVE-2025-14523 CVE-2026-0719</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-12" date="1770638400">- Type:cves
- ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
- SUG:NA
- DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-13" date="1770984000">- Type:cves
- ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
- SUG:NA
- DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369</changelog>
</package>
<package pkgid="77610cfa431a471683d381483c0420c334bf79332251b7d3646da70a5ae64254" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-8" date="1745409600">- Type:cves
- ID:CVE-2025-32907 CVE-2025-32914
- SUG:NA
- DESC:fix CVE-2025-32907 CVE-2025-32914</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-9" date="1745928000">- Type:cves
- ID:CVE-2025-46420 CVE-2025-46421
- SUG:NA
- DESC:fix CVE-2025-46420 CVE-2025-46421</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-10" date="1748520000">- Type:cves
- ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
- SUG:NA
- DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-11" date="1769601600">- Type:cves
- ID:CVE-2025-14523 CVE-2026-0719
- SUG:NA
- DESC:fix CVE-2025-14523 CVE-2026-0719</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-12" date="1770638400">- Type:cves
- ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
- SUG:NA
- DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-13" date="1770984000">- Type:cves
- ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
- SUG:NA
- DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-14" date="1772107200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify Proxy_Authorization to Proxy-Authorization</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 2.74.2-15" date="1773662400">- Type:CVE
- ID:CVE-2026-2443
- SUG:NA
- DESC:fix CVE-2026-2443</changelog>
</package>
<package pkgid="ceedeb16aeff3aa8737491ee90b87f1d36472b2a4a1b7bca6b81bf44f90c6bf3" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="5.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
</package>
<package pkgid="693359f37f721fcc8b10f2ddf89ecb86f8cd2986261235ef3991e53939d3bf08" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="6.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
</package>
<package pkgid="1252e386f663758cb19d37692e66b9bb5c259add4c442a10e3671ec6d79a7810" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="7.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
</package>
<package pkgid="aa1479bb2bd032f7bb45b4ee271fe6fa3b2c000b07233072b2ad0039d8ebce64" name="libsoup" arch="src">
  <version epoch="0" ver="2.74.2" rel="9.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.74.2-3" date="1708344000">- rebuild for glib2 without sysprof</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-4" date="1713441600">- Rebuild for next release</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.74.2-5" date="1731585600">- Type:cves
- ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
- SUG:NA
- DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-6" date="1744113600">- Type:cves
- ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
- SUG:NA
- DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-7" date="1745236800">- Type:cves
- ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
- SUG:NA
- DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-8" date="1745409600">- Type:cves
- ID:CVE-2025-32907 CVE-2025-32914
- SUG:NA
- DESC:fix CVE-2025-32907 CVE-2025-32914</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.74.2-9" date="1745928000">- Type:cves
- ID:CVE-2025-46420 CVE-2025-46421
- SUG:NA
- DESC:fix CVE-2025-46420 CVE-2025-46421</changelog>
</package>
<package pkgid="15dfd93c94893b9aa04bc69b2c76343cb9dd00ffee7535ca61f5c0b694ac8973" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="10.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-9" date="1707307200">- Type:bugfix
- Id:
- SUG:NA
- DESC:Fix regression in IPv6 addresses in hostname parsing</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
</package>
<package pkgid="0469eb4ac467f0ad7d2ca2e46df35016b8b2a4066d43110dfd87168b26664b5b" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-9" date="1707307200">- Type:bugfix
- Id:
- SUG:NA
- DESC:Fix regression in IPv6 addresses in hostname parsing</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 0.9.6-11" date="1756296000">- Type:CVE
- CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
- SUG:NA
- DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372</changelog>
</package>
<package pkgid="b719fb575bcc14a246fba423ffc30be48b4834e207bebd345b48277ce467c24f" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="12.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-9" date="1707307200">- Type:bugfix
- Id:
- SUG:NA
- DESC:Fix regression in IPv6 addresses in hostname parsing</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 0.9.6-11" date="1756296000">- Type:CVE
- CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
- SUG:NA
- DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-12" date="1757937600">- Type:CVE
- Id:CVE-2025-8114
- SUG:NA
- DESC:fix CVE-2025-8114</changelog>
</package>
<package pkgid="766961427b2e86da9c6660c5016f535a89b77c94d61f7cca94c52666bff6c431" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="13.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-8" date="1703764800">- Type:CVE
- Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 0.9.6-9" date="1707307200">- Type:bugfix
- Id:
- SUG:NA
- DESC:Fix regression in IPv6 addresses in hostname parsing</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 0.9.6-11" date="1756296000">- Type:CVE
- CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
- SUG:NA
- DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-12" date="1757937600">- Type:CVE
- Id:CVE-2025-8114
- SUG:NA
- DESC:fix CVE-2025-8114</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-13" date="1758283200">- Type:CVE
- Id:CVE-2025-8227
- SUG:NA
- DESC:fix CVE-2025-8227</changelog>
</package>
<package pkgid="7a631fee2c03f043d73d68ac9943cb537898426b80762056c3760cb8eaeeefac" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="15.oe2203sp4"/>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 0.9.6-11" date="1756296000">- Type:CVE
- CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
- SUG:NA
- DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-12" date="1757937600">- Type:CVE
- Id:CVE-2025-8114
- SUG:NA
- DESC:fix CVE-2025-8114</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-13" date="1758283200">- Type:CVE
- Id:CVE-2025-8277
- SUG:NA
- DESC:fix CVE-2025-8277</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-14" date="1758715200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix CVE number in changelog</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-15" date="1772193600">- Type:CVE
- Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
- SUG:NA
- DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821</changelog>
</package>
<package pkgid="eb01d9e863c86eea05315d6f5aed5c18cbb297c13088312fc5ded9706501dd97" name="libssh" arch="src">
  <version epoch="0" ver="0.9.6" rel="16.oe2203sp4"/>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-10" date="1751457600">- Type:CVE
- Id:CVE-2025-5318
- SUG:NA
- DESC:fix CVE-2025-5318</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 0.9.6-11" date="1756296000">- Type:CVE
- CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
- SUG:NA
- DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-12" date="1757937600">- Type:CVE
- Id:CVE-2025-8114
- SUG:NA
- DESC:fix CVE-2025-8114</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-13" date="1758283200">- Type:CVE
- Id:CVE-2025-8277
- SUG:NA
- DESC:fix CVE-2025-8277</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-14" date="1758715200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix CVE number in changelog</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-15" date="1772193600">- Type:CVE
- Id:CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821
- SUG:NA
- DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821</changelog>
  <changelog author="zhangbinqin &lt;zhangbinqin@h-partners.com&gt; - 0.9.6-16" date="1773230400">- Type:CVE
- Id:CVE-2026-3731
- SUG:NA
- DESC:fix CVE-2026-3731</changelog>
</package>
<package pkgid="2d134d4d0c90f9b9d83a25cbbaabb2e8e239d5bf9c86f763d9ce52189c6e2479" name="libtasn1" arch="src">
  <version epoch="0" ver="4.19.0" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 4.19.0-1" date="1698148800">- update to 4.19.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.19.0-2" date="1738929600">- fix CVE-2024-12133</changelog>
</package>
<package pkgid="6a69c518486391b7d7945d5af3475ee9b78604f4ab52254fa04ee591dc3d7658" name="libtasn1" arch="src">
  <version epoch="0" ver="4.19.0" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.19.0-2" date="1738929600">- fix CVE-2024-12133</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 4.19.0-3" date="1767960000">- fix CVE-2025-13151</changelog>
</package>
<package pkgid="4ec889c7741d0edf8c5b74457a8d43b2e983bdf4ef8642766cc22f2569ea4bc1" name="libtheora" arch="src">
  <version epoch="1" ver="1.1.1" rel="26.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1:1.1.1-26" date="1743163200">- fix CVE-2024-56431</changelog>
</package>
<package pkgid="18cbd66d16f4f11a8e48d1c2ca12e0ed5fc3bf8487063d464549a731c92e1380" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="38.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-29" date="1689249600">- fix CVE-2023-3576</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-30" date="1690545600">- fix CVE-2023-38288 CVE-2023-38289</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
</package>
<package pkgid="df26a8a56a2d5dbea1b78915727b7846f16bc96a2c49b1f8f2ac2662c3686f62" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="39.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
</package>
<package pkgid="b011a1867ab80211a2f8a14edbb3b6490b924bca26a7e27c0a4a963ed4d883da" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="40.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-31" date="1692187200">- fix CVE-2023-3618</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
</package>
<package pkgid="9c456eade551963992a26ad7c1eea826c0d4968679dd94bd4f7a33b058d698e3" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="41.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-32" date="1693569600">- fix CVE-2022-40090</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 4.3.0-33" date="1694088000">- fix CVE-2022-34526</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
</package>
<package pkgid="c6c7b477de8a8cfda6af285cf3b199e90fae4ccf906eba9786901b2d69f9c9ed" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="43.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-34" date="1700568000">- fix CVE-2023-6228</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-35" date="1700913600">- fix CVE-2023-6277</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-42" date="1755000000">- fix CVE-2025-8851</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-43" date="1756123200">- fix CVE-2025-9165</changelog>
</package>
<package pkgid="741891436d1d284316d65709f7381624792ab5c7cdcc86e51730eba8a1c1315b" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="45.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.3.0-36" date="1701259200">- backport patch for fix CVE-2023-6277 issue</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-37" date="1716206400">- Type:CVE
- ID:CVE-2023-1916,CVE-2023-3164
- SUG:NA
- DESC:fix CVE-2023-1916 CVE-2023-3164</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 4.3.0-38" date="1723550400">- Type:CVE
- ID:CVE-2024-7006
- SUG:NA
- DESC:fix CVE-2024-7006</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-42" date="1755000000">- fix CVE-2025-8851</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-43" date="1756123200">- fix CVE-2025-9165</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-44" date="1758801600">- fix CVE-2025-9900</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-45" date="1758888000">- fix cmake build</changelog>
</package>
<package pkgid="894fea925170fa32534ef175814636362a8f6344799ee2c7f7c43bb61050ec25" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="48.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-39" date="1753790400">- fix CVE-2025-8177</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-42" date="1755000000">- fix CVE-2025-8851</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-43" date="1756123200">- fix CVE-2025-9165</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-44" date="1758801600">- fix CVE-2025-9900</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-45" date="1758888000">- fix cmake build</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-46" date="1772020800">- fix CVE-2025-61143</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-47" date="1772020801">- fix CVE-2025-61144</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-48" date="1772020802">- fix CVE-2025-61145</changelog>
</package>
<package pkgid="ad33f07b89c9e59cb6dfa9d09c68eb8c26a6af7bc8714cddc35302efa00d705a" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="49.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-40" date="1754308800">- fix CVE-2024-13978</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-42" date="1755000000">- fix CVE-2025-8851</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-43" date="1756123200">- fix CVE-2025-9165</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-44" date="1758801600">- fix CVE-2025-9900</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-45" date="1758888000">- fix cmake build</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-46" date="1772020800">- fix CVE-2025-61143</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-47" date="1772020801">- fix CVE-2025-61144</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-48" date="1772020802">- fix CVE-2025-61145</changelog>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 4.3.0-49" date="1772625600">- revert CVE-2025-61143 CVE-2025-61145 patches</changelog>
</package>
<package pkgid="7791d95f8a8a8499f9bd4c96e381acfa59f53288e8038f5485ab69a80f9406ed" name="libtiff" arch="src">
  <version epoch="0" ver="4.3.0" rel="50.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-41" date="1754568000">- fix CVE-2025-8534</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-42" date="1755000000">- fix CVE-2025-8851</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-43" date="1756123200">- fix CVE-2025-9165</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-44" date="1758801600">- fix CVE-2025-9900</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 4.3.0-45" date="1758888000">- fix cmake build</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-46" date="1772020800">- fix CVE-2025-61143</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-47" date="1772020801">- fix CVE-2025-61144</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; - 4.3.0-48" date="1772020802">- fix CVE-2025-61145</changelog>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 4.3.0-49" date="1772625600">- revert CVE-2025-61143 CVE-2025-61145 patches</changelog>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 4.3.0-50" date="1774440000">- fix CVE-2026-4775</changelog>
</package>
<package pkgid="866b64759bbc7daae892f3b008e68d68107e0b775c5eddafe0f990d1d5e49670" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.2" rel="5.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-2" date="1658491200">- Type:CVE
- ID:CVE-2021-46828
- SUG:NA
- DESC:fix CVE-2021-46828</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-3" date="1677585600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: delete *.a file</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.3.2-4" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: remove useless dependency man-db</changelog>
  <changelog author="Wenhua Huang &lt;huangwenhua@kylinos.cn&gt; - 1.3.2-5" date="1720612800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix rpc_gss_seccreate passed in cred</changelog>
</package>
<package pkgid="f2a8d7071cb48b92efddd1f5aeb65c44f773d983d600034d87c3c81d76202042" name="libtomcrypt" arch="src">
  <version epoch="0" ver="1.18.2" rel="8.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.18.2-6" date="1719921600">- backport upstream patch to fix missing mutex unlock</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.18.2-7" date="1756468800">- backport upstream patch to fix compiler warning</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.18.2-8" date="1757073600">- define LDFLAGS to provide required link options for compiling</changelog>
</package>
<package pkgid="7fcb62cf9989a2bdf243388b40bd5139d5c386e30c9c6e46271927239c46e273" name="libtpms" arch="src">
  <version epoch="0" ver="0.7.3" rel="10.oe2203sp4"/>
  <changelog author="fly2x &lt;fly2x@hitls.org&gt; - 0.7.3-9" date="1702641600">- Add SM3 and SM4 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.7.3-10" date="1749902400">- fix CVE-2025-49133</changelog>
</package>
<package pkgid="63dbb9c200eb3728e0341815a97ea4c6e463c52ee262e7109353262e674c5823" name="libtraceevent" arch="src">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.2.1-3" date="1674129600">- Add conflict with perf</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com.com&gt; - 1.2.1-4" date="1734350400">- add conflict perf version.</changelog>
</package>
<package pkgid="a53924cc6cd44934cda55511b9a4cbff9a2675a9edda576b5ff7e653112bcddf" name="libtraceevent" arch="src">
  <version epoch="0" ver="1.2.1" rel="5.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com.com&gt; - 1.2.1-4" date="1734350400">- add conflict perf version.</changelog>
  <changelog author="liyanan &lt;liyanan@h-partners.com&gt; - 1.2.1-5" date="1739880000">- Modify and conflict with perf version</changelog>
</package>
<package pkgid="45513793d723d4e4f34439ee163b1fe5fa2b75d0795f469151e7b20e9871437e" name="liburing" arch="src">
  <version epoch="0" ver="2.4" rel="1.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.4-1" date="1743422400">- Update to liburing 2.4</changelog>
</package>
<package pkgid="ac85e77a3bbec08886add7278bbefc74f3e4ba1a4310dac3a723a93de48198bf" name="libvirt" arch="src">
  <version epoch="0" ver="6.2.0" rel="66.oe2203sp4"/>
</package>
<package pkgid="0df72ee415a3895975ac7317aed6a129040004113eefb24c857af8942694a89e" name="libvirt" arch="src">
  <version epoch="0" ver="6.2.0" rel="70.oe2203sp4"/>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-67" date="1724328000">- virt-host-validate: Fix IOMMU output on aarch64
- cpu: revert: Modify virCPUarmCompare to perform compare actions
- cpu: Modify virCPUarmCompare to perform compare actions
- add phytium s5000c support on arm architecture for capability</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-68" date="1726660800">- vdpa: support vdpa device bootindex config</changelog>
  <changelog author="Jiabo Feng &lt;fengjiabo1@huawei.com&gt; - 6.2.0-69" date="1747915200">- migration: support vfio-pci device migration
- libvirt: Support specifying the cache size presented to guest
- util: fix success return for virProcessKillPainfullyDelay()
- test: Fix testNodeGetFreePages
- qemu: DomainGetGuestVcpusParams: reduce scope of tmp</changelog>
  <changelog author="ZixinLi &lt;lizixin10@h-partners.com&gt; - 6.2.0-70" date="1764590400">- Fix CVE-2025-12748 CVE-2025-13193
- conf: split out virDomainDefParseIDs (CVE-2025-12748)
- conf: Add virDomainDefIDsParseString (CVE-2025-12748)
- bhyve: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
- libxl: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
- lxc: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
- vz: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
- qemu: Check ACLs before parsing the whole domain XML (CVE-2025-12748)
- qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots (CVE-2025-13193)</changelog>
</package>
<package pkgid="c36d5643cedb70c54d3521375edc9e0ad9eca7d25d62ee297f1a1c651ccb2dee" name="libvpx" arch="src">
  <version epoch="0" ver="1.7.0" rel="13.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.7.0-9" date="1692705600">- add loongarch64 and sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.7.0-10" date="1696161600">- fix CVE-2023-5217, CVE-2023-44488</changelog>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.7.0-13" date="1748520000">- Fix CVE-2025-5283</changelog>
</package>
<package pkgid="c8b863cc7309291d74c5e968e53e1753ec03b16536c2c4cd4157a23c59233fc3" name="libvpx" arch="src">
  <version epoch="0" ver="1.7.0" rel="14.oe2203sp4"/>
  <changelog author="hefq343&lt;fengqing.he@shingroup.cn&gt; - 1.7.0-11" date="1710158400">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.7.0-12" date="1717761600">- Fix CVE-2024-5197</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.7.0-13" date="1748520000">- Fix CVE-2025-5283</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.7.0-14" date="1771934400">- Fix CVE-2026-2447</changelog>
</package>
<package pkgid="e47874733ced40aeb18b0406845ea4e02d682dc0950a83ceafacef9b841744fb" name="libwebsockets" arch="src">
  <version epoch="0" ver="4.3.0" rel="7.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 4.3.0-5" date="1724760000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:client hs: fix segmentation fault</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 4.3.0-6" date="1755000000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix the politically sensitive words</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 4.3.0-7" date="1761134400">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2025-11677 and CVE-2025-11678</changelog>
</package>
<package pkgid="03687173261bf44684cc1b3e1477178029cdc8f0ecb45b41d76124ceccab50f8" name="libxkbfile" arch="src">
  <version epoch="0" ver="1.1.0" rel="6.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.1.0-6" date="1740657600">- fix CVE-2025-26595</changelog>
</package>
<package pkgid="501f1e89487e0e0ebaa6cd67fda83a1fa1f98df249b6615ce3db82717827c822" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="15.oe2203sp4"/>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-5" date="1681992000">- Type:CVE
- CVE:CVE-2023-28484 CVE-2023-29469
- SUG:NA
- DESC:fix CVE-2023-28484CVE-2023-29469</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
</package>
<package pkgid="eb93e68ed265f51fd0d8aa0b6f1889298826e7473d95da6fb2a32ccc46d2ebc1" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="16.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-6" date="1686225600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-16" date="1744977600">- Type:CVE
- CVE:CVE-2025-32415
- SUG:NA
- DESC: fix CVE-2025-32415</changelog>
</package>
<package pkgid="4dfa757b872e1ced61c64b82605d557fdcfcd1150c8336ce64305cc9f3d70d75" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="17.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-7" date="1687176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert parser-Fix-progress-check</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-16" date="1744977600">- Type:CVE
- CVE:CVE-2025-32415
- SUG:NA
- DESC: fix CVE-2025-32415</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-17" date="1747224000">- Type:CVE
- CVE:CVE-2025-32414
- SUG:NA
- DESC: fix CVE-2025-32414</changelog>
</package>
<package pkgid="e1bad98a7dfab75c95786850bbcbf2f52bb3c56d90ee7c777b04bf80ecb829e1" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="18.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.9.14-8" date="1693569600">- SAX: Always initialize SAX1 element handlers</changelog>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-16" date="1744977600">- Type:CVE
- CVE:CVE-2025-32415
- SUG:NA
- DESC: fix CVE-2025-32415</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-17" date="1747224000">- Type:CVE
- CVE:CVE-2025-32414
- SUG:NA
- DESC: fix CVE-2025-32414</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-18" date="1749902400">- Type:CVE
- CVE:CVE-2025-6021
- SUG:NA
- DESC: fix CVE-2025-6021</changelog>
</package>
<package pkgid="64e3f890ed5b9318c68891da3f6a410a035ca9e9ac8fdb8b7dd255b67b0c28a1" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="19.oe2203sp4"/>
  <changelog author="BruceGW &lt;gyl93216@163.com&gt; - 2.9.14-9" date="1697457600">- Type:CVE
- CVE:CVE-2023-45322
- SUG:NA
- DESC:fix CVE-2023-45322</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-16" date="1744977600">- Type:CVE
- CVE:CVE-2025-32415
- SUG:NA
- DESC: fix CVE-2025-32415</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-17" date="1747224000">- Type:CVE
- CVE:CVE-2025-32414
- SUG:NA
- DESC: fix CVE-2025-32414</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-18" date="1749902400">- Type:CVE
- CVE:CVE-2025-6021
- SUG:NA
- DESC: fix CVE-2025-6021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-19" date="1752235200">- Type:CVE
- CVE:CVE-2025-49794
- CVE:CVE-2025-49796
- SUG:NA
- DESC: fix CVE-2025-49794, CVE-2025-49796</changelog>
</package>
<package pkgid="1a0b566c4657dbe6ec6bab178b1cf4ab5ded881ae52dccdd99b697d9fc33e6ef" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="20.oe2203sp4"/>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 2.9.14-10" date="1708344000">- Type:CVE
- SUG:NA
- DESC:fix CVE-2024-25062</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.14-11" date="1715688000">- Type:CVE
- CVE:CVE-2024-34459
- SUG:NA
- DESC:fix CVE-2024-34459</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-13" date="1716033600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.9.14-14" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove doc from libxml2 to libxml2-devel</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-15" date="1739966400">- Type:CVE
- CVE:CVE-2024-56171
- CVE:CVE-2025-24928
- CVE:CVE-2025-27113
- SUG:NA
- DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-16" date="1744977600">- Type:CVE
- CVE:CVE-2025-32415
- SUG:NA
- DESC: fix CVE-2025-32415</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-17" date="1747224000">- Type:CVE
- CVE:CVE-2025-32414
- SUG:NA
- DESC: fix CVE-2025-32414</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-18" date="1749902400">- Type:CVE
- CVE:CVE-2025-6021
- SUG:NA
- DESC: fix CVE-2025-6021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-19" date="1752235200">- Type:CVE
- CVE:CVE-2025-49794
- CVE:CVE-2025-49796
- SUG:NA
- DESC: fix CVE-2025-49794, CVE-2025-49796</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 2.9.14-20" date="1752580800">- Type:CVE
- CVE:CVE-2025-6170
- SUG:NA
- DESC: fix CVE-2025-6170</changelog>
</package>
<package pkgid="d98c46e27fbe09bcf9af643b3a5169c9eae1f4c3ab50a1549b2469823cbf2675" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="26.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-17" date="1747224000">- Type:CVE
- CVE:CVE-2025-32414
- SUG:NA
- DESC: fix CVE-2025-32414</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-18" date="1749902400">- Type:CVE
- CVE:CVE-2025-6021
- SUG:NA
- DESC: fix CVE-2025-6021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-19" date="1752235200">- Type:CVE
- CVE:CVE-2025-49794
- CVE:CVE-2025-49796
- SUG:NA
- DESC: fix CVE-2025-49794, CVE-2025-49796</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 2.9.14-20" date="1752580800">- Type:CVE
- CVE:CVE-2025-6170
- SUG:NA
- DESC: fix CVE-2025-6170</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.9.14-21" date="1755518400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport upstream patches</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-22" date="1768564800">- fix CVE-2025-8732</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-23" date="1768824000">- fix CVE-2026-0990</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 2.9.14-24" date="1769428800">- Type:CVE
- CVE:CVE-2026-0992,CVE-2026-0989
- SUG:NA
- DESC:fix CVE-2026-0992,CVE-2026-0989</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 2.9.14-25" date="1769774400">- backport upstream patches</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-26" date="1772625600">- fix CVE-2026-1757</changelog>
</package>
<package pkgid="037c028467fb73358dde00ec2f2cc4f7244ea07c71775bc477e3ebed67dbe6c4" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="27.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-18" date="1749902400">- Type:CVE
- CVE:CVE-2025-6021
- SUG:NA
- DESC: fix CVE-2025-6021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-19" date="1752235200">- Type:CVE
- CVE:CVE-2025-49794
- CVE:CVE-2025-49796
- SUG:NA
- DESC: fix CVE-2025-49794, CVE-2025-49796</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 2.9.14-20" date="1752580800">- Type:CVE
- CVE:CVE-2025-6170
- SUG:NA
- DESC: fix CVE-2025-6170</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.9.14-21" date="1755518400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport upstream patches</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-22" date="1768564800">- fix CVE-2025-8732</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-23" date="1768824000">- fix CVE-2026-0990</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 2.9.14-24" date="1769428800">- Type:CVE
- CVE:CVE-2026-0992,CVE-2026-0989
- SUG:NA
- DESC:fix CVE-2026-0992,CVE-2026-0989</changelog>
  <changelog author="yanglongkang &lt;747675909@qq.com&gt; - 2.9.14-25" date="1769774400">- backport upstream patches</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.14-26" date="1772625600">- fix CVE-2026-1757</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 2.9.14-27" date="1773921600">- backport upstream patches</changelog>
</package>
<package pkgid="c84612f78083763844fb9a26cd7702836b0b8ac60f5e045625338646288eb070" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.37" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.37-2" date="1741867200">- fix CVE-2024-55549 CVE-2025-24855</changelog>
</package>
<package pkgid="18cf46cb007e2df8950184d10fb5b90cfae32c07d6024da80b35d595db7b440e" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.37" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.37-2" date="1741867200">- fix CVE-2024-55549 CVE-2025-24855</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-3" date="1753790400">- fix CVE-2025-7424</changelog>
</package>
<package pkgid="4844664eb3e0efa66d164ccf62867148a9c0669e4680c4d3afe3d09589b99fcc" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.37" rel="6.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.37-2" date="1741867200">- fix CVE-2024-55549 CVE-2025-24855</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-3" date="1753790400">- fix CVE-2025-7424</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-4" date="1753963200">- fix xsltCleanupSourceDoc function:
  Clean up attributes in source doc
  Avoid null deref on documents without root</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-5" date="1760011200">- fix CVE-2025-10911</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-6" date="1760443200">- fix CVE-2025-11731</changelog>
</package>
<package pkgid="2b58d87f6c0eeee571c192f69cc744d6e25b5b3387161836a52ead31c72c5793" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.37" rel="7.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.37-2" date="1741867200">- fix CVE-2024-55549 CVE-2025-24855</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-3" date="1753790400">- fix CVE-2025-7424</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-4" date="1753963200">- fix xsltCleanupSourceDoc function:
  Clean up attributes in source doc
  Avoid null deref on documents without root</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-5" date="1760011200">- fix CVE-2025-10911</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.1.37-6" date="1760443200">- fix CVE-2025-11731</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.1.37-7" date="1762257600">- fix CVE-2023-40403</changelog>
</package>
<package pkgid="ee068f1ce1ed0e196b5615d224c7a04bc03083dac24305adf37e73dbc11a53d3" name="lighttpd" arch="src">
  <version epoch="0" ver="1.4.67" rel="2.oe2203sp4"/>
  <changelog author="zhangliangpengkun &lt;zhangliangpengkun@xfusion.com&gt; - 1.4.67-2" date="1760011200">- fix CVE-2025-8671</changelog>
</package>
<package pkgid="77b6bc820e853c7a8ab9b732053c34730ca2176862c4390c278abbb5c7b67f61" name="linux-firmware" arch="src">
  <version epoch="0" ver="20240811" rel="1.oe2203sp4"/>
  <changelog author="caizhongfei &lt;carrie.cai@montage-tech.com&gt; - 20240513-1" date="1715774400">- update to 20240513</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 20240513-2" date="1716465600">- Reupload tar package to fix git lfs clone error</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 20240513-3" date="1716465601">- linux-firmware-20240513 has changed python to python3, so remove this patch</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 20240513-4" date="1717502400">- Delete unused files to remove python dependencies</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-1" date="1724932800">- update to 20240811</changelog>
</package>
<package pkgid="1b46c678cc7217277233a5d7f7c459877695e7ce5311aa70727c698ad432a974" name="linux-firmware" arch="src">
  <version epoch="0" ver="20250311" rel="1.oe2203sp4"/>
  <changelog author="caizhongfei &lt;carrie.cai@montage-tech.com&gt; - 20240513-1" date="1715774400">- update to 20240513</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 20240513-2" date="1716465600">- Reupload tar package to fix git lfs clone error</changelog>
  <changelog author="wangbin &lt;wangbin224@huawei.com&gt; - 20240513-3" date="1716465601">- linux-firmware-20240513 has changed python to python3, so remove this patch</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 20240513-4" date="1717502400">- Delete unused files to remove python dependencies</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-1" date="1724932800">- update to 20240811</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-2" date="1726747200">- need use copy-firmware.sh, modify the process of build and install</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241017-1" date="1729252800">- update to 20241017</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241110-1" date="1731326400">- update to 20241110</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250311-1" date="1741780800">- update to 20250311</changelog>
</package>
<package pkgid="fd7b91d508b3b804f164f996bcf7eb028b22e4a27dbc9413864317f5be8a0f19" name="linux-firmware" arch="src">
  <version epoch="0" ver="20250708" rel="2.oe2203sp4"/>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-1" date="1724932800">- update to 20240811</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 20240811-2" date="1726747200">- need use copy-firmware.sh, modify the process of build and install</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241017-1" date="1729252800">- update to 20241017</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241110-1" date="1731326400">- update to 20241110</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250311-1" date="1741780800">- update to 20250311</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250509-1" date="1746878400">- update to 20250509</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250613-1" date="1749902400">- update to 20250613</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250627-1" date="1751198400">- update to 20250627</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-1" date="1752235200">- update to 20250708
- fix broken symlinks</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-2" date="1752753600">- Fix upgrade from previous version by replacing directory with symlink</changelog>
</package>
<package pkgid="f023a2629bb59055be5cb49416b9383d254bfa524fa3b11af065cac85429d626" name="linux-firmware" arch="src">
  <version epoch="0" ver="20251011" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241110-1" date="1731326400">- update to 20241110</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250311-1" date="1741780800">- update to 20250311</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250509-1" date="1746878400">- update to 20250509</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250613-1" date="1749902400">- update to 20250613</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250627-1" date="1751198400">- update to 20250627</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-1" date="1752235200">- update to 20250708
- fix broken symlinks</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-2" date="1752753600">- Fix upgrade from previous version by replacing directory with symlink</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250808-1" date="1754654400">- update to 20250808</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250917-1" date="1758196800">- update to 20250917</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251011-1" date="1760184000">- update to 20251011</changelog>
</package>
<package pkgid="392f18195ea833723b6442ce491eba71833f4def306029ba713f760ff1218a79" name="linux-firmware" arch="src">
  <version epoch="0" ver="20251111" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250509-1" date="1746878400">- update to 20250509</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250613-1" date="1749902400">- update to 20250613</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250627-1" date="1751198400">- update to 20250627</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-1" date="1752235200">- update to 20250708
- fix broken symlinks</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-2" date="1752753600">- Fix upgrade from previous version by replacing directory with symlink</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250808-1" date="1754654400">- update to 20250808</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250917-1" date="1758196800">- update to 20250917</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251011-1" date="1760184000">- update to 20251011</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251021-1" date="1761134400">- update to 20251021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251111-1" date="1762948800">- update to 20251111</changelog>
</package>
<package pkgid="008350b60afc1e56b2441b5cdd0340bdaebd616c8d4a8a790dd80dcda524d3e6" name="linux-firmware" arch="src">
  <version epoch="0" ver="20260110" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250627-1" date="1751198400">- update to 20250627</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-1" date="1752235200">- update to 20250708
- fix broken symlinks</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-2" date="1752753600">- Fix upgrade from previous version by replacing directory with symlink</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250808-1" date="1754654400">- update to 20250808</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250917-1" date="1758196800">- update to 20250917</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251011-1" date="1760184000">- update to 20251011</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251021-1" date="1761134400">- update to 20251021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251111-1" date="1762948800">- update to 20251111</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251125-1" date="1764158400">- update to 20251125</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20260110-1" date="1768305600">- update to 20260110
- revert firmware compression as it is not enabled for now</changelog>
</package>
<package pkgid="c68973ca21aae6ac7f3ac0ca22557235e8da6ba604033878114c64944f052390" name="linux-firmware" arch="src">
  <version epoch="0" ver="20260309" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-1" date="1752235200">- update to 20250708
- fix broken symlinks</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250708-2" date="1752753600">- Fix upgrade from previous version by replacing directory with symlink</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250808-1" date="1754654400">- update to 20250808</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250917-1" date="1758196800">- update to 20250917</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251011-1" date="1760184000">- update to 20251011</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251021-1" date="1761134400">- update to 20251021</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251111-1" date="1762948800">- update to 20251111</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251125-1" date="1764158400">- update to 20251125</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20260110-1" date="1768305600">- update to 20260110
- revert firmware compression as it is not enabled for now</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20260309-1" date="1773144000">- update to 20260309</changelog>
</package>
<package pkgid="0c87f9f86e9424de57bcb64d9c49fbe9cbb7b472173b7e9aa750442ce23af7e6" name="llvm-bolt" arch="src">
  <version epoch="0" ver="17.0.6" rel="12.oe2203sp4"/>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 17.0.6-3" date="1718712000">- Type:Update
- ID:NA
- SUG:NA
- DESC: Update to version 17.0.6</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 17.0.6-4" date="1718712001">- Type:Backport
- ID:NA
- SUG:NA
- DESC: Backport bugfix.</changelog>
  <changelog author="Xiong Zhou &lt;xiongzhou4@huawei.com&gt; 17.0.6-5" date="1718712002">- Type:Feature
- ID:NA
- SUG:NA
- DESC: Add AArch64 support for inline.</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; 17.0.6-6" date="1718971200">- Type:Backport
- ID:NA
- SUG:NA
- DESC: Backport bugfix.</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; 17.0.6-7" date="1720785600">- Type:Feature
- ID:NA
- SUG:NA
- DESC: Add CFG block count correction optimization.</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; 17.0.6-8" date="1725451200">- Type:Backport
- ID:NA
- SUG:NA
- DESC: Backport bugfix.</changelog>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; 17.0.6-9" date="1725969600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Enable merge-fdata support processing no-lbr profile.</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; 17.0.6-10" date="1730376000">- Type:Backport
- ID:NA
- SUG:NA
- DESC: Backport aarch64 instrumentation support from 18.1.0</changelog>
  <changelog author="mwl2000 &lt;muwl182@163.com&gt; 17.0.6-11" date="1731931200">- Type:Feature
- ID:NA
- SUG:NA
- DESC: Add hybrid guess approach for edge weight estimation.</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; 17.0.6-12" date="1732017600">- Type:Feature
- ID:NA
- SUG:NA
- DESC: support D-FOT addrs data parsing for optimized binary</changelog>
</package>
<package pkgid="df3cc5083c899330756e3ef6ffef738b5cbd38484dd8e5c36e713e8d2d84183e" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="12.oe2203sp4"/>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-4" date="1740484800">- Bugfix for package name &amp; clang-17 conflict</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-5" date="1741003200">- Remove python pack without sys_llvm</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-6" date="1741003201">- fix cmake version requirment for 2003 build</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-7" date="1742212800">- update to llvm-for-oE-17.0.6-2503.0.2</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-8" date="1742817600">- Add obsoletes for old version libomp and git-clang-format17</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-9" date="1750852800">- update to llvm-for-oe-17.0.6-2506.0.4</changelog>
  <changelog author="Wang Qiang &lt;wangqiang1@kylinos.cn&gt; - 17.0.6-10" date="1751371200">- Replaced the hardcoded /opt/openEuler path with /opt/\openEuler</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-11" date="1760702400">- update to llvm-for-oe-17.0.6-2509.0.2
- release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2509.0.2
- add fix for Propeller MachineBasicBlock hash set</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-12" date="1761048000">- fix 22.03 build &amp; update target triples for all openEuler based distribution</changelog>
</package>
<package pkgid="16de141c39b8b44b6dcbe5de9ebc7baf20e126f147b42da3216eab049d295bda" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="3.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-1" date="1739188800">- Package init</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-2" date="1739534400">- Add BUILD_FOR_OPENEULER &amp; Bugfixes</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
</package>
<package pkgid="51c4eb1bcd504fa2641514536932f9b993640e236633f8f25b65ba88ce878e65" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="4.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-1" date="1739188800">- Package init</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-2" date="1739534400">- Add BUILD_FOR_OPENEULER &amp; Bugfixes</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-4" date="1740484800">- Bugfix for package name &amp; clang-17 conflict</changelog>
</package>
<package pkgid="1b3e8902ef8e3e451c395cc45db02b6a1e583321e0ad86cc4aa19c2f40bbe144" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="7.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-1" date="1739188800">- Package init</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-2" date="1739534400">- Add BUILD_FOR_OPENEULER &amp; Bugfixes</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-4" date="1740484800">- Bugfix for package name &amp; clang-17 conflict</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-5" date="1741003200">- Remove python pack without sys_llvm</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-6" date="1741003201">- fix cmake version requirment for 2003 build</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-7" date="1742212800">- update to llvm-for-oE-17.0.6-2503.0.2</changelog>
</package>
<package pkgid="c2888a11030674f406fbaf317d5d35cd3007a2d834382255e40bd038a96c3210" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="8.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-1" date="1739188800">- Package init</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-2" date="1739534400">- Add BUILD_FOR_OPENEULER &amp; Bugfixes</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-4" date="1740484800">- Bugfix for package name &amp; clang-17 conflict</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-5" date="1741003200">- Remove python pack without sys_llvm</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-6" date="1741003201">- fix cmake version requirment for 2003 build</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-7" date="1742212800">- update to llvm-for-oE-17.0.6-2503.0.2</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-8" date="1742817600">- Add obsoletes for old version libomp and git-clang-format17</changelog>
</package>
<package pkgid="2d716585e4047356acee7ea0b50833580e5407cc410504c67717b1a7a11a9f05" name="llvm-toolset-17" arch="src">
  <version epoch="0" ver="17.0.6" rel="9.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-1" date="1739188800">- Package init</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-2" date="1739534400">- Add BUILD_FOR_OPENEULER &amp; Bugfixes</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 17.0.6-3" date="1740139200">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 17.0.6-4" date="1740484800">- Bugfix for package name &amp; clang-17 conflict</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-5" date="1741003200">- Remove python pack without sys_llvm</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-6" date="1741003201">- fix cmake version requirment for 2003 build</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-7" date="1742212800">- update to llvm-for-oE-17.0.6-2503.0.2</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-8" date="1742817600">- Add obsoletes for old version libomp and git-clang-format17</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 17.0.6-9" date="1750852800">- update to llvm-for-oe-17.0.6-2506.0.4</changelog>
</package>
<package pkgid="4008c41ec5c3c833ed4431d38f83241c2909c98d893f51e87203d607090f9881" name="llvm-toolset-18" arch="src">
  <version epoch="0" ver="18.1.8" rel="4.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-1" date="1739188800">- Package init</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 18.1.8-2" date="1739793600">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-3" date="1740052800">- Bugfixes for 2203 build</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-4" date="1740484800">- Bugfixes for 2203 libomp install &amp; package name</changelog>
</package>
<package pkgid="bb4d02c1782616d6c9f0d12dd13b982725d74bbbd908cb2265dbc63c7127e037" name="llvm-toolset-18" arch="src">
  <version epoch="0" ver="18.1.8" rel="5.oe2203sp4"/>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-1" date="1739188800">- Package init</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 18.1.8-2" date="1739793600">- riscv64: exclude packaging non-supported liborc_rt.a</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-3" date="1740052800">- Bugfixes for 2203 build</changelog>
  <changelog author="liyunfei &lt;liyunfei33@huawei.com&gt; - 18.1.8-4" date="1740484800">- Bugfixes for 2203 libomp install &amp; package name</changelog>
  <changelog author="liyunfei liyunfei33@huawei.com - 18.1.8-5" date="1741003200">- Remove python pack without sys_llvm</changelog>
</package>
<package pkgid="cd664bf847a9755733b08014f3090f9180f0ef839c78ae14c262ef8688273c48" name="logback" arch="src">
  <version epoch="0" ver="1.2.8" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.2.8-3" date="1702382400">- Fix CVE-2023-6378,CVE-2023-6481</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.2.8-4" date="1737374400">- Fix CVE-2024-12798 and CVE-2024-12801</changelog>
</package>
<package pkgid="b03e7aed04ad7fcee3cf81eecb7f22e34ae9b27288fd0217a77ff6127dd822f1" name="lua-socket" arch="src">
  <version epoch="0" ver="3.0.0" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.0-1" date="1730462400">- 3.0.0 final
- rebuild for lua 5.4</changelog>
</package>
<package pkgid="a90a9d0753d611d5621eb0d0405ddde69c4f6bbcd49e357621802a54733ae609" name="luarocks" arch="src">
  <version epoch="0" ver="3.5.0" rel="5.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.5.0-3" date="1716984000">- modify buildrequire openresty to luajit-devel</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.5.0-4" date="1718971200">- add requires luajit-devel for add Lua header files to fix execution error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.5.0-5" date="1758542400">- update tarball with real upstream released tarball</changelog>
</package>
<package pkgid="b068a8be3406e5314fa810ba33806828fa047ad984811f8a09fe0683583d7497" name="luksmeta" arch="src">
  <version epoch="0" ver="9" rel="7.oe2203sp4"/>
  <changelog author="zhangyaqi &lt;zhangyaqi@kylinos.cn&gt; - 9-6" date="1760616000">- Remove the percent sign in the changelog</changelog>
  <changelog author="zhangjian &lt;zhangjian496@huawei.com&gt; - 9-7" date="1762171200">- fix CVE-2025-11568</changelog>
</package>
<package pkgid="5e8f775c246e3298601d9c2fe2164273ce52d39bbac21f06b57432b29004a95c" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="36.oe2203sp4"/>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-35" date="1719316800">- virtio: record local_port for distributing pkts in virtio_user.</changelog>
  <changelog author="wanfeng &lt;wanfeng@kylinos.cn&gt; - 2.2.0-36" date="1719576000">- add MCAST_MSFILTER to setsockopt for IGMPv3</changelog>
</package>
<package pkgid="522ae333953cab8cfa6e79e05443cbd5f684834b1e9d1299a54762e2aab649df" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="53.oe2203sp4"/>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-44" date="1721304000">- cleancode: refactor lwipgz_hlist.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-45" date="1721304001">- cleancode: move options from opt.h to lwipopts.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-46" date="1721390400">- cleancode: move tcp_hash_table to lwipgz_tcp_priv.h</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-47" date="1721390401">- cleancode: refactor sys_now and lwip_ioctl</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-48" date="1721390402">- cleancode: refactor memp</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-49" date="1721736000">- cleancode: refactor offload
- enable sys_arch failed log</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-50" date="1721822400">- LOOPBACK: fix loop coredump</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-51" date="1722686400">- INIT:fix lwip_init failed because of dpdk set errno</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-52" date="1723550400">- fix the definition of IPV6_V6ONLY</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-53" date="1724155200">- check if mem_init returns errno</changelog>
</package>
<package pkgid="3ca1dd329a6b62bb4f3afb55db01bcc39e27d6514cf577eb05e1d68189318607" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="59.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-50" date="1721822400">- LOOPBACK: fix loop coredump</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-51" date="1722686400">- INIT:fix lwip_init failed because of dpdk set errno</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-52" date="1723550400">- fix the definition of IPV6_V6ONLY</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-53" date="1724155200">- check if mem_init returns errno</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-54" date="1725969600">- LWIPOPTS support setsockopt SO_SNDTIMEO
- LWIPOPTS support setsockopt SO_SNDBUF</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-55" date="1726660800">- LOG: modified gazelle log level and add item in mib2</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-56" date="1727179200">- cleancode: rename log level</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-57" date="1727438400">- add pingpong mode support</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-58" date="1727438401">- adapt for interrupt mode</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-59" date="1727697600">- pingpong: fix send dup ack in fast timer</changelog>
</package>
<package pkgid="c8a713ea759ce361bf10cc48cfc44d5a0532cf10057a3660c126dac249302e4b" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="62.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-53" date="1724155200">- check if mem_init returns errno</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-54" date="1725969600">- LWIPOPTS support setsockopt SO_SNDTIMEO
- LWIPOPTS support setsockopt SO_SNDBUF</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-55" date="1726660800">- LOG: modified gazelle log level and add item in mib2</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-56" date="1727179200">- cleancode: rename log level</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-57" date="1727438400">- add pingpong mode support</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-58" date="1727438401">- adapt for interrupt mode</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-59" date="1727697600">- pingpong: fix send dup ack in fast timer</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-60" date="1728907200">- IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
- IPV6: fix array out of bounds in function ip6_ntoa_r
- IPV6: add group check while mld6 schedule a report</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-61" date="1730462400">- IGMP: fix fix problem that can not join the sixteen igmp group</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-62" date="1730462401">- When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
- Turn on the LWIP_SO-LINGER switch</changelog>
</package>
<package pkgid="642f1f0703a290ffaba6e442b852e151144d6996c3c1b3856f3f4e9dc58d950b" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="65.oe2203sp4"/>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-56" date="1727179200">- cleancode: rename log level</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-57" date="1727438400">- add pingpong mode support</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-58" date="1727438401">- adapt for interrupt mode</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-59" date="1727697600">- pingpong: fix send dup ack in fast timer</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-60" date="1728907200">- IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
- IPV6: fix array out of bounds in function ip6_ntoa_r
- IPV6: add group check while mld6 schedule a report</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-61" date="1730462400">- IGMP: fix fix problem that can not join the sixteen igmp group</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-62" date="1730462401">- When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
- Turn on the LWIP_SO-LINGER switch</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-63" date="1731326400">- fix IFNAMSIZ definition conflict between lwip and kernel</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-64" date="1731672000">- fix no ack response when lcoal only receive but not send data</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-65" date="1732795200">- bug: free sock when exit</changelog>
</package>
<package pkgid="89e38373cbac17290af9845feba6eee6254afe3e4b42c5e918690a1fa9da836f" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="67.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-58" date="1727438400">- adapt for interrupt mode</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-59" date="1727697600">- pingpong: fix send dup ack in fast timer</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-60" date="1728907200">- IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
- IPV6: fix array out of bounds in function ip6_ntoa_r
- IPV6: add group check while mld6 schedule a report</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-61" date="1730462400">- IGMP: fix fix problem that can not join the sixteen igmp group</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-62" date="1730462401">- When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
- Turn on the LWIP_SO-LINGER switch</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-63" date="1731326400">- fix IFNAMSIZ definition conflict between lwip and kernel</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-64" date="1731672000">- fix no ack response when lcoal only receive but not send data</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-65" date="1732795200">- bug: free sock when exit</changelog>
  <changelog author="suchangzhi &lt;suchangzhi_yewu@cmss.chinamobile.com&gt; - 2.2.0-66" date="1733486400">- fix pingpong mode spelling error</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-67" date="1733832000">- add recv_block in lwip_sock</changelog>
</package>
<package pkgid="c2d839eb8e39e7a5911a7b3b2c5c9270a13f071cd3437639c1957895d824fd71" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="70.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-61" date="1730462400">- IGMP: fix fix problem that can not join the sixteen igmp group</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-62" date="1730462401">- When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
- Turn on the LWIP_SO-LINGER switch</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-63" date="1731326400">- fix IFNAMSIZ definition conflict between lwip and kernel</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-64" date="1731672000">- fix no ack response when lcoal only receive but not send data</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-65" date="1732795200">- bug: free sock when exit</changelog>
  <changelog author="suchangzhi &lt;suchangzhi_yewu@cmss.chinamobile.com&gt; - 2.2.0-66" date="1733486400">- fix pingpong mode spelling error</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-67" date="1733832000">- add recv_block in lwip_sock</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-68" date="1736856000">- fix pcb.tcp null pointer error when netperf recv RST</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-69" date="1737201600">- tso: max frags is configurable</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-70" date="1739448000">- TCP_IN: fix infinite loopping in func min_cnts_lpcb_get</changelog>
</package>
<package pkgid="c6a0935dfdfe4b667352e2b5b7845781476bb1ad76c5c2b29b0894f422805749" name="lwip" arch="src">
  <version epoch="0" ver="2.2.0" rel="72.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-63" date="1731326400">- fix IFNAMSIZ definition conflict between lwip and kernel</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-64" date="1731672000">- fix no ack response when lcoal only receive but not send data</changelog>
  <changelog author="hankangkang &lt;hankangkang5@huawei.com&gt; - 2.2.0-65" date="1732795200">- bug: free sock when exit</changelog>
  <changelog author="suchangzhi &lt;suchangzhi_yewu@cmss.chinamobile.com&gt; - 2.2.0-66" date="1733486400">- fix pingpong mode spelling error</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-67" date="1733832000">- add recv_block in lwip_sock</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 2.2.0-68" date="1736856000">- fix pcb.tcp null pointer error when netperf recv RST</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 2.2.0-69" date="1737201600">- tso: max frags is configurable</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 2.2.0-70" date="1739448000">- TCP_IN: fix infinite loopping in func min_cnts_lpcb_get</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-71" date="1751716800">- tcp udp: merge RTW and RTC modes
- mempool: supports async and sync memory modes</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.2.0-72" date="1751803200">- fix 20.03 LTS build failed</changelog>
</package>
<package pkgid="814e571817ec9ba1135c007d0a6105ee56f1827d27f5c8c46e92b46d1f00bbd5" name="lxcfs-tools" arch="src">
  <version epoch="0" ver="0.3" rel="35.oe2203sp4"/>
  <changelog author="wujie &lt;wujie@nj.iscas.ac.cn&gt; - 0.3-30" date="1688385600">- add riscv64 to syscall_linux_64.go build</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 0.3-31" date="1692360000">- add loongarch64 support</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-32" date="1703678400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:hide error when isula info is abnormal</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 0.3-33" date="1706875200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support lxcfs reliability for docker</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 0.3-34" date="1708603200">- Modify architecture support patch</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 0.3-35" date="1750939200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart</changelog>
</package>
<package pkgid="5fd652a8c1102250a303ff29b854f6efa161b65f656ccd501e9c92a3e5c59699" name="make" arch="src">
  <version epoch="1" ver="4.3" rel="5.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:4.3-5" date="1737892800">- Obsolete useless devel package</changelog>
</package>
<package pkgid="0fc94ead167bfc6815ec02148aaa048395b3251bb353c897fbf19b99435a9562" name="mariadb" arch="src">
  <version epoch="1" ver="10.5.28" rel="1.oe2203sp4"/>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:10.5.28-1" date="1743422400">- update to 10.5.28 for CVE-2025-21490</changelog>
</package>
<package pkgid="e9917533a75667ac190c15bc888872887277c6b582cae9af258cd8e0d2c53ebc" name="mariadb" arch="src">
  <version epoch="1" ver="10.5.29" rel="1.oe2203sp4"/>
  <changelog author="ZhengZhenyu&lt;zheng.zhenyu@outlook.com&gt; - 1:10.5.22-1" date="1697457600">- Bump to 10.5.22</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:10.5.28-1" date="1743422400">- update to 10.5.28 for CVE-2025-21490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:10.5.29-1" date="1746792000">- update to 10.5.29 for CVE-2025-30722, CVE-2025-30693, CVE-2023-52970, CVE-2023-52969</changelog>
</package>
<package pkgid="0efdee66e330547277bb5d3afb79a0e89084c27f89c784c5f82461ce95ef2d34" name="mariadb" arch="src">
  <version epoch="4" ver="10.5.29" rel="2.oe2203sp4"/>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1:10.5.25-1" date="1716897600">- Bump to 10.5.25 for resolving CVE-2024-21096, CVE-2023-22084
- Fix version description in systemd service file</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:10.5.28-1" date="1743422400">- update to 10.5.28 for CVE-2025-21490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:10.5.29-1" date="1746792000">- update to 10.5.29 for CVE-2025-30722, CVE-2025-30693, CVE-2023-52970, CVE-2023-52969</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 4:10.5.29-1" date="1756468800">- Modify the epoch version to fix the upgrade issue</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 4:10.5.29-2" date="1769601600">- fix CVE-2025-13699</changelog>
</package>
<package pkgid="da2a67fc95288925c4532605cc815e635ea23a2c7ad8179a7e0a30bf6061a2bb" name="mchange-commons" arch="src">
  <version epoch="0" ver="0.2.11" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.2.11-12" date="1773403200">- Fix CVE-2026-27727</changelog>
</package>
<package pkgid="e36657489e2daa7cbe750c3324b0d54bc9e99adaa8c1994df02ece0cbdfe5f44" name="mdadm" arch="src">
  <version epoch="0" ver="4.2" rel="16.oe2203sp4"/>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 4.2-10" date="1702555200">* Fix race of "mdadm --add" and  "mdadm --incremental"</changelog>
  <changelog author="liuh &lt;liuhuan01@kylinos.cn&gt; - 4.2-11" date="1716984000">- sync patch from community</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 4.2-12" date="1719576000">- Manage: fix check after dereference issue</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 4.2-13" date="1720699200">- Mdmonitor: Fix segfault</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 4.2-14" date="1724846400">- backport bugfix patches from community</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 4.2-15" date="1742299200">- Super1 clear extra flags when initializing metadata</changelog>
  <changelog author="wuguanghao &lt;wuguanghao3@huawei.com&gt; - 4.2-16" date="1760702400">- mdmonitor.service: add conditional judgment to avoid service startup failed</changelog>
</package>
<package pkgid="f61665654c920436d45308b5733e06a45f0bb4ccc3cf5e81c986ae2108568477" name="memkind" arch="src">
  <version epoch="0" ver="1.13.0" rel="4.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.13.0-2" date="1693310400">- add support for loongarch64 and sw_64</changelog>
  <changelog author="Yicong Yang &lt;yangyicong@hisilicon.com&gt; - 1.13.0-3" date="1697630400">- Support initializing HBW nodes from memory_locality on openEuler</changelog>
  <changelog author="Jie Liu &lt;liujie375@h-partners.com&gt; - 1.13.0-4" date="1719835200">- Support initializing HBW nodes from HMAT with libaray hwloc-devel</changelog>
</package>
<package pkgid="af6428d5de1c0ac7786bb0ef6fb589f4d1ff066c069a3131939e489550543643" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240813" rel="1.oe2203sp4"/>
  <changelog author="zhaozhen &lt;zhaozhen@loongson.cn&gt; - 2.1-38" date="1668427200">- add loongarch support</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813</changelog>
</package>
<package pkgid="82743f7a81fc7c6be0589711573713e9ef04912f203d958de914f99c5e698bf5" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20240910" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.1-39" date="1692619200">- Fix compilation failure caused by tar upgrade</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.1-41" date="1692792000">- Update to 2.1-41 for fix CVE-2022-40982,CVE-2022-38090 and CVE-2022-33196</changelog>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
</package>
<package pkgid="5da173f0a102a3e023d006992e6e0ea54e865dabca9e57c570298f10a687b6f5" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20241112" rel="1.oe2203sp4"/>
  <changelog author="lwg K &lt;weigangli99@gmail.com&gt; - 2.1-42" date="1700049600">- update to upstream 2.1-42. 20231114
- fix CVE-2023-23583</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241029-1" date="1730289600">- update to 20241029</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241112-1" date="1731585600">- update to 20241112 for fix CVE-2024-23918, CVE-2024-21853, CVE-2024-21820</changelog>
</package>
<package pkgid="142cf8060a1e479547fc55699f5a06073806fd4597b404ff74228623397341eb" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20250211" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 20231114-1" date="1704801600">- Modify Source0 to get it form github</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241029-1" date="1730289600">- update to 20241029</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241112-1" date="1731585600">- update to 20241112 for fix CVE-2024-23918, CVE-2024-21853, CVE-2024-21820</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250211-1" date="1739361600">- update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
  CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068</changelog>
</package>
<package pkgid="d581346523f3020ba6bb27e531bb764dd9487294d381565601fc7b95022c9760" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20250512" rel="1.oe2203sp4"/>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 20231114-2" date="1709553600">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241029-1" date="1730289600">- update to 20241029</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241112-1" date="1731585600">- update to 20241112 for fix CVE-2024-23918, CVE-2024-21853, CVE-2024-21820</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250211-1" date="1739361600">- update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
  CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250512-1" date="1747137600">- update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
  CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103</changelog>
</package>
<package pkgid="07e6c41406d1ddc287365e797f20cca72a99b36a7b200d4b5cd2320d29f6d731" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20250812" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240312-1" date="1710417600">- Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
  CVE-2023-22655, CVE-2023-43490, CVE-2023-28746</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 20240531-1" date="1718107200">- Update to 20240531 for fix CVE-2023-45733, CVE-2023-45745,
  CVE-2023-46103, CVE-2023-47855</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241029-1" date="1730289600">- update to 20241029</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241112-1" date="1731585600">- update to 20241112 for fix CVE-2024-23918, CVE-2024-21853, CVE-2024-21820</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250211-1" date="1739361600">- update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
  CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250512-1" date="1747137600">- update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
  CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250812-1" date="1755086400">- update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
  CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
  CVE-2025-32086</changelog>
</package>
<package pkgid="d40e9b6fa2f66250307be7e1f584300e995a654d7bae40e6c156b18e0c72bbb7" name="microcode_ctl" arch="src">
  <version epoch="0" ver="20260210.1" rel="1.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 20240531-2" date="1724155200">- License compliance rectification.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240813-1" date="1725451200">- update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
  CVE-2024-24980, CVE-2023-42667, CVE-2023-49141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20240910-1" date="1726056000">- update to 20240910 for fix CVE-2024-24968, CVE-2024-23984</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241029-1" date="1730289600">- update to 20241029</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20241112-1" date="1731585600">- update to 20241112 for fix CVE-2024-23918, CVE-2024-21853, CVE-2024-21820</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250211-1" date="1739361600">- update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
  CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250512-1" date="1747137600">- update to 20250512 to fix CVE-2024-28956, CVE-2025-24495, CVE-2025-20012,
  CVE-2024-45332, CVE-2025-20623, CVE-2024-43420, CVE-2025-20054, CVE-2025-20103</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20250812-1" date="1755086400">- update to 20250812 to fix CVE-2025-20053, CVE-2025-20109, CVE-2025-21090,
  CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-26403,
  CVE-2025-32086</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20251111-1" date="1762948800">- update to 20251111</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 20260210.1-1" date="1770811200">- update to 20260210 rev1</changelog>
</package>
<package pkgid="eb4ab80475098ba0f25f0c0721a90dfabca37a26287fb1c8b7f0a29c2c624c0c" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.4.16.11" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.13.2-1" date="1681300800">- Update to 2.4.13.2 to fix CVE-2023-28625</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.4.15.3-1" date="1708171200">- Upgrade to 2.4.15.3 for fix CVE-2024-24814</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.4.16.6-1" date="1736769600">- Update to 2.4.16.6:
  * metadata: fix caching of JWKs from jwks_uri when using the default expiry setting
  * info: fix requests to the info hook with extend_session=false
  * cookie: OIDCCookieSameSite default behaviour Lax
  * cookie: apply OIDCCookieSameSite Off/None properly to state cookies instead of always setting Lax
  * cache: avoid segfault and improve error reporting in case apr_temp_dir_get fails when a temp directory
    cannot be found on the system upon initaliizing cache mutexes and the file cache
  * metadata: allow plain HTTP URLs in metadata elements jwks_uri and signed_jwks_uri to ensure backwards
    compatibility with &lt;=2.4.15.7 and to support private/test deployments
  * code: address warnings from static code analysis tool CodeChecker</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.4.16.11-1" date="1744200000">- Update to 2.4.16.11 for fix CVE-2025-31492</changelog>
</package>
<package pkgid="bf25aab6022a5b1f4bbd4ec2f37f339070f3a8c9400f456216168707f95d3c78" name="mod_http2" arch="src">
  <version epoch="0" ver="1.15.25" rel="4.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-3" date="1712491200">- Type:cves
- CVE:CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-27316</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.15.25-4" date="1755259200">- Type:cves
- CVE:CVE-2025-49630
- SUG:NA
- DESC:fix CVE-2025-49630</changelog>
</package>
<package pkgid="fea0323d098cfeece73e9e3e111937fbaccf70f9b680271d7190b925623d30c8" name="mod_security" arch="src">
  <version epoch="0" ver="2.9.11" rel="1.oe2203sp4"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 2.9.7-1" date="1689595200">- Upgrade to version 2.9.7
- Fix CVE-2022-39956</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.8-1" date="1725883200">- update to 2.9.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.9-1" date="1748260800">- Update to 2.9.9 for fix CVE-2025-47947</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.9.9-2" date="1750852800">- Fix CVE-2025-48866</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.11-1" date="1751630400">- Update to 2.9.11 for fix CVE-2025-52891</changelog>
</package>
<package pkgid="a3bf7a061be49249ebdbf3baa2334e78ff8f5354df659c27b22706a09e7911cd" name="mod_security" arch="src">
  <version epoch="0" ver="2.9.12" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.8-1" date="1725883200">- update to 2.9.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.9-1" date="1748260800">- Update to 2.9.9 for fix CVE-2025-47947</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.9.9-2" date="1750852800">- Fix CVE-2025-48866</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.11-1" date="1751630400">- Update to 2.9.11 for fix CVE-2025-52891</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.12-1" date="1754568000">- update to 2.9.12 for fix CVE-2025-54571</changelog>
</package>
<package pkgid="878f605d879414d933576bc6c8bea191e7dc2ba4b0371e65526ab55e52c4e010" name="mod_security" arch="src">
  <version epoch="0" ver="2.9.9" rel="1.oe2203sp4"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 2.9.7-1" date="1689595200">- Upgrade to version 2.9.7
- Fix CVE-2022-39956</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.8-1" date="1725883200">- update to 2.9.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.9-1" date="1748260800">- Update to 2.9.9 for fix CVE-2025-47947</changelog>
</package>
<package pkgid="66a70616508b8556741d1bcff463c4549a4b6e10d85b285b723080785009f4f8" name="mod_security" arch="src">
  <version epoch="0" ver="2.9.9" rel="2.oe2203sp4"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 2.9.7-1" date="1689595200">- Upgrade to version 2.9.7
- Fix CVE-2022-39956</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.9.8-1" date="1725883200">- update to 2.9.8</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.9-1" date="1748260800">- Update to 2.9.9 for fix CVE-2025-47947</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.9.9-2" date="1750852800">- Fix CVE-2025-48866</changelog>
</package>
<package pkgid="9a819e06af73168edc62f544a0b6091a5f43812ae7291c4bc8ea6b121a4c8b1e" name="mod_security_crs" arch="src">
  <version epoch="0" ver="3.2.2" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.2.2-3" date="1767960000">- Fix CVE-2026-21876</changelog>
</package>
<package pkgid="f9cb82f6e2cd9a967d20849b030f9000f0ad2e69a48537c48422c8f88267869b" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.27.4" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;wangkai385@h-partners.com&gt; - 1.13.1-6" date="1661428800">- Remove rpath</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
</package>
<package pkgid="b530d5e10ca0fb05d99e4700bcdc6b608fc02a125e336f2d5f444ae9dea71a39" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.30.6" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.13.1-7" date="1705406400">- Fix CVE-2023-0437</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.30.6-1" date="1765281600">- Update to 1.30.6 for fix CVE-2025-12119</changelog>
</package>
<package pkgid="a3a82264920e8da59340a3af3cdc64309faee88e105f29ed9124f2835b200740" name="mongo-c-driver" arch="src">
  <version epoch="0" ver="1.30.6" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.27.4-1" date="1720699200">- Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
- libbson Fixes:
  * Fix build with Visual Studio 2013.
  * Fix parsing of colon in timezone.
  * Error on failure to init subdocument in bson_iter_visit_all.
  * Fix string handling in bson_string_new and bson_string_append.
  * Fix iteration in bson_strfreev.
  * Use aligned alloc for bson_array_builder_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Fix conversion warning with GCC 12.
  * Fixes to some format strings in trace logs.
  * Allow mongoc_buffer_t to be larger than INT_MAX.
  * Add bson_array_builder_t.
- libmongoc Fixes:
  * Fix possible crash reading malformed wire protocol message.
  * Upgraded bundled Zlib from 1.2.3 to 1.3.1
  * Close leftover connections to removed servers.
  * Fix possible crash when client is configured with empty password.
  * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
  * Fix 32-bit compile with 64-bit time_t
  * Restore support for Sphinx 1.7.6 for man page build.
  * Disable shared libmongoc targets if ENABLE_SHARED=OFF
  * Fix documentation build with Python 3.9.
  * Fix data race in mongoc_cursor_get_host.
  * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
  * Send recoveryToken in transactions when connected to a load balancer.</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.30.6-1" date="1765281600">- Update to 1.30.6 for fix CVE-2025-12119</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.30.6-2" date="1774267200">- Fix CVE-2026-4359</changelog>
</package>
<package pkgid="85ae0fb010e713124b18e7ef0e13042c2cdb361b47fc0ab9f5eaf14c8d6e833c" name="motif" arch="src">
  <version epoch="0" ver="2.3.8" rel="4.oe2203sp4"/>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 2.3.8-3" date="1687953600">- update config.guess and config.sub for riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3.8-4" date="1729857600">- Fix CVE-2022-44617 and CVE-2022-46285</changelog>
</package>
<package pkgid="7dbbb51c065ca44589f9161de2339290be604732fc956c1bc413ff5d32e3e530" name="munge" arch="src">
  <version epoch="0" ver="0.5.14" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.5.14-2" date="1770811200">- Fix CVE-2026-25506</changelog>
</package>
<package pkgid="36d5259dcc8ec98e057ee9319be4b07273249164b993de8a0e8f4c1f81afb9d2" name="musl" arch="src">
  <version epoch="0" ver="1.2.3" rel="3.oe2203sp4"/>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1.2.3-2" date="1710417600">- fix compile error about unsupported long double type in ppc64le</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 1.2.3-3" date="1741089600">- Fix CVE-2025-26519</changelog>
</package>
<package pkgid="b3b9f330e255774046355001b405eb9ec4e56503a3c77e70601f1d5a1eb250ec" name="mutt" arch="src">
  <version epoch="5" ver="2.2.12" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5:2.2.12-1" date="1694692800">- Update to 2.2.12 for fix CVE-2023-4874 and CVE-2023-4875</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 5:2.2.12-2" date="1722427200">- Fix NULL dereference in crypt gpgme</changelog>
</package>
<package pkgid="f9e869aa153597019acc3b8e06c46d1a09be30e6b4ef89a260681d1fec0b7aa9" name="mysql" arch="src">
  <version epoch="0" ver="8.0.38" rel="1.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
</package>
<package pkgid="719aaae71f952cea9edf3013ee380047513e6883a8886c6108b11e326d0d9552" name="mysql" arch="src">
  <version epoch="0" ver="8.0.40" rel="1.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 8.0.29-2" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
</package>
<package pkgid="9289b24c0ff8d70133a5e7b697e6ba0398ce9c347ddded8fff9fd74f334f9202" name="mysql" arch="src">
  <version epoch="0" ver="8.0.41" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
  <changelog author="zhouyi &lt;zhouyi198@h-partners.com&gt; - 8.0.40-2" date="1732190400">- Add lfs config to branch openEuler-24.03-LTS
  Edit mysql.spec</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.41-1" date="1737547200">- Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
  CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
  CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
  CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
  CVE-2025-21555,CVE-2025-21559)</changelog>
</package>
<package pkgid="f115b2bd4d9e8f6a2bcbdabc8bb6734bc3039856633da3c7b8df25dfea0a4d1f" name="mysql" arch="src">
  <version epoch="0" ver="8.0.42" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.29-3" date="1684238400">- Fix CVE-2022-37434</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
  <changelog author="zhouyi &lt;zhouyi198@h-partners.com&gt; - 8.0.40-2" date="1732190400">- Add lfs config to branch openEuler-24.03-LTS
  Edit mysql.spec</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.41-1" date="1737547200">- Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
  CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
  CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
  CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
  CVE-2025-21555,CVE-2025-21559)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.42-1" date="1744804800">- Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
  CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
  CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
  CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
  CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
  CVE-2025-30715,CVE-2025-30721,CVE-2025-30722</changelog>
</package>
<package pkgid="c51235767a34a9fbdeda8902105399d530a57a189239cc908fb230d7c84897e4" name="mysql" arch="src">
  <version epoch="0" ver="8.0.43" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.0.35-1" date="1699358400">- Upgrade to 8.0.35 for fix cves</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 8.0.35-2" date="1702468800">- Remove rpath to fix euler maker build failure</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
  <changelog author="zhouyi &lt;zhouyi198@h-partners.com&gt; - 8.0.40-2" date="1732190400">- Add lfs config to branch openEuler-24.03-LTS
  Edit mysql.spec</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.41-1" date="1737547200">- Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
  CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
  CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
  CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
  CVE-2025-21555,CVE-2025-21559)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.42-1" date="1744804800">- Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
  CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
  CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
  CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
  CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
  CVE-2025-30715,CVE-2025-30721,CVE-2025-30722</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.43-1" date="1753272000">- Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
  CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
  CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
  CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
  CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
  CVE-2025-50104,CVE-2025-53023)</changelog>
</package>
<package pkgid="d074a7e6dec9097068d79a30c52d6d40aa7ed434314c9f2ae49210f883ccd645" name="mysql" arch="src">
  <version epoch="0" ver="8.0.44" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.37-1" date="1715083200">- Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
  CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
  CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
  CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
  CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
  CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
  CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
  CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
  CVE-2024-21057,CVE-2023-6129)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
  <changelog author="zhouyi &lt;zhouyi198@h-partners.com&gt; - 8.0.40-2" date="1732190400">- Add lfs config to branch openEuler-24.03-LTS
  Edit mysql.spec</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.41-1" date="1737547200">- Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
  CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
  CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
  CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
  CVE-2025-21555,CVE-2025-21559)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.42-1" date="1744804800">- Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
  CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
  CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
  CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
  CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
  CVE-2025-30715,CVE-2025-30721,CVE-2025-30722</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.43-1" date="1753272000">- Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
  CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
  CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
  CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
  CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
  CVE-2025-50104,CVE-2025-53023)</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 8.0.43-2" date="1757937600">- fix sw patch</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 8.0.43-3" date="1758283200">- fix mysql-Add-sw64-architecture.patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.44-1" date="1761134400">- Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
  CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)</changelog>
</package>
<package pkgid="d558f2f91dce789fc4a3fff25c93b854494b794c6ba5d66fd6cadd0e742891d7" name="mysql" arch="src">
  <version epoch="0" ver="8.0.45" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.38-1" date="1721649600">- Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
  CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
  CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
  CVE-2024-21163)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.40-1" date="1729166400">- Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
  CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
  CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
  CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
  CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)</changelog>
  <changelog author="zhouyi &lt;zhouyi198@h-partners.com&gt; - 8.0.40-2" date="1732190400">- Add lfs config to branch openEuler-24.03-LTS
  Edit mysql.spec</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.41-1" date="1737547200">- Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
  CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
  CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
  CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
  CVE-2025-21555,CVE-2025-21559)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.42-1" date="1744804800">- Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
  CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
  CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
  CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
  CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
  CVE-2025-30715,CVE-2025-30721,CVE-2025-30722</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.43-1" date="1753272000">- Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
  CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
  CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
  CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
  CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
  CVE-2025-50104,CVE-2025-53023)</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 8.0.43-2" date="1757937600">- fix sw patch</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 8.0.43-3" date="1758283200">- fix mysql-Add-sw64-architecture.patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.0.44-1" date="1761134400">- Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
  CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 8.0.45-1" date="1768996800">- Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
  CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)</changelog>
</package>
<package pkgid="9c07bf041688a3f3a53f0d5a4b70ae7525b72d7f168d5d4a69f5293ecba4c74c" name="nasm" arch="src">
  <version epoch="0" ver="2.15.05" rel="7.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@uniontech.com&gt; - 2.15.05-4" date="1674129600">- Fix help info error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.15.05-5" date="1681300800">- Fix CVE-2022-44370</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 2.15.05-6" date="1692792000">- Fix CVE-2020-21528</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.15.05-7" date="1729944000">- Fix CVE-2023-38665</changelog>
</package>
<package pkgid="450a770fa6f03dc0c38519f45566142fd41bcce318f38fa49f921d6461e0548a" name="nasm" arch="src">
  <version epoch="0" ver="2.15.05" rel="8.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.15.05-7" date="1729944000">- Fix CVE-2023-38665</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.15.05-8" date="1762344000">- Fix CVE-2023-31722</changelog>
</package>
<package pkgid="67121968d4484e28b3062bc72f42e4412f2c108e525348ea92d373c3f6be5716" name="nbdkit" arch="src">
  <version epoch="0" ver="1.29.11" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.29.11-2" date="1750420800">- Fix CVE-2025-47711, CVE-2025-47712</changelog>
</package>
<package pkgid="33b7385c7b610e6a9e84d872d30989aeed929d630a4f954dadadd82e7310ebc9" name="ncurses" arch="src">
  <version epoch="0" ver="6.3" rel="16.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-13" date="1702641600">- Type:CVE
- ID:CVE-2023-50495
- SUG:NA
- DESC:fix CVE-2023-50495</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-14" date="1706616000">- Type:CVE
- ID:CVE-2023-45918
- SUG:NA
- DESC:fix CVE-2023-45918</changelog>
  <changelog author="liutie &lt;liutie4@huawei.com&gt; - 6.3-15" date="1709121600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sysboost no longer needs relocation, so remove it.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-16" date="1752494400">- Type:CVE
- CVE:CVE-2025-6141
- SUG:NA
- DESC:fix CVE-2025-6141</changelog>
</package>
<package pkgid="e4f1dbb434234f02bbb65d7818b6627701193b2d593cf1fd4d9b36cd21cd24cd" name="ncurses" arch="src">
  <version epoch="0" ver="6.3" rel="17.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 6.3-16" date="1752494400">- Type:CVE
- CVE:CVE-2025-6141
- SUG:NA
- DESC:fix CVE-2025-6141</changelog>
  <changelog author="nickyang &lt;nickyang228@163.com&gt; - 6.3-17" date="1774526400">- Type:CVE
- CVE:CVE-2025-69720
- SUG:NA
- DESC:fix CVE-2025-69720</changelog>
</package>
<package pkgid="19374edf5bb1fb48daef2044a0d08dd94329db05a38ef0629872b4a9d5bcc024" name="net-snmp" arch="src">
  <version epoch="1" ver="5.9.1" rel="7.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:5.9.1-5" date="1672401600">- Type:CVE
- CVE:CVE-2022-44792 CVE-2022-44793
- SUG:NA
- DESC:fix CVE-2022-44792 CVE-2022-44793</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-6" date="1684929600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove pcre dependency</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-7" date="1730203200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Sync upstream patches to fix Buffer overflow</changelog>
</package>
<package pkgid="ba9c197131052ffe3a5a6d71564459b515368ba8564cb4f78c1c577d1543306b" name="net-snmp" arch="src">
  <version epoch="1" ver="5.9.1" rel="8.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-7" date="1730203200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Sync upstream patches to fix Buffer overflow</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1:5.9.1-8" date="1768305600">- Type:CVE
- CVE:CVE-2025-68615
- SUG:NA
- DESC:fix CVE-2025-68615</changelog>
</package>
<package pkgid="fb00ff12c04c3e89cb7429976ff5d1aa80f22f1b2263ca3cd656c46770a0a0ee" name="net-tools" arch="src">
  <version epoch="0" ver="2.10" rel="4.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.10-4" date="1744113600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport to use llu instead of Lu for unsigned long long type</changelog>
</package>
<package pkgid="22ccf84e69feb62773ce98d1e6c5305ddee8b4a940f1d5ce9a2443ba96950264" name="netpbm" arch="src">
  <version epoch="0" ver="10.83.01" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 10.83.01-6" date="1736164800">- Fix jasper CVE-2008-3522</changelog>
</package>
<package pkgid="cf3651269d2e20bb8e3566080a894d7887fd964304529f8b25446882c0add739" name="netty" arch="src">
  <version epoch="0" ver="4.1.13" rel="22.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 4.1.13-20" date="1678017600">- Add strip</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-22" date="1731412800">- Fix CVE-2024-29025</changelog>
</package>
<package pkgid="2b2a539f77294d3329b91f3dde9602e240da16b9172ce94a38da0809923681f3" name="netty" arch="src">
  <version epoch="0" ver="4.1.13" rel="23.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-22" date="1731412800">- Fix CVE-2024-29025</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 4.1.13-23" date="1755864000">- Fix CVE-2022-24823</changelog>
</package>
<package pkgid="deb0c6876ad66bd6b0526759e919c2b0a024f8e908eb2424ddd2f1f64826df4a" name="netty" arch="src">
  <version epoch="0" ver="4.1.13" rel="24.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-21" date="1702468800">- Fix CVE-2022-41881</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.1.13-22" date="1731412800">- Fix CVE-2024-29025</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 4.1.13-23" date="1755864000">- Fix CVE-2022-24823</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1.13-24" date="1760616000">- Fix CVE-2025-59419</changelog>
</package>
<package pkgid="44fbcea339d358a1e53f0059bda0abf465453de404db9f26c19fc900aaf1f845" name="netty3" arch="src">
  <version epoch="0" ver="3.10.6" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.10.6-8" date="1724846400">- Fix CVE-2019-16869,CVE-2019-20444,CVE-2019-20445</changelog>
</package>
<package pkgid="a02d9bcbd8dd324dda436f2cd765ad4ce5ab5b2403a7740b7cdf8be3daa4a518" name="netty3" arch="src">
  <version epoch="0" ver="3.10.6" rel="9.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.10.6-8" date="1724846400">- Fix CVE-2019-16869,CVE-2019-20444,CVE-2019-20445</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.6-9" date="1731412800">- Fix CVE-2024-29025</changelog>
</package>
<package pkgid="6cafb72f03ed63b38ea43c35af729114df04c27b1c26d1f178458dd8ca34cc59" name="newt" arch="src">
  <version epoch="0" ver="0.52.23" rel="3.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.23-1" date="1675166400">- Type:requirement
- Id:NA
- SUG:NA
- DESC:update newt version to 0.52.23</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 0.52.23-2" date="1722513600">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix license</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.52.23-3" date="1733400000">- fix locale files installation</changelog>
</package>
<package pkgid="9c895d91e9189548409146ae3543aa32400760b5e0bf1d5a63b742a59e187dd8" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="11.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:1.0.0-2" date="1662206400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cache prepare nft_cache evaluate to return error
       fix cache validate handle string length
       add src support for implicit chain bindings
       fix cache release pending rules
       fix segtree map listing
       parser_json fix device parsing in netdev family
       fix src Don't parse string as verdict in map</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-3" date="1664539200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nft desribe ip option rr value coredump</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-4" date="1669032000">- Type:feature
- ID:NA
- SUG:NA
- DESC:enabled DT testcase</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-5" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string prefix expression must retain original length
fix release top level scope</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-6" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dump locations expressions only if set</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
</package>
<package pkgid="30414a9b9670c73d0fef45837e213b61cc2742b00dcd609ec64280dbc5669ab3" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="12.oe2203sp4"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-3" date="1664539200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix nft desribe ip option rr value coredump</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-4" date="1669032000">- Type:feature
- ID:NA
- SUG:NA
- DESC:enabled DT testcase</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-5" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string prefix expression must retain original length
fix release top level scope</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-6" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dump locations expressions only if set</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
</package>
<package pkgid="03f7af0097edda01d09b37879f08681228feca9e7319b3a72344736141fb47e3" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="13.oe2203sp4"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-5" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string prefix expression must retain original length
fix release top level scope</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-6" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dump locations expressions only if set</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-13" date="1733832000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:parser: split tcp option rules
       cache: prepare nft_cache_evaluate() to return error
       ct timeout: fix 'list object x' vs. 'list objects in table' confusion
       ct expectation: fix 'list object x' vs. 'list objects in table' confusion
       tests: shell: connect chains to hook point</changelog>
</package>
<package pkgid="c1577fbdcee249dd131dd8f8e12d5f52197d83506b169d86cb82959b489fc31b" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="14.oe2203sp4"/>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-5" date="1670932800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix string prefix expression must retain original length
fix release top level scope</changelog>
  <changelog author="huangyu &lt;huangyu106@huawei.com&gt; - 1:1.0.0-6" date="1671105600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix dump locations expressions only if set</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-13" date="1733832000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:parser: split tcp option rules
       cache: prepare nft_cache_evaluate() to return error
       ct timeout: fix 'list object x' vs. 'list objects in table' confusion
       ct expectation: fix 'list object x' vs. 'list objects in table' confusion
       tests: shell: connect chains to hook point</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-14" date="1733918400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       parser_json: release buffer returned by json_dumps
       parser_json: fix handle memleak from error path
       parser_json: fix several expression memleaks from error path
       libnftables: Zero ctx-&gt;vars after freeing it</changelog>
</package>
<package pkgid="2b43211b8cab43a76cd68c1e58f5b2546c74cc231ee4fc427d841b02af407bdb" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="15.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-7" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:evaluate allow implicit ether vlan dep
evaluate datatype memleak after binop transfer
evaluate bogus datatype assertion in binary operation evaluation
netlink delinearize do not transfer binary operation to non anonymous sets
payload do not kill dependency for proto unknown
monitor missing cache and set handle initialization
netlink linearize fix timeout with map updates</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-8" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix potential array out of bounds access
evaluate: fix shift exponent underflow in concatenation evaluation
netlink: Fix for potential NULL-pointer deref
mnl: dump_nf_hooks() leaks memory in error path</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1:1.0.0-9" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:netlink_linearize: use div_round_up in byteorder length</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-13" date="1733832000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:parser: split tcp option rules
       cache: prepare nft_cache_evaluate() to return error
       ct timeout: fix 'list object x' vs. 'list objects in table' confusion
       ct expectation: fix 'list object x' vs. 'list objects in table' confusion
       tests: shell: connect chains to hook point</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-14" date="1733918400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       parser_json: release buffer returned by json_dumps
       parser_json: fix handle memleak from error path
       parser_json: fix several expression memleaks from error path
       libnftables: Zero ctx-&gt;vars after freeing it</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.0.0-15" date="1737979200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Optimize the cache to fix firewalld</changelog>
</package>
<package pkgid="36ada3bdf15ab3fb94867e102a349842e4627cf9a1b637cf3af89d75074dfac8" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="16.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-13" date="1733832000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:parser: split tcp option rules
       cache: prepare nft_cache_evaluate() to return error
       ct timeout: fix 'list object x' vs. 'list objects in table' confusion
       ct expectation: fix 'list object x' vs. 'list objects in table' confusion
       tests: shell: connect chains to hook point</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-14" date="1733918400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       parser_json: release buffer returned by json_dumps
       parser_json: fix handle memleak from error path
       parser_json: fix several expression memleaks from error path
       libnftables: Zero ctx-&gt;vars after freeing it</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.0.0-15" date="1737979200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Optimize the cache to fix firewalld</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-16" date="1760961600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: don't allow nat map with specified protocol
       rule: return error if table does not exist
       json: make sure timeout list is initialised
       evaluate: don't update cache for anonymous chains
       json: don't BUG when asked to list synproxies
       evaluate: compact STMT_F_STATEFUL checks
       evaluate: only allow stateful statements in set and map definitions
       netlink: fix crash when ops doesn't support udata
       netlink: Catch unknown types when deserializing objects
       netlink: Avoid potential NULL-ptr deref parsing set elem expressions
       netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY</changelog>
</package>
<package pkgid="814aacc361a14ee47fb91f4e1f199346e7d61becbc953b9f7f1b4b469a319601" name="nftables" arch="src">
  <version epoch="1" ver="1.0.0" rel="18.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-11" date="1719403200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: error out if basetypes are different
       evaluate: guard against NULL basetype
       evaluate: handle invalid mapping expressions gracefully
       evaluate: reject attempt to update a set
       evaluate: release mpz type in expr_evaluate_list() error path
       expression: missing line in describe command with invalid expression

Thu Apr 18 2024 lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:1.0.0-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:datatype: don't return a const string from cgroupv2_get_path()
datatype: fix leak and cleanup reference counting for struct datatype
datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
datatype: initialize TYPE_CT_LABEL slot in datatype array
evaluate: do not remove anonymous set with protocol flags and single element
evaluate: don't crash if object map does not refer to a value
evaluate: error out when expression has no datatype
evaluate: error out when store needs more than one 128bit register of align fixup
evaluate: fix check for truncation in stmt_evaluate_log_prefix()
evaluate: fix double free on dtype release
evaluate: fix memleak in prefix evaluation with wildcard interface name
evaluate: reject set in concatenation
evaluate: revisit anonymous set with single element optimization
evaluate: skip anonymous set optimization for concatenations
evaluate: stmt_nat: set reference must point to a map
evaluate: tproxy: move range error checks after arg evaluation
evaluate: validate chain max length
evaluate: validate maximum log statement prefix length
exthdr: fix tcpopt_find_template to use length after mask adjustment
exthdr: prefer raw_type instead of desc-&gt;type
json: expose dynamic flag
json: fix use after free in table_flags_json()
libnftables: Drop cache in -c/--check mode
meta: fix tc classid parsing out-of-bounds access
netlink: don't crash if prefix for &lt; byte is requested
netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
netlink: handle invalid etype in set_make_key()
parser_bison: fix ct scope underflow if ct helper section is duplicated
parser_bison: fix memleak in meta set error handling
parser_bison: make sure obj_free releases timeout policies
parser_json: Catch nonsense ops in match statement
parser_json: Default meter size to zero
parser_json: Fix flowtable prio value parsing
parser_json: Fix synproxy object mss/wscale parsing
parser_json: Fix typo in json_parse_cmd_add_object()
parser_json: Proper ct expectation attribute parsing
parser_json: Wrong check in json_parse_ct_timeout_policy()
py: fix exception during cleanup of half-initialized Nftables
rule: fix sym refcount assertion</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-12" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: disable meta set with ranges
       src: reject large raw payload and concat expressions
       evaluate: fix stack overflow with huge priority string
       tcpopt: don't create exthdr expression without datatype
       src: do not allow to chain more than 16 binops
       rule: fix ASAN errors in chain priority to textual names
       tests: shell: add regression test for double-free crash bug
       evaluate: handle invalid mapping expressions in stateful object
       evaluate: Fix incorrect checking the `base` variable in case of IPV6
       netlink: reset temporary set element stmt list after list splice</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-13" date="1733832000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:parser: split tcp option rules
       cache: prepare nft_cache_evaluate() to return error
       ct timeout: fix 'list object x' vs. 'list objects in table' confusion
       ct expectation: fix 'list object x' vs. 'list objects in table' confusion
       tests: shell: connect chains to hook point</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-14" date="1733918400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       parser_json: release buffer returned by json_dumps
       parser_json: fix handle memleak from error path
       parser_json: fix several expression memleaks from error path
       libnftables: Zero ctx-&gt;vars after freeing it</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.0.0-15" date="1737979200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Optimize the cache to fix firewalld</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.0.0-16" date="1760961600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       evaluate: don't allow nat map with specified protocol
       rule: return error if table does not exist
       json: make sure timeout list is initialised
       evaluate: don't update cache for anonymous chains
       json: don't BUG when asked to list synproxies
       evaluate: compact STMT_F_STATEFUL checks
       evaluate: only allow stateful statements in set and map definitions
       netlink: fix crash when ops doesn't support udata
       netlink: Catch unknown types when deserializing objects
       netlink: Avoid potential NULL-ptr deref parsing set elem expressions
       netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 1:1.0.0-17" date="1764072000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="eaglegai &lt;eaglegai@163.com&gt; - 1:1.0.0-18" date="1768392000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
</package>
<package pkgid="15ad96c7621a0f87c9e755373848b6a7a1a826793f47c7f74371c58e3ba9476f" name="nghttp2" arch="src">
  <version epoch="0" ver="1.46.0" rel="7.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.46.0-6" date="1712491200">- Type:CVE
- ID:CVE-2024-28182
- SUG:restart
- DESC:fix CVE-2024-28182</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 1.46.0-7" date="1773921600">- Type:CVE
- ID:CVE-2026-27135
- SUG:restart
- DESC:fix CVE-2026-27135</changelog>
</package>
<package pkgid="7e47d8ca76b86365b361af9a6280ca93908619afcecc7b13eb17c18bace9ebb5" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="10.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-8" date="1738843200">- fix CVE-2025-23419</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-9" date="1743595200">- backport upstreams to fix memory leak and possible segfault</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-10" date="1755518400">- fix CVE-2025-53859</changelog>
</package>
<package pkgid="36b7769d424554cc69f3961881327288b86074ddb0ee723f80a82b3aa44b8f3d" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="11.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-8" date="1738843200">- fix CVE-2025-23419</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-9" date="1743595200">- backport upstreams to fix memory leak and possible segfault</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-10" date="1755518400">- fix CVE-2025-53859</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-11" date="1773057600">- fix CVE-2026-1642</changelog>
</package>
<package pkgid="9bdfd5bde1fd22d0be7ffeb3619c040ec87ff2e5d5172727164b28dc85d284da" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="7.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-3" date="1666785600">- fix CVE-2022-41742 CVE-2022-41741</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1:1.21.5-4" date="1669291200">- add package mod-devel</changelog>
  <changelog author="snoweay &lt;snoweay@163.com&gt; - 1:1.21.5-5" date="1671624000">- add safety compile options</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
</package>
<package pkgid="37d1be651bb5f238a08c280d20224769685af1f7a357cb0813355f5c6d65e38f" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="8.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-8" date="1738843200">- fix CVE-2025-23419</changelog>
</package>
<package pkgid="fb575c988035ee1e0bf494759fa4397313a37936d9bb7c7cccccdec544f1818a" name="nginx" arch="src">
  <version epoch="1" ver="1.21.5" rel="9.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:1.21.5-6" date="1697716800">- fix CVE-2023-44487</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.21.5-7" date="1723723200">- fix CVE-2024-7347</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-8" date="1738843200">- fix CVE-2025-23419</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:1.21.5-9" date="1743595200">- backport upstreams to fix memory leak and possible segfault</changelog>
</package>
<package pkgid="01aa52677575a64f5d33edf953473a9880965976f5a714a2e7bee51f8c8e5639" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="10.oe2203sp4"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 1:12.22.11-2" date="1668600000">- fix CVE-2022-43548</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-3" date="1670846400">- Synchronize the release of 22.03-LTS</changelog>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1:12.22.11-4" date="1677067200">- Fix CVE-2023-0286,CVE-2023-0215,CVE-2022-4304 and CVE-2022-4450</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-10" date="1726747200">- Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983</changelog>
</package>
<package pkgid="9acc706adf826dc7bf1d4ce2e32d745ddca7a391c8f578d5f1b3dedd64bc0a25" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="11.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-10" date="1726747200">- Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:12.22.11-11" date="1741176000">- Fix CVE-2025-23085</changelog>
</package>
<package pkgid="8faeeb5769b97325a5777bf3b7061a2c16da9c828e0a56f7897e1d3c17effa1a" name="nodejs" arch="src">
  <version epoch="1" ver="12.22.11" rel="12.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-5" date="1693310400">- Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
- CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
- CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
- CVE-2023-32559,CVE-2022-35256</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:12.22.11-6" date="1698321600">- Update CVE-2023-23918.patch for fix nodejs-raw-body,nodejs-istanbul build error</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-7" date="1707134400">- add loong64 support</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-8" date="1707134401">- Fix CVE-2023-0464 and CVE-2023-0465</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-9" date="1707220800">- Fix CVE-2023-44487</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt;- 1:12.22.11-10" date="1726747200">- Fix CVE-2023-46809,CVE-2024-22019,CVE-2024-22025,CVE-2024-27982 and CVE-2024-27983</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:12.22.11-11" date="1741176000">- Fix CVE-2025-23085</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 1:12.22.11-12" date="1744372800">- correct error related to CVE-2025-23085</changelog>
</package>
<package pkgid="fe1da5602b074a2bdd0bdeee8d7e7f410d9e886a637ecbf5254e2073ddfdf0be" name="nodejs-brace-expansion" arch="src">
  <version epoch="0" ver="1.1.11" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.1.11-2" date="1749643200">- Fix CVE-2025-5889</changelog>
</package>
<package pkgid="b451cad9ecf25c9f532d0e75501fea2ed63c17d9e343d61fa26cf2fe90cfa08b" name="nodejs-form-data" arch="src">
  <version epoch="0" ver="0.2.0" rel="2.oe2203sp4"/>
  <changelog author="jinshuaiyu &lt;jinshuaiyu@kylinos.cn&gt; - 0.2.0-2" date="1755000000">- fix CVE-2025-7783</changelog>
</package>
<package pkgid="6f7c8d8d36e1828a6952c5213eadab80856219336698a68685a70610d139ba99" name="nodejs-js-yaml" arch="src">
  <version epoch="0" ver="3.10.0" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.10.0-2" date="1764849600">- Fix CVE-2025-64718</changelog>
</package>
<package pkgid="eb1e10973628cb7a384d0a9e331aff429f17ac0728bec2d015e0304faaccbb70" name="nodejs-requirejs" arch="src">
  <version epoch="0" ver="2.1.11" rel="3.oe2203sp4"/>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 2.1.11-3" date="1769515200">- fix CVE-2024-38999</changelog>
</package>
<package pkgid="9c4e16a8eb42290bde91e3adc05e493bb3b64850613a58470d2d2586249f33ca" name="nototools" arch="src">
  <version epoch="0" ver="0.2.17" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.2.17-2" date="1732795200">- Fix noto_lint.py scripts error</changelog>
  <changelog author="yyjeqhc &lt;jialin.oerv@isrc.iscas.ac.cn&gt; - 0.2.17-3" date="1751976000">- Migrated legacy `import pango` and `pangocairo` usage to modern PyGObject (`gi.repository.Pango`, `PangoCairo`)
- Replaced all legacy constants (`pango.STRETCH_...`) with `Pango.Stretch.XXX` enums</changelog>
</package>
<package pkgid="616d6f23b49d104ed73eba3f502029bb2ec26c3be361da66ef003967184c3e7a" name="nss" arch="src">
  <version epoch="0" ver="3.72.0" rel="10.oe2203sp4"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 3.72.0-9" date="1687262400">- Add Integrity Verification File in nss-softokn and fix build fail.</changelog>
  <changelog author="steven &lt;steven_ygui@163.com&gt; - 3.72.0-10" date="1747742400">- fix CVE-2022-22747</changelog>
</package>
<package pkgid="423b5f7b58b1763e97b4cf2ecc0e5128fe71c3969c38eb988a0a765f2a354101" name="ocaml" arch="src">
  <version epoch="0" ver="4.13.1" rel="8.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.13.1-8" date="1772280000">- Fix CVE-2026-28364</changelog>
</package>
<package pkgid="ded3b1a4a51b7b9ea6317df0a6b75b52c79da3324f94532c09084b90c051c18c" name="oeAware-collector" arch="src">
  <version epoch="0" ver="v1.0.2" rel="5.oe2203sp4"/>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-3" date="1714392000">- fix log while not supporting pmu uncore</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-4" date="1714478400">- remove pmu.h and pcerrc.h</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-5" date="1715169600">- replace enable and disable API in reflash_ring_buf</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.2-3" date="1718884800">- add netif_rx counting pmu instance</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-4" date="1719489600">- update libkperf version to v1.0.4</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; - v1.0.2-5" date="1719921600">- reduce thread collector load</changelog>
</package>
<package pkgid="5a72340de3b638fd9c3ea92e599f101b2ba66c510b4115474e89fb9156680214" name="oeAware-collector" arch="src">
  <version epoch="0" ver="v1.0.2" rel="6.oe2203sp4"/>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-4" date="1714478400">- remove pmu.h and pcerrc.h</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.0-5" date="1715169600">- replace enable and disable API in reflash_ring_buf</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.2-3" date="1718884800">- add netif_rx counting pmu instance</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-4" date="1719489600">- update libkperf version to v1.0.4</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; - v1.0.2-5" date="1719921600">- reduce thread collector load</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-6" date="1720180800">- fix uninitialized PmuAttr attr</changelog>
</package>
<package pkgid="99afc2bfe7e3ea05ced1f54f5ca15932cf4f05902baf9576e0cc6d5f69dd964f" name="oeAware-collector" arch="src">
  <version epoch="0" ver="v1.0.2" rel="9.oe2203sp4"/>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.1-2" date="1715774400">- fix compile warnings</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-1" date="1717156800">- refactor interface and fix some bugs</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-2" date="1717588800">- update libkperf version to v1.0.3</changelog>
  <changelog author="liuchanggeng &lt;liuchanggeng@huawei.com&gt; - v1.0.2-3" date="1718884800">- add netif_rx counting pmu instance</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-4" date="1719489600">- update libkperf version to v1.0.4</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; - v1.0.2-5" date="1719921600">- reduce thread collector load</changelog>
  <changelog author="zhoukaiqi &lt;zhoukaiqi@huawei.com&gt; - v1.0.2-6" date="1720180800">- fix uninitialized PmuAttr attr</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; - v1.0.2-7" date="1721044800">- fix out of bounds array</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - v1.0.2-8" date="1721131200">- explicit add libboundscheck as Requires</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; - v1.0.2-9" date="1721131201">- fix pmu cmake build option error</changelog>
</package>
<package pkgid="91b3abf807610231536b12ec8e4aa55afb2ce06b17f366e2740acb1a29636ec6" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v1.0.2" rel="3.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.0-5" date="1715169600">- fix systemd service uninstallation issue
- fix load error and args parsing error printing</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-2" date="1715774400">- fix pre-enable failed, dependencies missing error, memory leak
- fix warning message</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-3" date="1717156800">- refactor instance interfaces and add signal function</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-4" date="1717588800">- add dynamic dependencncy adjustment</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-6" date="1718366400">- fix dependency error and add enable failed logs
- fix dependency disabled failed and pre-enable illegal plugin</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-1" date="1718884800">- update version to v1.0.2-1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-2" date="1719489600">- add enable automatic startup</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-3" date="1720440000">- add automatic startup based on the version
- fix coredump when process exits
- modify logger mode to append</changelog>
</package>
<package pkgid="0c4476c2acd119f4e656e5384a41f9ccab2f20c8d070b04b4da65276c2dc993c" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v1.0.2" rel="4.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-1" date="1715428800">- update version to v1.0.1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-2" date="1715774400">- fix pre-enable failed, dependencies missing error, memory leak
- fix warning message</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-3" date="1717156800">- refactor instance interfaces and add signal function</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-4" date="1717588800">- add dynamic dependencncy adjustment</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-6" date="1718366400">- fix dependency error and add enable failed logs
- fix dependency disabled failed and pre-enable illegal plugin</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-1" date="1718884800">- update version to v1.0.2-1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-2" date="1719489600">- add enable automatic startup</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-3" date="1720440000">- add automatic startup based on the version
- fix coredump when process exits
- modify logger mode to append</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-4" date="1725537600">- update numafast version</changelog>
</package>
<package pkgid="c21091cbaca8222c56f098ea654d21e89b4c0ba936f21ce35564f8fc13c40dec" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v2.0.1" rel="1.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-5" date="1718193600">- add Requires</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.1-6" date="1718366400">- fix dependency error and add enable failed logs
- fix dependency disabled failed and pre-enable illegal plugin</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-1" date="1718884800">- update version to v1.0.2-1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-2" date="1719489600">- add enable automatic startup</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-3" date="1720440000">- add automatic startup based on the version
- fix coredump when process exits
- modify logger mode to append</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-4" date="1725537600">- update numafast version</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.0-1" date="1732104000">- merge the plugin repository into this repository
- add oeaware sdk library
- new interface of plugin : replace the ringbuf data with subscribe
- add new plugin : system info, command collector, xcall</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.0-2" date="1733140800">- fix data free, plugin display, command plugin bugs
- add oeaware group</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.0-3" date="1733486400">- adjust the header file structure
- fix cycles sample, spe memory free
- add one time command collection</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.1-1" date="1733918400">- add some document
- fix bug : spe period dynamic changes
- fix bug : analysis client not work
- fix bug : cpuburst exit error
- adapt : seep tune , steal task tune, xcall tune</changelog>
</package>
<package pkgid="31bb6b7c22251f7d1987b212c7ab7d16c3c6dd09cc48b6fc74fdd08f6f76e84e" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v2.0.1" rel="3.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-1" date="1718884800">- update version to v1.0.2-1</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-2" date="1719489600">- add enable automatic startup</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-3" date="1720440000">- add automatic startup based on the version
- fix coredump when process exits
- modify logger mode to append</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v1.0.2-4" date="1725537600">- update numafast version</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.0-1" date="1732104000">- merge the plugin repository into this repository
- add oeaware sdk library
- new interface of plugin : replace the ringbuf data with subscribe
- add new plugin : system info, command collector, xcall</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.0-2" date="1733140800">- fix data free, plugin display, command plugin bugs
- add oeaware group</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.0-3" date="1733486400">- adjust the header file structure
- fix cycles sample, spe memory free
- add one time command collection</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.1-1" date="1733918400">- add some document
- fix bug : spe period dynamic changes
- fix bug : analysis client not work
- fix bug : cpuburst exit error
- adapt : seep tune , steal task tune, xcall tune</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.1-2" date="1734523200">- fix smc type error
- fix cpu burst unsubscribe problem
- add pmu check</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.1-3" date="1735560000">- fix config load error
- fix memory leak
- fix access nullptr instance
- update build.sh</changelog>
</package>
<package pkgid="8041ef3c8202e03c2c436f2d67f357eca8de806948012b8b8cf47d67c01355f5" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v2.0.6" rel="2.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.2-7" date="1742904000">- add analysis args check</changelog>
  <changelog author="yeyiyang &lt;yeyiyang3@h-partners.com&gt; -v2.0.3-1" date="1746619200">- Refactored and enhanced the analysis module:
  - Added scenario-aware analysis for multiple optimization plugins
  - Introduced command-line result viewing capability
  - Implemented Markdown format output support
- Add new plugin: smt,binary,hirq</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; -v2.0.3-2" date="1747742400">- Fixed memory leak issues:
  - Fixed unsubscribeHandler topic deserialize memory leak
  - Fixed analysis module memory leak
- Enhanced eBPF functionality:
  - Set memory lock limit to infinity for eBPF
  - Used eBPF to collect thread information
- Network improvements:
  - Fixed ntoh port error
  - Added support for attaching all network interfaces
  - Used tcp-set-state to adapt k8s docker
- New features:
  - Added xcall parameters
  - Added support for docker coordination burst analysis
  - Added parameter validation
  - Added NUMA parallel scheduler tuning support
- Other improvements:
  - Fixed header files and added CI test</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.3-3" date="1747828800">- oeaware-sdk enhances user permissions</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.4-1" date="1748260800">- add docker coordination burst tune
- add multi net path tune and analysis
- add error log and params check</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.5-1" date="1748606400">- fix issues</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.5-2" date="1749470400">- improve some output format
- add xcall prefetch
- network interface plugin : adapt same nic with different ifindex</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.5-3" date="1749643200">- fix xcall analysis issues</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-1" date="1749816000">- add smc_acc.yaml check and some logs
- add net_hardirq_tune_data.h
- fux binary coredump</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-2" date="1750852800">- add realtime compile macro</changelog>
</package>
<package pkgid="0bc9cb1100b9c52953ba6fb409682321c4ac9c34fe2013ea211735ce2c503939" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v2.1.1" rel="3.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.5-1" date="1748606400">- fix issues</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.0.5-2" date="1749470400">- improve some output format
- add xcall prefetch
- network interface plugin : adapt same nic with different ifindex</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.5-3" date="1749643200">- fix xcall analysis issues</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-1" date="1749816000">- add smc_acc.yaml check and some logs
- add net_hardirq_tune_data.h
- fux binary coredump</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-2" date="1750852800">- add realtime compile macro</changelog>
  <changelog author="yeyiyang &lt;yeyiyang3@h-partners.com&gt; -v2.0.6-3" date="1753272000">- add adapt dynamicsmt analysis if smt is not enable
- fix code check
- add trace log and change level intf and delete logger
- smc-d analysis fix inconsistency in the display of zero connection</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.1.0-1" date="1754913600">- remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
- support reload log-level online
- adapt analysis on riscv
- add load base sched instance</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.1.1-1" date="1757332800">- add hwprobe_analysis for RISC-V
- fix error logger info
- support kernel cluster scheduler
- adapt for kylin-v10-sp3
- realtime tune add new tuning item
- fix smc insmod err
- realtime tune skip grubby update
- add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
- add high_load value check</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; -v2.1.1-2" date="1758283200">- fix: numa_sched_tune adapt to kernel 6.6 sched feature path.</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.1.1-3" date="1760961600">- remove rpath.</changelog>
</package>
<package pkgid="7023f08a00cec0a6ff23501f9d9dff7c859349db924016d9a9a850f718cc0079" name="oeAware-manager" arch="src">
  <version epoch="0" ver="v2.1.2" rel="2.oe2203sp4"/>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-1" date="1749816000">- add smc_acc.yaml check and some logs
- add net_hardirq_tune_data.h
- fux binary coredump</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.0.6-2" date="1750852800">- add realtime compile macro</changelog>
  <changelog author="yeyiyang &lt;yeyiyang3@h-partners.com&gt; -v2.0.6-3" date="1753272000">- add adapt dynamicsmt analysis if smt is not enable
- fix code check
- add trace log and change level intf and delete logger
- smc-d analysis fix inconsistency in the display of zero connection</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.1.0-1" date="1754913600">- remove the logger.h interface and add TRACE interface, increase safe_queue wait time to 5s
- support reload log-level online
- adapt analysis on riscv
- add load base sched instance</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.1.1-1" date="1757332800">- add hwprobe_analysis for RISC-V
- fix error logger info
- support kernel cluster scheduler
- adapt for kylin-v10-sp3
- realtime tune add new tuning item
- fix smc insmod err
- realtime tune skip grubby update
- add hwprobe_tune hwprobe_ext_zbb_tune for RISC-V
- add high_load value check</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; -v2.1.1-2" date="1758283200">- fix: numa_sched_tune adapt to kernel 6.6 sched feature path.</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.1.1-3" date="1760961600">- remove rpath.</changelog>
  <changelog author="fly_1997 &lt;flylove7@outlook.com&gt; -v2.1.1-4" date="1763121600">- update numafast version.</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.1.2-1" date="1770120000">- add docker cluster affinity
- add soft domain feture</changelog>
  <changelog author="LHesperus &lt;liuchanggeng@huawei.com&gt; -v2.1.2-2" date="1772020800">- fix thread collect bug</changelog>
</package>
<package pkgid="8802bf2cdf80688665e76d12fea27158f3bd3f6931c16c4c518997616041f8d2" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.6" rel="1.oe2203sp4"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.3-2" date="1667995200">- Fix code issue and update log print in network
- Cancel deleting the IP that automatically configured on the server
- Fix cdrom bug</changelog>
  <changelog author="liqiang &lt;liqiang332@h-partner.com&gt; - 1.1.3-3" date="1670932800">- Fix libswsds.so not stripped
- Fix the value of kernel.src obtained by the kabi test case is incorrect
- Add board infomation and fix memory bug
- Fix the block size fails to be obtained during the NVME test
- Judge whether to support kabi testing by architecture
- Update readme and dev_design</changelog>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-3" date="1717502400">- Resolve the issue of different kernel source download locations in kabi test case
- Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
- Add the way for manually adding kabiwhitelist file
- For custom vendors, refer to the method of obtaining openEuler os information
- Supports custom vendor</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-4" date="1717761600">- Resolve the issue of executing Vulkan even if DISPLAY is not defined in the env</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-0" date="1727179200">- Add new test suite srpm and intel
- Add virtual branch of test suite
- Add support for Kylin and UOS
- Bugfix</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.6-1" date="1728993600">- Fix bug that the raid test cannot identify PM8222-SHBA</changelog>
</package>
<package pkgid="d073d6e73888808be6b3f03e70c6139fe4c252744371370f187fc18ec5197b8f" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.6" rel="3.oe2203sp4"/>
  <changelog author="cuixucui &lt;cuixucui1@h-partner.com&gt; - 1.1.4-0" date="1677585600">- Add board information in the test report
- Add spdk test case
- Add dpdk test case
- Update pci.ids file</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-3" date="1717502400">- Resolve the issue of different kernel source download locations in kabi test case
- Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
- Add the way for manually adding kabiwhitelist file
- For custom vendors, refer to the method of obtaining openEuler os information
- Supports custom vendor</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-4" date="1717761600">- Resolve the issue of executing Vulkan even if DISPLAY is not defined in the env</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-0" date="1727179200">- Add new test suite srpm and intel
- Add virtual branch of test suite
- Add support for Kylin and UOS
- Bugfix</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.6-1" date="1728993600">- Fix bug that the raid test cannot identify PM8222-SHBA</changelog>
  <changelog author="xieguangyao00 &lt;xieguangyao@inspur.com&gt; - 1.1.6-2" date="1729252800">- Fix the bug that dpdk test terminates when accessing numa node hugepages directory</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-3" date="1730203200">- Update the pci.ids file
- Remove unused variable in cdrom test suite
- Update test_guide doc
- Unify the location for downloading kernel source RPMs
- Optimize kabiwhitelist and system test</changelog>
</package>
<package pkgid="094ba28f2eefbe92735df6502db96063f0b019aa5715a602c0d9129edf3a6358" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.6" rel="4.oe2203sp4"/>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-0" date="1698148800">- Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
- Add modifications to Kylinsec with oec-hardware
- Add support for Loongson and SW architectures
- Bugfix</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-3" date="1717502400">- Resolve the issue of different kernel source download locations in kabi test case
- Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
- Add the way for manually adding kabiwhitelist file
- For custom vendors, refer to the method of obtaining openEuler os information
- Supports custom vendor</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-4" date="1717761600">- Resolve the issue of executing Vulkan even if DISPLAY is not defined in the env</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-0" date="1727179200">- Add new test suite srpm and intel
- Add virtual branch of test suite
- Add support for Kylin and UOS
- Bugfix</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.6-1" date="1728993600">- Fix bug that the raid test cannot identify PM8222-SHBA</changelog>
  <changelog author="xieguangyao00 &lt;xieguangyao@inspur.com&gt; - 1.1.6-2" date="1729252800">- Fix the bug that dpdk test terminates when accessing numa node hugepages directory</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-3" date="1730203200">- Update the pci.ids file
- Remove unused variable in cdrom test suite
- Update test_guide doc
- Unify the location for downloading kernel source RPMs
- Optimize kabiwhitelist and system test</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-4" date="1731499200">- Kdump test suite bugfix</changelog>
</package>
<package pkgid="16181c05e6fa7425a68db8ba867471abe10b8407db0c7aabe483e3cc4e1215ff" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.7" rel="0.oe2203sp4"/>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259200">- Add virtual cases
- Resolve IB startup IB_Read_BW service failure issue
- Delete redundant references
- Resolve incorrect type in vgpu result data
- Resolve the issue of getting the kernel source rpm</changelog>
  <changelog author="cuixucui &lt;cuixucui@h-partner.com&gt; - 1.1.5-1" date="1701259201">- Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
- Add fio test cases:read,write,randread,randwrite
- Solve the nvme line break issue in the command line interface
- Fix compilation errors in the make command
- Add Vulkan testcase for nvida GPU
- Resolve the issue of oech server startup failure on version 24.03</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-3" date="1717502400">- Resolve the issue of different kernel source download locations in kabi test case
- Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
- Add the way for manually adding kabiwhitelist file
- For custom vendors, refer to the method of obtaining openEuler os information
- Supports custom vendor</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-4" date="1717761600">- Resolve the issue of executing Vulkan even if DISPLAY is not defined in the env</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-0" date="1727179200">- Add new test suite srpm and intel
- Add virtual branch of test suite
- Add support for Kylin and UOS
- Bugfix</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.6-1" date="1728993600">- Fix bug that the raid test cannot identify PM8222-SHBA</changelog>
  <changelog author="xieguangyao00 &lt;xieguangyao@inspur.com&gt; - 1.1.6-2" date="1729252800">- Fix the bug that dpdk test terminates when accessing numa node hugepages directory</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-3" date="1730203200">- Update the pci.ids file
- Remove unused variable in cdrom test suite
- Update test_guide doc
- Unify the location for downloading kernel source RPMs
- Optimize kabiwhitelist and system test</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-4" date="1731499200">- Kdump test suite bugfix</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.7-0" date="1736164800">- Add kernel support for openEuler 24.03 LTS SP1
- GPU test suite optimize</changelog>
</package>
<package pkgid="1d5265bfe140fc283bb66b9a152eff80e9d47585d0ab0e003d906fff55e2e7b7" name="oec-hardware" arch="src">
  <version epoch="0" ver="1.1.8" rel="1.oe2203sp4"/>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-3" date="1717502400">- Resolve the issue of different kernel source download locations in kabi test case
- Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
- Add the way for manually adding kabiwhitelist file
- For custom vendors, refer to the method of obtaining openEuler os information
- Supports custom vendor</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.5-4" date="1717761600">- Resolve the issue of executing Vulkan even if DISPLAY is not defined in the env</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-0" date="1727179200">- Add new test suite srpm and intel
- Add virtual branch of test suite
- Add support for Kylin and UOS
- Bugfix</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.6-1" date="1728993600">- Fix bug that the raid test cannot identify PM8222-SHBA</changelog>
  <changelog author="xieguangyao00 &lt;xieguangyao@inspur.com&gt; - 1.1.6-2" date="1729252800">- Fix the bug that dpdk test terminates when accessing numa node hugepages directory</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-3" date="1730203200">- Update the pci.ids file
- Remove unused variable in cdrom test suite
- Update test_guide doc
- Unify the location for downloading kernel source RPMs
- Optimize kabiwhitelist and system test</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.6-4" date="1731499200">- Kdump test suite bugfix</changelog>
  <changelog author="wangshuai &lt;wangshuai321@huawei.com&gt; - 1.1.7-0" date="1736164800">- Add kernel support for openEuler 24.03 LTS SP1
- GPU test suite optimize</changelog>
  <changelog author="xiaochn &lt;xiaochuannan@inspur.com&gt; - 1.1.7-1" date="1747310400">- Add KylinSec 3.5.3 support
- Fix the problem of disk size calculation
- Fix bcm57414 nic test failed issue
- Change the format of date
- Fixed a bug where a non-existent logger level was used
- Update README.md
- Fix vgpu testing issue</changelog>
  <changelog author="WANG-shine &lt;wangshuai321@huawei.com&gt; - 1.1.8-1" date="1750939200">- Add kernel support of openeEuler 24.03 LTS SP2</changelog>
</package>
<package pkgid="67abf5db64e77fd721cf96810555e4de052b11963acc2c70bbc10af579a1f8bb" name="ongres-scram" arch="src">
  <version epoch="0" ver="2.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1-2" date="1758888000">- Fix CVE-2025-59432</changelog>
</package>
<package pkgid="fce78e19081673cdae72e03d2999e11b7e371ea8c115ce2a3fc544ea297b84b4" name="openEuler-repos" arch="src">
  <version epoch="0" ver="1.0" rel="3.7.oe2203sp4"/>
  <changelog author="wangchong &lt;wangchong56@huawei.com&gt; - 1.0-3.6" date="1716552000">- Type:NA
- ID:NA
- SUG:NA
- DESC:modify repo</changelog>
  <changelog author="fuyong &lt;fuyong29@h-partners.com&gt; - 1.0-3.7" date="1721736000">- Type:NA
- ID:NA
- SUG:NA
- DESC:update baseurl</changelog>
</package>
<package pkgid="9e1a0493c4f176eb1506992f6cc058fbb315fd50fe28f1534c61b00dbe622228" name="opencc" arch="src">
  <version epoch="0" ver="1.1.3" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.1.3-3" date="1768824000">- Fix CVE-2025-15536</changelog>
</package>
<package pkgid="6c85187afcad87b4564b5e392627aba2e26af5677b4c1eb53d6c2472a729aa5e" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.26.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.22.0-2" date="1706788800">- Fix CVE-2024-0914</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.24.0-1" date="1734955200">- Upgrade version to 3.24.0
  * Add support for FIPS-session mode
  * Updates to harden against RSA timing attacks
  * Add option to show the master key verification patterns of secure keys
  * Add support for exporting a key or certificate as URI-PEM file
  * Performance improvements for attribute retrieval
  * Add support for SHA-2 mechanisms
  * Experimental support for IBM Dilithium via OpenSSL OQS provider
  * Support live guest relocation for protected key (PKEY) operations
  * Add support for CKA_ALWAYS_AUTHENTICATE
  * Add support for CKD_*_SP800 KDFs for ECDH
  * Add support for SHA based key derivation mechanisms
  * Add support for PKCS#11 v3.0 SHA3 mechanisms
  * Add support for building Opencryptoki on the IBM AIX platform
  * Add support for the CCA token on non-IBM Z platforms (x86_64, ppc64)
  * Add support for protecting tokens with a token specific user group
  * Add support for combined CKA_EXTRACTABLE and CKA_IBM_PROTKEY_EXTRACTABLE
  * Add support for Koblitz curve secp256k1. Requires CCA v7.2 or later</changelog>
  <changelog author="zhang_wenyu &lt;zhang_wenyu@hoperun.com&gt; - 3.25.0-1" date="1759147200">- Upgrade version to 3.25.0
  * Add support for PKCS#11 v3.0 SHAKE key derivation
  * Add support for PKCS#11 v3.0 SHA3 and SHA3-HMAC mechanisms
  * Add support for PKCS#11 v3.0 SHA3 mechanisms and MGFs for RSA-OAEP
  * Add support for PKCS#11 v3.0 SHA3 variants of RSA-PKCS and ECDSA mechanisms
  * Add support for CCA AES CIPHER secure key types
  * Add support for the CKM_ECDH1_DERIVE mechanism
  * Add support for the CKM_AES_KEY_WRAP[_*] mechanisms
  * Add support for the CKM_RSA_AES_KEY_WRAP mechanism
  * Add support for the CKM_ECDH_AES_KEY_WRAP mechanism
  * Add a tool for import and exporting PKCS#11 keys to a KMIP server
  * Add support for opaque secure key blob import via C_CreateObject
  * Add support for key wrapping with AES-GCM
  * Add support for newer CCA versions on s390x and non-s390x platforms
  * Add support for CKM_AES_GCM (single-part operations only)</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.25.0-2" date="1768478400">- Fix CVE-2026-22791</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.26.0-1" date="1769515200">- Update to 3.26.0 and fix CVE-2026-23893</changelog>
</package>
<package pkgid="cbf029803b6bd1c76878bd4e7e66018c792b5b63f59109e0489987d9ac99a431" name="opengauss" arch="src">
  <version epoch="0" ver="6.0.0" rel="24.oe2203sp4"/>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 5.0.1-15" date="1718884800">- Fix bugs: Initialize Remove Password</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-16" date="1731585600">- Update version to 6.0.0</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-17" date="1733140800">- Adaptation upgrade</changelog>
  <changelog author="xiaofan &lt;xiaofan@iscas.ac.cn&gt; - 6.0.0-18" date="1733400000">- Support riscv64</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-19" date="1733832000">- Fix bugs: #IBAAVY</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-20" date="1734091200">- Fix bugs: #IBB3VO</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-21" date="1734177600">- Fix different versions of autoconf and resolve exceptions</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-22" date="1734177601">- Fix bugs: when upgrading, the new version cannot be lower than the old version</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-23" date="1735387200">- Fix bugs: upgrade failed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 6.0.0-24" date="1741780800">- fix build with cmake 4.0</changelog>
</package>
<package pkgid="ff0a8dcf298bbec634a8c9c4cef370721ca377aac88c3c418ffca7aa56954c4d" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="3.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.5.0-1" date="1667649600">- update 2.5.0</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-2" date="1677585600">- Remove useless buildrequires</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
</package>
<package pkgid="c9f80cf1089be63c3b16e785747a10fb84ba1f719d20db978807f6257e561449" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.5.0-1" date="1667649600">- update 2.5.0</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-2" date="1677585600">- Remove useless buildrequires</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-4" date="1730203200">- fix CVE-2021-3575</changelog>
</package>
<package pkgid="aa6b3633aa738fd913e5432b4bf7821cd2530f979ff685df4a3a3ada65a7b3c6" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="5.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-2" date="1677585600">- Remove useless buildrequires</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-4" date="1730203200">- fix CVE-2021-3575</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-5" date="1736251200">- fix CVE-2024-56826</changelog>
</package>
<package pkgid="5b6cfa3f3e202210173526f6dd1416da973a70a3e15d9ab084b96f12b24e73fe" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-2" date="1677585600">- Remove useless buildrequires</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-4" date="1730203200">- fix CVE-2021-3575</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-5" date="1736251200">- fix CVE-2024-56826</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2.5.0-6" date="1736251201">- Type: CVE
- CVE: CVE-2024-56827
- SUG: NA
- DESC: fix CVE-2024-56827</changelog>
</package>
<package pkgid="27272978366edee36aa841a537db0ce5bdfd0cbdc47d7a5f0184fe0072ddfffd" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.5.0" rel="7.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.5.0-3" date="1720699200">- Type:cves
- ID:CVE-2023-39328
- SUG:NA
- DESC:fix CVE-2023-39328</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-4" date="1730203200">- fix CVE-2021-3575</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-5" date="1736251200">- fix CVE-2024-56826</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2.5.0-6" date="1736251201">- Type: CVE
- CVE: CVE-2024-56827
- SUG: NA
- DESC: fix CVE-2024-56827</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.5.0-7" date="1754654400">- fix CVE-2025-50952</changelog>
</package>
<package pkgid="3efa5320a55c412d36c6432f6f2e4464a5b0a3a38341d67b571b4200d469e8d2" name="openldap" arch="src">
  <version epoch="0" ver="2.6.0" rel="10.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-5" date="1677585600">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add options for cross build</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 2.6.0-6" date="1686139200">- Type:cve
- CVE:cve-2023-2953
- SUG:restart
- DESC:fix cve-2023-2953</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 2.6.0-7" date="1690200000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix empty soft link</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 2.6.0-8" date="1704888000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:backport patch</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.0-9" date="1718366400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix license</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.0-10" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="183dc426c6684bc7d365df8e54978b0f76eccc0673fe9b897d3a05cf82f080d2" name="openldap" arch="src">
  <version epoch="0" ver="2.6.0" rel="11.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.0-9" date="1718366400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix license</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.0-10" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 2.6.0-11" date="1770724800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix CVE-2026-22185</changelog>
</package>
<package pkgid="037a6bfbd4e250ca03568a598b63c21f9e7378198a7d23fc5e35b9acb2e69bfb" name="opensc" arch="src">
  <version epoch="0" ver="0.21.0" rel="11.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 0.21.0-7" date="1695038400">- fix CVE-2023-2977</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 0.21.0-8" date="1698062400">- fix CVE-2023-40660</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 0.21.0-9" date="1699444800">- fix CVE-2023-40661</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 0.21.0-10" date="1719835200">- fix CVE-2023-5992</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.21.0-11" date="1728302400">- fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
  CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620</changelog>
</package>
<package pkgid="587dd7fda58617abc420bf3096d879d3b65481a20a8898e7504061c1bacededa" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="31.oe2203sp4"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-22" date="1686139200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix misspelling</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
</package>
<package pkgid="d106d95b4a654df8aaa774e18fe8490f2974008e10b42c67487c1bb672595487" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="32.oe2203sp4"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-23" date="1690459200">- Type:CVE
- CVE:CVE-2023-38408
- SUG:NA
- DESC:fix CVE-2023-38408</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-24" date="1692100800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:In channel_request_remote_forwarding the parameters</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
</package>
<package pkgid="64f33508b1d685d5864c41ae1d316ebbc8eeb02993fd1b5caafdd1707146ec9f" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="34.oe2203sp4"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-25" date="1703332800">- Type:CVE
- CVE:CVE-2023-48795,CVE-2023-51385
- SUG:NA
- DESC:fix CVE-2023-48795 and CVE-2023-51385</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-33" date="1733400000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Set OPENSSL_BIN from OpenSSL directory</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-34" date="1739880000">- Type:CVE
- CVE:CVE-2025-26465
- SUG:NA
- DESC:Fix CVE-2025-26465</changelog>
</package>
<package pkgid="9d7f11e043e307b7b784c0cbe8128b43128c2751cce7a6093e6927e3d4f0247e" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="35.oe2203sp4"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-26" date="1704888000">- Type:CVE
- CVE:CVE-2023-48795
- SUG:NA
- DESC:fix CVE-2023-48795 by using the other patch instead</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-33" date="1733400000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Set OPENSSL_BIN from OpenSSL directory</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-34" date="1739880000">- Type:CVE
- CVE:CVE-2025-26465
- SUG:NA
- DESC:Fix CVE-2025-26465</changelog>
  <changelog author="hdliu&lt;hdliu@linx-info.com&gt; - 8.8p1-35" date="1744632000">- Type:CVE
- CVE:CVE-2025-32728
- SUG:NA
- DESC:Fix CVE-2025-32728</changelog>
</package>
<package pkgid="03705163e24fda8cf2ec5348518894682a777f8a72b5c2b410e882f9920a6079" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="36.oe2203sp4"/>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-27" date="1706702400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:move pam_ssh_agent_auth man page to sub-package</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-33" date="1733400000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Set OPENSSL_BIN from OpenSSL directory</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-34" date="1739880000">- Type:CVE
- CVE:CVE-2025-26465
- SUG:NA
- DESC:Fix CVE-2025-26465</changelog>
  <changelog author="hdliu&lt;hdliu@linx-info.com&gt; - 8.8p1-35" date="1744632000">- Type:CVE
- CVE:CVE-2025-32728
- SUG:NA
- DESC:Fix CVE-2025-32728</changelog>
  <changelog author="zhangbinqin&lt;zhangbinqin@h-partners.com&gt; - 8.8p1-36" date="1754049600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the missing member of the struct Authmethod method_gsskeyex</changelog>
</package>
<package pkgid="fa455b48ba04049a16a249686f6e4a75bba73312f5e3a497daabe4d86ecc6332" name="openssh" arch="src">
  <version epoch="0" ver="8.8p1" rel="37.oe2203sp4"/>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-28" date="1706875200">- Type:bugfix
- CVE:
- SUG:NA
- DESC: fix memory leak in kex2 exchange function</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-29" date="1710417600">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix setting the number of authentication attempts failed</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-30" date="1714392000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Disable SElinux when make tests</changelog>
  <changelog author="renmingshuai&lt;renmingshuai@huawei.com&gt; - 8.8p1-31" date="1719921600">- Type:CVE
- CVE:CVE-2024-6387
- SUG:NA
- DESC:Fix CVE-2024-6387</changelog>
  <changelog author="songjuntao&lt;songjuntao@kylinos.cn&gt; - 8.8p1-32" date="1720612800">- Type:CVE
- CVE:CVE-2024-6409
- SUG:NA
- DESC:Fix CVE-2024-6409</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-33" date="1733400000">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Set OPENSSL_BIN from OpenSSL directory</changelog>
  <changelog author="bitianyuan&lt;bitianyuan@huawei.com&gt; - 8.8p1-34" date="1739880000">- Type:CVE
- CVE:CVE-2025-26465
- SUG:NA
- DESC:Fix CVE-2025-26465</changelog>
  <changelog author="hdliu&lt;hdliu@linx-info.com&gt; - 8.8p1-35" date="1744632000">- Type:CVE
- CVE:CVE-2025-32728
- SUG:NA
- DESC:Fix CVE-2025-32728</changelog>
  <changelog author="zhangbinqin&lt;zhangbinqin@h-partners.com&gt; - 8.8p1-36" date="1754049600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the missing member of the struct Authmethod method_gsskeyex</changelog>
  <changelog author="zhangbinqin&lt;zhangbinqin@h-partners.com&gt; - 8.8p1-37" date="1761307200">- Type:CVE
- CVE:CVE-2025-61984 CVE-2025-61985
- SUG:NA
- DESC:fix CVE-2025-61984 CVE-2025-61985</changelog>
</package>
<package pkgid="8be6477d4c51bf3aaec54e03cfb75e2715a7562358698334b990c06c25e7de20" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1wa" rel="10.oe2203sp4"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-1" date="1700049600">- upgrade to 1.1.1wa</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-2" date="1703246400">- Fix OPENSSL_VERSION_NUMBER number problem</changelog>
  <changelog author="lixiao&lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-3" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-4" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1wa-5" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1wa-6" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-7" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-8" date="1719662400">- fix CVE-2024-5535</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1:1.1.1wa-9" date="1728648000">- fix openssl asan error</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1wa-10" date="1730116800">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="5c3103f08094949cfc426356c493323426d71e14d2f1a2f7fd19f09133888041" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1wa" rel="13.oe2203sp4"/>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-4" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1wa-5" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1wa-6" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-7" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-8" date="1719662400">- fix CVE-2024-5535</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1:1.1.1wa-9" date="1728648000">- fix openssl asan error</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1wa-10" date="1730116800">- fix CVE-2024-9143</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-11" date="1738756800">- fix CVE-2024-13176</changelog>
  <changelog author="AlanSong-oc &lt;AlanSong-oc@zhaoxin.com&gt; - 1:1.1.1wa-12" date="1757073600">- add support for Zhaoxin GMI RNG/SM2/3/4 instruction</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 1:1.1.1wa-13" date="1759320000">- fix CVE-2025-9230</changelog>
</package>
<package pkgid="72c4cee2911143ff0b18513f5587ac1798d80e174044fad08769db7f00c11a3c" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1wa" rel="15.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1wa-6" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-7" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-8" date="1719662400">- fix CVE-2024-5535</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1:1.1.1wa-9" date="1728648000">- fix openssl asan error</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:1.1.1wa-10" date="1730116800">- fix CVE-2024-9143</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-11" date="1738756800">- fix CVE-2024-13176</changelog>
  <changelog author="AlanSong-oc &lt;AlanSong-oc@zhaoxin.com&gt; - 1:1.1.1wa-12" date="1757073600">- add support for Zhaoxin GMI RNG/SM2/3/4 instruction</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 1:1.1.1wa-13" date="1759320000">- fix CVE-2025-9230</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 1:1.1.1wa-14" date="1764158400">- add loongarch64 and sw_64 support</changelog>
  <changelog author="fly_fzc &lt;2385803914@qq.com&gt; - 1:1.1.1wa-15" date="1770292800">- fix CVE-2025-68160 CVE-2026-22796 CVE-2026-22795 CVE-2025-69418 CVE-2025-69421 CVE-2025-69419 CVE-2025-69420</changelog>
</package>
<package pkgid="2d0251e07d4ac586c1897e6e3a89cadf812ada33113180019fd047110c5018af" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1wa" rel="8.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.1.1m-26" date="1695384000">- Backport some upstream patches</changelog>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-27" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-1" date="1700049600">- upgrade to 1.1.1wa</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-2" date="1703246400">- Fix OPENSSL_VERSION_NUMBER number problem</changelog>
  <changelog author="lixiao&lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-3" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-4" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1wa-5" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1wa-6" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-7" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-8" date="1719662400">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="04d20bf97148f895284d353051fef2960d56b86f26816983f8ca7045a0b87b5d" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1wa" rel="9.oe2203sp4"/>
  <changelog author="zhujianwei &lt;zhujianwei7@huawei.com&gt; - 1:1.1.1m-27" date="1699963200">- fix CVE-2023-5678</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-1" date="1700049600">- upgrade to 1.1.1wa</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-2" date="1703246400">- Fix OPENSSL_VERSION_NUMBER number problem</changelog>
  <changelog author="lixiao&lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-3" date="1706616000">- Fix CVE-2024-0727 PKCS12 Decoding crashes</changelog>
  <changelog author="lixiao &lt;lixiao57@huawei.com&gt; - 1:1.1.1wa-4" date="1707134400">- add openssl-SMx-perl rpm provides</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 1:1.1.1wa-5" date="1711454400">- fix some bugs</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1:1.1.1wa-6" date="1713355200">- fix CVE-2024-2511</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 1:1.1.1wa-7" date="1717416000">- fix CVE-2024-4741</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.comi&gt; - 1:1.1.1wa-8" date="1719662400">- fix CVE-2024-5535</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1:1.1.1wa-9" date="1728648000">- fix openssl asan error</changelog>
</package>
<package pkgid="f59e3b122854bc5687a2949c36744b13c2b051d9ca34787a6973d94b665dba5e" name="openvpn" arch="src">
  <version epoch="0" ver="2.5.5" rel="3.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.5.5-3" date="1720526400">- Fix CVE-2024-28882</changelog>
</package>
<package pkgid="e8eb4a66b565797970e23e19156e3785d351ab657411c5890c491ec8854cbbd8" name="openvpn" arch="src">
  <version epoch="0" ver="2.5.5" rel="4.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.5.5-3" date="1720526400">- Fix CVE-2024-28882</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.5.5-4" date="1721476800">- Fix CVE-2024-5594</changelog>
</package>
<package pkgid="6a406912a384b5efe2d5543dbf0210aaa364d33692f8ffd730eaf80f934f6059" name="orc" arch="src">
  <version epoch="0" ver="0.4.32" rel="3.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 0.4.32-2" date="1666699200">- Rebuild for next release</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 0.4.32-3" date="1722513600">- fix CVE-2024-40897</changelog>
</package>
<package pkgid="1451df3ffb6d17308ad0aaa3a32dda0db94cb84c357a90f0b518e2b979f482a9" name="osc" arch="src">
  <version epoch="0" ver="0.177.0" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.177.0-2" date="1725969600">- Fix CVE-2024-22034</changelog>
</package>
<package pkgid="585ee5d9c1634e6fb021fae7313ad1e707917d98f8e6b1aac183c07914c40a87" name="p7zip" arch="src">
  <version epoch="0" ver="16.02" rel="6.oe2203sp4"/>
  <changelog author="chenchen &lt;chen_aka_jan@163.com&gt; - 16.02-5" date="1686052800">- add PIE compiler options</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 16.02-6" date="1725105600">- use correct build flags</changelog>
</package>
<package pkgid="912b977c1fe22c50db19b7db3dc89f8d6e2bd0398ef1b89bd08b8e99fc2b2ed5" name="p7zip" arch="src">
  <version epoch="0" ver="16.02" rel="7.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 16.02-6" date="1725105600">- use correct build flags</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 16.02-7" date="1751630400">- Fix CVE-2023-52168 and CVE-2023-52169</changelog>
</package>
<package pkgid="c217820e8b61106f793b3d0b10b3ba54f0e5c6d01ed84ac40461acb886d632e7" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="12.oe2203sp4"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-8" date="1715256000">- remove redundant /var/log/tallylog file</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-9" date="1732795200">- fix CVE-2024-10963</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-10" date="1734436800">- fix CVE-2024-10041</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-11" date="1735300800">- fix tst-pam_unix5 test case failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-12" date="1742817600">- backport patch libpam use close_range() to close file descriptors</changelog>
</package>
<package pkgid="64ac6522fd632fba6a93d965e52564e7de850fa35bfc699b7546b13ca87d5926" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="13.oe2203sp4"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-8" date="1715256000">- remove redundant /var/log/tallylog file</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-9" date="1732795200">- fix CVE-2024-10963</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-10" date="1734436800">- fix CVE-2024-10041</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-11" date="1735300800">- fix tst-pam_unix5 test case failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-12" date="1742817600">- backport patch libpam use close_range() to close file descriptors</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-13" date="1750939200">- fix CVE-2025-6020</changelog>
</package>
<package pkgid="21d6bc170a9db0b4caaee9e36baf243c26b7bfb50579ef09c8b18b8c219c7916" name="pam" arch="src">
  <version epoch="0" ver="1.5.2" rel="9.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-4" date="1670846400">- Change Chinese translation</changelog>
  <changelog author="wangyu &lt;wangyu283@huawei.com&gt; - 1.5.2-6" date="1678363200">- revert: bugfix with cannot open database file</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.5.2-7" date="1706097600">- fix CVE-2024-22365</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.5.2-8" date="1715256000">- remove redundant /var/log/tallylog file</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 1.5.2-9" date="1732795200">- fix CVE-2024-10963</changelog>
</package>
<package pkgid="ca67d679bba7f111fc8295c6093e791ac672325aec04cc60a3a6529ae9eb78ac" name="pcp" arch="src">
  <version epoch="0" ver="5.3.7" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-4" date="1711713600">- Fix CVE-2024-3019</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-5" date="1718280000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-6" date="1728907200">- Fix CVE-2024-45769,CVE-2024-45770
- Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
- Guard against symlink attacks in pmpost program (RHEL-57810)
- Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
- Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
- Fix invalid memory access in pmfind utility (BZ 2135314)</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.3.7-7" date="1742212800">- Improve farm systemd services</changelog>
</package>
<package pkgid="5ebe7653545a8a6535cfc65e3f5035af0546837e6e7a5a404c0e8236dbe81f78" name="perftest" arch="src">
  <version epoch="0" ver="4.5" rel="12.oe2203sp4"/>
  <changelog author="Xiaoqian Lv &lt;xiaoqian@nj.iscas.ac.cn&gt; - 4.5-5" date="1688385600">- Type: enhancement
- ID: NA
- SUG: NA
- DESC: backport upstream 4.5-0.20 patches to support riscv64</changelog>
  <changelog author="Chengchang Tang &lt;tangchengchang@huawei.com&gt; - 4.5-6" date="1705665600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix missing required libs</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-7" date="1720440000">- Type: feature
- ID: NA
- SUG: NA
- DESC: support selecting congestion control algorithms</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-8" date="1720440001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix rx_depth check for XRC</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 4.5-9" date="1721649600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix build error due to automake update 1.17</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-10" date="1724241600">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add support for TD lock-free mode</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-11" date="1725278400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix failure in creating cq when create cq ex is not</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 4.5-12" date="1736769600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface</changelog>
</package>
<package pkgid="bd66f135eaabfcaecb18abb300b235a129fb375fc855240714bfbf1d99936a45" name="perftest" arch="src">
  <version epoch="0" ver="4.5" rel="15.oe2203sp4"/>
  <changelog author="Chengchang Tang &lt;tangchengchang@huawei.com&gt; - 4.5-6" date="1705665600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix missing required libs</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-7" date="1720440000">- Type: feature
- ID: NA
- SUG: NA
- DESC: support selecting congestion control algorithms</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-8" date="1720440001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix rx_depth check for XRC</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 4.5-9" date="1721649600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix build error due to automake update 1.17</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-10" date="1724241600">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add support for TD lock-free mode</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-11" date="1725278400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix failure in creating cq when create cq ex is not</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 4.5-12" date="1736769600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.5-13" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: drop useless guile build dependency</changelog>
  <changelog author="zhangshaoning &lt;zhangshaoning@uniontech.com&gt; - 4.5-14" date="1745236800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add sw_64 support</changelog>
  <changelog author="Junxian Huang &lt;huangjunxian6@hisilicon.com&gt; - 4.5-15" date="1749816000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches from mainline</changelog>
</package>
<package pkgid="d1798f87d2baf7e6a68bcf59839c707d407b61f1fcc4ef13d930e1ccea0f8943" name="perftest" arch="src">
  <version epoch="0" ver="4.5" rel="16.oe2203sp4"/>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-7" date="1720440000">- Type: feature
- ID: NA
- SUG: NA
- DESC: support selecting congestion control algorithms</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-8" date="1720440001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix rx_depth check for XRC</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 4.5-9" date="1721649600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix build error due to automake update 1.17</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-10" date="1724241600">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add support for TD lock-free mode</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 4.5-11" date="1725278400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix failure in creating cq when create cq ex is not</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 4.5-12" date="1736769600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.5-13" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: drop useless guile build dependency</changelog>
  <changelog author="zhangshaoning &lt;zhangshaoning@uniontech.com&gt; - 4.5-14" date="1745236800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add sw_64 support</changelog>
  <changelog author="Junxian Huang &lt;huangjunxian6@hisilicon.com&gt; - 4.5-15" date="1749816000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches from mainline</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 4.5-16" date="1764244800">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add shared memory to support multi-stream concurrency</changelog>
</package>
<package pkgid="fa3834e1c82d903ba83f35a7f4f3f0e0c88d1cf74537699c930b3ab0c086ef45" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="13.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; 4:5.34.0-7" date="1684152000">- fix CVE-2023-31484</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="zhangzikang &lt;zhangzikang@kylinos.cn&gt; - 4:5.34.0-10" date="1694174400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-perl-re.so-undefined-symbol-error</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-11" date="1702296000">- Fix CVE-2023-47038, CVE-2023-47100, CVE-2023-47039</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-12" date="1717502400">- fix test case failure caused by zlib</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4:5.34.0-13" date="1744632000">- fix CVE-2024-56406</changelog>
</package>
<package pkgid="ca44728d34aaf21a1ffeb3d1610226389896acb02f25873adeb6e261e1f775d4" name="perl" arch="src">
  <version epoch="4" ver="5.34.0" rel="14.oe2203sp4"/>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-8" date="1687780800">- fix CVE-2023-31486</changelog>
  <changelog author="yangmingtai &lt;yangmingtai@huawei.com&gt; - 4:5.34.0-9" date="1692964800">- fix CVE-2022-48522</changelog>
  <changelog author="zhangzikang &lt;zhangzikang@kylinos.cn&gt; - 4:5.34.0-10" date="1694174400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix-perl-re.so-undefined-symbol-error</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 4:5.34.0-11" date="1702296000">- Fix CVE-2023-47038, CVE-2023-47100, CVE-2023-47039</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-12" date="1717502400">- fix test case failure caused by zlib</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4:5.34.0-13" date="1744632000">- fix CVE-2024-56406</changelog>
  <changelog author="hongjinghao &lt;hongjinghao@huawei.com&gt; - 4:5.34.0-14" date="1749470400">- fix CVE-2025-40909</changelog>
</package>
<package pkgid="1cdd8e1fb5ca93e120faf04c0a38a0dd43cfc88d50a914973a1e0f81648deb1e" name="perl-Crypt-OpenSSL-RSA" arch="src">
  <version epoch="0" ver="0.35" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.35-1" date="1750507200">- update to 0.35</changelog>
</package>
<package pkgid="ce3b612118a81133573811628ce5b668105e65f4248aef80fd3e394e0ad38389" name="perl-FCGI" arch="src">
  <version epoch="1" ver="0.78" rel="13.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.78-13" date="1736856000">- Fix CVE-2012-6687
- Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.</changelog>
</package>
<package pkgid="3868895cba32715af155246e203dabfd921d247d76894b25f81670ab7d5bf55f" name="perl-FCGI" arch="src">
  <version epoch="1" ver="0.78" rel="14.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.78-13" date="1736856000">- Fix CVE-2012-6687
- Introduced environment variable-controlled polling timeouts 
  for the close and connection-keeping functions in the os_unix.c file.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.78-14" date="1747742400">- Fix CVE-2025-40907</changelog>
</package>
<package pkgid="f3be584dc61aff745cca8f85a13d79a2583cdb91b730c3f4e720b4c41d173723" name="perl-File-Find-Rule" arch="src">
  <version epoch="0" ver="0.34" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.34-3" date="1749211200">- fix CVE-2011-10007</changelog>
</package>
<package pkgid="a5f90e1603c6d39a24745c7b44527982c4d5b074011380df9969c1b5cc16c32e" name="perl-JSON-XS" arch="src">
  <version epoch="1" ver="4.03" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.03-2" date="1758283200">- fix CVE-2025-40928</changelog>
</package>
<package pkgid="8e533918b9a3ae4b0bf8681795d93b8cbe8e7619666ace04626e00795b20cb27" name="perl-Module-ScanDeps" arch="src">
  <version epoch="0" ver="1.31" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.31-2" date="1732536000">- Fix CVE-2024-10224</changelog>
</package>
<package pkgid="56249f87277cdc88f1c277fa284e1d7b1ce96e4e4be8d0f7fc55a277b1337768" name="perl-YAML-LibYAML" arch="src">
  <version epoch="1" ver="0.83" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:0.83-2" date="1749038400">- Fix CVE-2025-40908</changelog>
</package>
<package pkgid="1f948306512940790132f6e21a085f649e3f2f94d53bcc52b3160caf43a14d74" name="perl-local-lib" arch="src">
  <version epoch="0" ver="2.000029" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.000029-2" date="1761393600">- fix csh support</changelog>
</package>
<package pkgid="f729c673c32d6c98a897da1edb0a872c1051961f104ead61810e9bfd15b73916" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="10.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 8.0.30-2" date="1699358400">- disable opcache.huge_code_pages on x86_64</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-7" date="1732363200">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-8" date="1732795200">- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-9" date="1741953600">- Fix CVE-2025-1217, CVE-2025-1734, CVE-2025-1861, CVE-2025-1736, CVE-2025-1219</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-10" date="1751457600">- fix CVE-2025-1220, CVE-2025-6491, CVE-2025-1735</changelog>
</package>
<package pkgid="111385de9fde1a0606f9ffb05597d6d2c3dccb3a59b13ba7304f33fd0d19ac75" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="11.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-7" date="1732363200">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-8" date="1732795200">- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-9" date="1741953600">- Fix CVE-2025-1217, CVE-2025-1734, CVE-2025-1861, CVE-2025-1736, CVE-2025-1219</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-10" date="1751457600">- fix CVE-2025-1220, CVE-2025-6491, CVE-2025-1735</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-11" date="1766145600">- Fix Null byte termination in dns_get_record()
  GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
  CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
  CVE-2025-14177</changelog>
</package>
<package pkgid="2ff28ec0224b8c90d3213c387c248fb1a200e63409bd128e8504259b3973188e" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="6.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.26-1" date="1669291200">- New version 8.0.26</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.29-1" date="1686830400">- update to 8.0.29 to Fixed bug GHSA-76gg-c692-v2mw</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 8.0.30-2" date="1699358400">- disable opcache.huge_code_pages on x86_64</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
</package>
<package pkgid="2eea232a3dece2d5171fd529f44647d8d668109ae6d1b03d95dbafcb0cff26c4" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="7.oe2203sp4"/>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.27-1" date="1673870400">- New version 8.0.27
- Fix CVE-2022-31631</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.29-1" date="1686830400">- update to 8.0.29 to Fixed bug GHSA-76gg-c692-v2mw</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 8.0.30-2" date="1699358400">- disable opcache.huge_code_pages on x86_64</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-7" date="1732363200">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
</package>
<package pkgid="ea74284d107e061ed9bbd9f45951c833e362f64d31a7444367b56ae8792a5790" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="8.oe2203sp4"/>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.28-1" date="1676980800">- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
- update to 8.0.28</changelog>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.29-1" date="1686830400">- update to 8.0.29 to Fixed bug GHSA-76gg-c692-v2mw</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 8.0.30-2" date="1699358400">- disable opcache.huge_code_pages on x86_64</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-7" date="1732363200">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-8" date="1732795200">- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929</changelog>
</package>
<package pkgid="8939f966504d857a4381219e2a3a26e0b0308839b8924d9ed63c5fd0461e065f" name="php" arch="src">
  <version epoch="0" ver="8.0.30" rel="9.oe2203sp4"/>
  <changelog author="Dillon Chen &lt;dillon.chen@gmail.com&gt; - 8.0.29-1" date="1686830400">- update to 8.0.29 to Fixed bug GHSA-76gg-c692-v2mw</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-1" date="1691150400">- CVE-2023-3823, CVE-2023-3824
- update to 8.0.30</changelog>
  <changelog author="beta &lt;beta@yfqm.date&gt; - 8.0.30-2" date="1699358400">- disable opcache.huge_code_pages on x86_64</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-3" date="1712923200">- fix CVE-2024-2756, CVE-2024-3096</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-4" date="1717761600">- fix CVE-2024-5458</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-5" date="1718193600">- Update licenses declaration</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-6" date="1727438400">- fix CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-9026</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-7" date="1732363200">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-8" date="1732795200">- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 8.0.30-9" date="1741953600">- Fix CVE-2025-1217, CVE-2025-1734, CVE-2025-1861, CVE-2025-1736, CVE-2025-1219</changelog>
</package>
<package pkgid="a34b075043b2f4e45279bba94518b3476f7f3d508ea884f56e728e95bbd27e56" name="plexus-archiver" arch="src">
  <version epoch="0" ver="4.2.6" rel="2.oe2203sp4"/>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 0:4.2.6-2" date="1750334400">- Fix CVE-2023-37460</changelog>
</package>
<package pkgid="ffe56f49672b971bb9993109e590b65b10c2349275f1414ca7890128c7fbdb8a" name="pmix" arch="src">
  <version epoch="0" ver="5.0.3" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 4.1.2-2" date="1686571200">- Add Obsoletes pmix-pmi pmix-pmi-devel</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.2.6-1" date="1695038400">- Update to 4.2.6 for fix CVE-2023-41915</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.0.3-1" date="1735214400">- update to version 5.0.3 for fix remote execution command of openmpi</changelog>
</package>
<package pkgid="d2493d127619f8aa1fb32d51d1ed42a0b5818043d56b128c55da2d226f56cdd9" name="podman" arch="src">
  <version epoch="1" ver="3.4.4" rel="5.oe2203sp4"/>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:3.4.4-2" date="1714046400">- Fix CVE-2022-32149</changelog>
  <changelog author="Xuebing Li &lt;lixuebing@cqsoftware.com.cn&gt; - 1:3.4.4-3" date="1724155200">- Add 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-4" date="1736424000">- Type:bugfix
- CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
- SUG:NA
- DESC: Optimize spec files and fix CVE in batches through rebuild</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-5" date="1736769600">- Fix CVE-2024-37298</changelog>
</package>
<package pkgid="3aeff66f9a7a2ea2346df49b6bac7ada5998fe23ac87793c567eae5fdac774fc" name="podman" arch="src">
  <version epoch="1" ver="3.4.4" rel="8.oe2203sp4"/>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:3.4.4-2" date="1714046400">- Fix CVE-2022-32149</changelog>
  <changelog author="Xuebing Li &lt;lixuebing@cqsoftware.com.cn&gt; - 1:3.4.4-3" date="1724155200">- Add 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-4" date="1736424000">- Type:bugfix
- CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
- SUG:NA
- DESC: Optimize spec files and fix CVE in batches through rebuild</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-5" date="1736769600">- Fix CVE-2024-37298</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-6" date="1737028800">- Fix CVE-2023-0778</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-7" date="1737028801">- fix cve-2022-2989</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 1:3.4.4-8" date="1737028802">- fix cve 2022-27649</changelog>
</package>
<package pkgid="5e7de34a5d59c91f036ea0a7fa9d18cfcbfc2b118e66f428a80e090a58206b0e" name="polkit" arch="src">
  <version epoch="0" ver="0.120" rel="11.oe2203sp4"/>
  <changelog author="shechenglong &lt;shechenglong@xfusion.com&gt; - 0.120-10" date="1752667200">- fix zombie not reaped when js spawned process timed out</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 0.120-11" date="1753704000">- fix CVE-2025-7519</changelog>
</package>
<package pkgid="545b41d8656f7d2f0f22451441a899a56a54186f7dc12a6d98e346a9731fc037" name="polkit" arch="src">
  <version epoch="0" ver="0.120" rel="12.oe2203sp4"/>
  <changelog author="shechenglong &lt;shechenglong@xfusion.com&gt; - 0.120-10" date="1752667200">- fix zombie not reaped when js spawned process timed out</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 0.120-11" date="1753704000">- fix CVE-2025-7519</changelog>
  <changelog author="Xu Raoqing &lt;xuraoqing@h-partners.com&gt; - 0.120-12" date="1774872000">- fix CVE-2026-4897</changelog>
</package>
<package pkgid="b6feb2bbe98b3b1d6d66dcc50d8b0b505e0432fc743721d17f32fc090f8a988e" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="10.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
</package>
<package pkgid="7ba03dfdc0304ebfa23a0730a4d5985df6097cfdfb2a4c2af61720e307b2672c" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="11.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
</package>
<package pkgid="9e79271184d8f2d95c1f7a3c997799cf29876e86d0d93512edee4677cafac90e" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-12" date="1753358400">- fix CVE-2025-52886</changelog>
</package>
<package pkgid="b0d56e168b91a7e01376d2113e8d2c38b5bd48fab4c60e35a83fc16773ccd115" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-12" date="1753358400">- fix CVE-2025-52886</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 0.90.0-13" date="1754395200">- fix CVE-2025-50420</changelog>
</package>
<package pkgid="5d87d2c0511125caa1202124f3a29845ac62c562d20ab4d8ea4e491ce59a2da9" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="15.oe2203sp4"/>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-12" date="1753358400">- fix CVE-2025-52886</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 0.90.0-13" date="1754395200">- fix CVE-2025-50420</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-14" date="1760011200">- fix CVE-2025-43718</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-15" date="1760184000">- fix CVE-2025-52885</changelog>
</package>
<package pkgid="9cb11ae8ed1ec7768dafd1e7fa156effdbc5cbed81378442a69aa978521e0138" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="16.oe2203sp4"/>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-12" date="1753358400">- fix CVE-2025-52886</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 0.90.0-13" date="1754395200">- fix CVE-2025-50420</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-14" date="1760011200">- fix CVE-2025-43718</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-15" date="1760184000">- fix CVE-2025-52885</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-16" date="1760961600">- fix CVE-2025-43903</changelog>
</package>
<package pkgid="1ae8c29a3ece2c1d0e41af4a92392e7ad028bf3ac1e361f5cb6150be6e913bd5" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="17.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-10" date="1734955200">- fix CVE-2024-56378</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.90.0-11" date="1743940800">- fix CVE-2025-32364, CVE-2025-32365</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-12" date="1753358400">- fix CVE-2025-52886</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 0.90.0-13" date="1754395200">- fix CVE-2025-50420</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-14" date="1760011200">- fix CVE-2025-43718</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-15" date="1760184000">- fix CVE-2025-52885</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-16" date="1760961600">- fix CVE-2025-43903</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-17" date="1762257600">- fix CVE-2020-36024</changelog>
</package>
<package pkgid="fa00a5594b82942f0c0b9e0e92b12b474e2848cc6cd95d10ace3a1895463d410" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="8.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-3" date="1662465600">- fix CVE-2022-38784</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
</package>
<package pkgid="4aa2ed3842feecfae89db14395acd8b4f9031145ee9b1cd568ccff6bac9ebbd1" name="poppler" arch="src">
  <version epoch="0" ver="0.90.0" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-4" date="1678795200">- fix CVE-2022-27337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.90.0-5" date="1685016000">- fix changelog error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 0.90.0-6" date="1693396800">- fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
- fix install error</changelog>
  <changelog author="xiongyi &lt;xiongyi@uniontech.com&gt; - 0.90.0-7" date="1701259200">- fix CVE-2020-36023
- fix infinite looping in cvtGlyph with broken files
- patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-8" date="1719316800">- Type:CVE
- CVE:CVE-2024-6239
- SUG:NA
- DESC:fix CVE-2024-6239</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 0.90.0-9" date="1727265600">- Type:CVE
- CVE:CVE-2024-4141
- SUG:NA
- DESC:fix CVE-2024-4141</changelog>
</package>
<package pkgid="99a83be0a0879620a88a8142be80dc457a2999e5c8580a2b59f4adfb2dacc082" name="postgresql" arch="src">
  <version epoch="0" ver="13.16" rel="1.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 13.3-7" date="1666699200">- Add sw64 architecture</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
</package>
<package pkgid="a92c1a7a1f8d51466b10b37c0fd84abdeae1c3b9d8a49270731c40c4775c0fc1" name="postgresql" arch="src">
  <version epoch="0" ver="13.17" rel="1.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
</package>
<package pkgid="3ab73aa1c932229a47b4ae00337dd585f33ce3e935cbd53ddf7fe7c0c52b7fc5" name="postgresql" arch="src">
  <version epoch="0" ver="13.18" rel="1.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
</package>
<package pkgid="2c9c6566b3e8da26e3636d94d1670851774faef29dfc729be02beab0c197159c" name="postgresql" arch="src">
  <version epoch="0" ver="13.19" rel="1.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.19-1" date="1739534400">- update to 13.19 to fix CVE-2025-1094</changelog>
</package>
<package pkgid="f2797f6f02ee87c311be7c73abb3a1cfc8b7ff0e0f6b5f50fba5dc502ec93f16" name="postgresql" arch="src">
  <version epoch="0" ver="13.20" rel="1.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.3-8" date="1686312000">- Fix build error for loongarch64
- Fix issue: confilct between libpq-devel and postgresql-devel
- guess init spec from redhat
- change redhat spec:rm private package and add files to server-devel
- so add delete lines to Fix issue
- Next: write oe libpq and postgresql spec by myself</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.12-1" date="1691755200">- New version 13.12</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.19-1" date="1739534400">- update to 13.19 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20</changelog>
</package>
<package pkgid="bf9fafbc583ef0a2558f60dfe82f96511e215e1fa778e394db7eff3810f7ee6f" name="postgresql" arch="src">
  <version epoch="0" ver="13.21" rel="2.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 13.12-2" date="1692273600">- fix sw_64 patch error and remove --no-discard-stderr</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.19-1" date="1739534400">- update to 13.19 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-2" date="1742212800">- add upgrade path from openEuler-20.03</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-2" date="1749988800">- remove duplicate shared libs</changelog>
</package>
<package pkgid="006958fd926c85457a76a041cdef26f2663b909ca26bd37a6380ddd5d0b0eb9f" name="postgresql" arch="src">
  <version epoch="0" ver="13.22" rel="1.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 13.13-1" date="1700049600">- New version 13.13
- Fix CVE-2023-5868  CVE-2023-5869  CVE-2023-5870</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.19-1" date="1739534400">- update to 13.19 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-2" date="1742212800">- add upgrade path from openEuler-20.03</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-2" date="1749988800">- remove duplicate shared libs</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.22-1" date="1755259200">- update to 13.22</changelog>
</package>
<package pkgid="5e335df237219f1941794b4e3b682269ed0638527e9491d8d8397d0d168f31a7" name="postgresql" arch="src">
  <version epoch="0" ver="13.23" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.16-1" date="1723204800">- New version 13.16 (CVE-2024-7348)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.17-1" date="1731672000">- update to 13.17 (CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979)</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.18-1" date="1732276800">- update to 13.18</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.19-1" date="1739534400">- update to 13.19 to fix CVE-2025-1094</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-1" date="1740052800">- update to 13.20</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.20-2" date="1742212800">- add upgrade path from openEuler-20.03</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-1" date="1746792000">- update to 13.21</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.21-2" date="1749988800">- remove duplicate shared libs</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.22-1" date="1755259200">- update to 13.22</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 13.23-1" date="1763121600">- update to 13.23</changelog>
</package>
<package pkgid="6288e00620971717d57bc5760bfd283ed2c41d2addf5e8ca135b4e22d311e08b" name="powerapi" arch="src">
  <version epoch="0" ver="1.1.0" rel="12.oe2203sp4"/>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-3" date="1716984000">- Bug fix: fix build warning.
- Bug fix: export PWR_SYS_GetRtPowerInfo.
- Bug fix: data collection task intercept invalid task type.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-4" date="1717416000">- Bug fix: memcpy null pointer, array out of bounds, struct align.
- Bug fix: get watt state will failed at the first time.
- Bug fix: use process name to query pid but return all pids.
- Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-5" date="1717675200">- Bug fix: SIGPIPE cause powerapi server exit.
- Bug fix: pstree command is too slow to get all pid.
- Bug fix: set smart grid state failed.
- Bug fix: get watt attr and task list is not correct.</changelog>
  <changelog author="Zihao Xue &lt;xuezihao@huawei.com&gt; - 1.1.0-6" date="1718193600">- Bug fix: heap buffer overflow caused by sending incomplete strings.
- Bug fix: too long strings into QueryProcs causes services broke down.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-7" date="1718712000">- Bug fix: expand msg buffer, wrong code of check if buffer full.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-8" date="1718884800">- Bug fix: Delete the unnecessary comma in the configuration file</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-9" date="1721044800">- Bug fix: powerapi-devel start/stop service without pwrapis.service.</changelog>
  <changelog author="jinye &lt;jinye10@huawei.com&gt; - 1.1.0-10" date="1731931200">- Bug fix: Stop eagle cause process block.
- Add some gtest code.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-11" date="1732622400">- Bug fix: wrong log print.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-12" date="1737633600">- Update hbm offline/online interface.
- Increase the timeout of msg to match the hbm online time.</changelog>
</package>
<package pkgid="f815ea6ee0e3436de91484525129b5078b7d546fbf0a99ba0b1474eaa8de5259" name="powerapi" arch="src">
  <version epoch="0" ver="1.1.0" rel="9.oe2203sp4"/>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.0.1-4" date="1712145600">- Add the dependency on ipmitool.
- Fix bug: Coredump when CPU cores number exceed 248 or numa nodes exceed 16.
- Fix some memory bug.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-1" date="1715947200">- Add some new APIs about proc/hbm/cpu.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-2" date="1716638400">- Bug fix: Incorrect passing of memory address for process list.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-3" date="1716984000">- Bug fix: fix build warning.
- Bug fix: export PWR_SYS_GetRtPowerInfo.
- Bug fix: data collection task intercept invalid task type.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-4" date="1717416000">- Bug fix: memcpy null pointer, array out of bounds, struct align.
- Bug fix: get watt state will failed at the first time.
- Bug fix: use process name to query pid but return all pids.
- Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-5" date="1717675200">- Bug fix: SIGPIPE cause powerapi server exit.
- Bug fix: pstree command is too slow to get all pid.
- Bug fix: set smart grid state failed.
- Bug fix: get watt attr and task list is not correct.</changelog>
  <changelog author="Zihao Xue &lt;xuezihao@huawei.com&gt; - 1.1.0-6" date="1718193600">- Bug fix: heap buffer overflow caused by sending incomplete strings.
- Bug fix: too long strings into QueryProcs causes services broke down.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-7" date="1718712000">- Bug fix: expand msg buffer, wrong code of check if buffer full.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-8" date="1718884800">- Bug fix: Delete the unnecessary comma in the configuration file</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-9" date="1721044800">- Bug fix: powerapi-devel start/stop service without pwrapis.service.</changelog>
</package>
<package pkgid="4413549179991547d003691738975b116887c44cd40ccff9b63a8df11fdac98d" name="powerapi" arch="src">
  <version epoch="0" ver="1.2.0" rel="1.oe2203sp4"/>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-3" date="1716984000">- Bug fix: fix build warning.
- Bug fix: export PWR_SYS_GetRtPowerInfo.
- Bug fix: data collection task intercept invalid task type.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-4" date="1717416000">- Bug fix: memcpy null pointer, array out of bounds, struct align.
- Bug fix: get watt state will failed at the first time.
- Bug fix: use process name to query pid but return all pids.
- Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-5" date="1717675200">- Bug fix: SIGPIPE cause powerapi server exit.
- Bug fix: pstree command is too slow to get all pid.
- Bug fix: set smart grid state failed.
- Bug fix: get watt attr and task list is not correct.</changelog>
  <changelog author="Zihao Xue &lt;xuezihao@huawei.com&gt; - 1.1.0-6" date="1718193600">- Bug fix: heap buffer overflow caused by sending incomplete strings.
- Bug fix: too long strings into QueryProcs causes services broke down.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-7" date="1718712000">- Bug fix: expand msg buffer, wrong code of check if buffer full.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-8" date="1718884800">- Bug fix: Delete the unnecessary comma in the configuration file</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-9" date="1721044800">- Bug fix: powerapi-devel start/stop service without pwrapis.service.</changelog>
  <changelog author="jinye &lt;jinye10@huawei.com&gt; - 1.1.0-10" date="1731931200">- Bug fix: Stop eagle cause process block.
- Add some gtest code.</changelog>
  <changelog author="heppen &lt;hepeng68@huawei.com&gt; - 1.1.0-11" date="1732622400">- Bug fix: wrong log print.</changelog>
  <changelog author="wangyi &lt;wangyi395@huawei.com&gt; - 1.2.0-1" date="1755518400">- update hbm interface</changelog>
</package>
<package pkgid="30c2085173aa7943b77ec65f1a7013588067607d72523a8703cdb25e11c01dcd" name="ppp" arch="src">
  <version epoch="0" ver="2.4.9" rel="8.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.9-6" date="1694433600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:correct patch names and commit messages</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-7" date="1739534400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream
       Fixing up parsing in radiusclient.conf</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.4.9-8" date="1745928000">- Type:CVE
- CVE:CVE-2024-58250
- SUG:NA
- DESC:fix CVE-2024-58250</changelog>
</package>
<package pkgid="8c4a48b30b711da5b7483c17f3cb69211f44cfe10fe42db9b4f95de1d9ad561e" name="procinfo" arch="src">
  <version epoch="0" ver="18" rel="46.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 18-45" date="1752580800">- Fix long string overflow</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 18-46" date="1752580801">- Refix long string overflow</changelog>
</package>
<package pkgid="3508c494be3310d07f7369d18ce1c7ae669853d246b97c7ce81f49b9d5b3f29f" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="14.oe2203sp4"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-5" date="1687780800">- pmap: increase memory allocation failure judgment</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-12" date="1712059200">- library: address remaining cpu distorrions, &lt;stat&gt; api</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 4.0.2-13" date="1714046400">- ps: don't lose tasks when --sort used with forest mode</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-14" date="1719316800">- top: adapt to guest/total tics chage, &lt;stat&gt; api</changelog>
</package>
<package pkgid="fcfb9831e59ac9fa03f0f28d054f47669c71805f53572fc2254367949b8c19a9" name="procps-ng" arch="src">
  <version epoch="0" ver="4.0.2" rel="15.oe2203sp4"/>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-6" date="1687953600">- top: added guest tics when multiple cpus were merged</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-7" date="1689076800">- library: restore the proper main thread tics valuation</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-8" date="1689163200">- vmstat: Update memory statistics</changelog>
  <changelog author="zhoujie &lt;zhoujie133@huawei.com&gt; - 4.0.2-9" date="1689249600">- vmstat: print guest time</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-10" date="1692100800">- ps: Fix possible buffer overflow in -C option</changelog>
  <changelog author="Weifeng Su &lt;suweifeng1@huawei.com&gt; - 4.0.2-11" date="1711713600">- backport patch to Correct BSD c option issue</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-12" date="1712059200">- library: address remaining cpu distorrions, &lt;stat&gt; api</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 4.0.2-13" date="1714046400">- ps: don't lose tasks when --sort used with forest mode</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 4.0.2-14" date="1719316800">- top: adapt to guest/total tics chage, &lt;stat&gt; api</changelog>
  <changelog author="Zhu Jin &lt;zhujin18@huawei.com&gt; - 4.0.2-15" date="1749211200">- top: Synchronize community bugfix patches</changelog>
</package>
<package pkgid="cd536fee6a13c12d408b28157c683e515d9a79456b49f3fc4f8b5150d6d9bbad" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.8b" rel="5.oe2203sp4"/>
</package>
<package pkgid="ffe3e3203ff8f73303d70245f6eed6d1a5f46ca09f18fd64143faa7b0dfb7b9b" name="proftpd" arch="src">
  <version epoch="0" ver="1.3.8b" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.8b-6" date="1753790400">- Fix CVE-2024-57392</changelog>
</package>
<package pkgid="99377b6bcff7bd8edff3ef8c561122744ac6a05d5b8c84830f8cc26a22c990d9" name="protobuf" arch="src">
  <version epoch="0" ver="3.14.0" rel="10.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.14.0-10" date="1761048000">- bugfix
- ID:NA
- SUG:NA
- DESC: fix build with wrong permission</changelog>
</package>
<package pkgid="825840c6b914ccb0ca65d9202fb83b840066abc6cd82cdbb8b0d4ef45dcc3567" name="protobuf" arch="src">
  <version epoch="0" ver="3.14.0" rel="11.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.14.0-10" date="1761048000">- bugfix
- ID:NA
- SUG:NA
- DESC: fix build with wrong permission</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 3.14.0-11" date="1770897600">- Type:CVE
- CVE:CVE-2026-0994
- SUG:NA
- DESC:Fix Any recursion depth bypass in Python json_format.ParseDict</changelog>
</package>
<package pkgid="4afe83fdf3ce2d1a1cfa85aa8cb4ec3a77401758ddbd589b19dfb55d5be56bb1" name="protobuf" arch="src">
  <version epoch="0" ver="3.14.0" rel="9.oe2203sp4"/>
</package>
<package pkgid="0f0fb3ac6d27062a5bfefab7bd66d89a08953aaf99b9990fb83b23296d387877" name="pyOpenSSL" arch="src">
  <version epoch="0" ver="21.0.0" rel="3.oe2203sp4"/>
  <changelog author="Xu Raoqing&lt;xuraoqing@huawei.com&gt; - 21.0.0-3" date="1774353600">- fix CVE-2026-27448</changelog>
</package>
<package pkgid="85a5f1c718a2ac47e0024518b6f1c05a56ababc8605e04c303ff9239dff3b228" name="python-aiomysql" arch="src">
  <version epoch="0" ver="0.0.21" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.0.21-2" date="1761652800">- Fix CVE-2025-62611</changelog>
</package>
<package pkgid="20023ebd665c58a2a1106c370d2076315bc91ba2186d36ff36f30295fb9ce8b2" name="python-aiosignal" arch="src">
  <version epoch="0" ver="1.3.1" rel="1.oe2203sp4"/>
  <changelog author="xuesinian &lt;xuesinian@huawei.com&gt; - 1.3.1-1" date="1673006400">- Package init</changelog>
</package>
<package pkgid="5aefeddad411d65af8f14e7f18c823694ed36ae032165dc1b9b4b6d39d7e6144" name="python-cryptography" arch="src">
  <version epoch="0" ver="36.0.1" rel="8.oe2203sp4"/>
</package>
<package pkgid="a6b0ac2492d98bef8f5479910cacc68cfdebca28941f66106f89839490a4c05d" name="python-dns" arch="src">
  <version epoch="0" ver="2.2.1" rel="3.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.2.1-1" date="1666872000">- update to 2.2.1</changelog>
  <changelog author="caofei &lt;caofei@xfusion.com&gt; -  2.2.1-2" date="1673611200">- update README w/ codecov and lgtm</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; -  2.2.1-3" date="1721822400">- fix CVE-2023-29483</changelog>
</package>
<package pkgid="8bd49aa97b66912f88a1208346a88a394c2678d38675e053debd116f9dbfdc78" name="python-docker" arch="src">
  <version epoch="0" ver="5.0.3" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.0.3-2" date="1764676800">- Extend fix to requests 2.32.2+</changelog>
</package>
<package pkgid="03c5c718030192bd4484b5ccca17e79aad4c7cd6608bccdeddb70753c36d8194" name="python-ecdsa" arch="src">
  <version epoch="0" ver="0.17.0" rel="4.oe2203sp4"/>
  <changelog author="liweigang &lt;liweiganga@gmai.com&gt; - 0.17.0-4" date="1774872000">- fix CVE-2026-33936</changelog>
</package>
<package pkgid="d558ca178e5016ccfae3f082fd503e6c9be1ed02352974c96a53348062046d51" name="python-frozenlist" arch="src">
  <version epoch="0" ver="1.4.0" rel="1.oe2203sp4"/>
  <changelog author="xuesinian &lt;xuesinian@huawei.com&gt; - 1.3.3-1" date="1673006400">- Package init</changelog>
  <changelog author="sunhui &lt;sunhui@kylinos.cn&gt; - 1.4.0-1" date="1690891200">- Update package to version 1.4.0</changelog>
</package>
<package pkgid="e44248f6cfc03d224dac9c5c0cf65a77f7d17007573e44662e2cf6835eb8e080" name="python-jinja2" arch="src">
  <version epoch="0" ver="3.0.3" rel="5.oe2203sp4"/>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 3.0.3-5" date="1735128000">- Type:CVE
- CVE:CVE-2024-56326
- SUG:NA
- DESC:fix CVE-2024-56326</changelog>
</package>
<package pkgid="0897e3616fc0f7c3b238f756912ac88fd989594e4fde442a43be6c6c7325c83e" name="python-jinja2" arch="src">
  <version epoch="0" ver="3.0.3" rel="6.oe2203sp4"/>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 3.0.3-5" date="1735128000">- Type:CVE
- CVE:CVE-2024-56326
- SUG:NA
- DESC:fix CVE-2024-56326</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-6" date="1735214400">- Type:CVE
- CVE:CVE-2024-56201
- SUG:NA
- DESC:fix CVE-2024-56201</changelog>
</package>
<package pkgid="350ed1280f6bcb2d34c0c39e2a054ff5da4e86313ca225793b947f61fe84dd4f" name="python-jinja2" arch="src">
  <version epoch="0" ver="3.0.3" rel="7.oe2203sp4"/>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-3" date="1705924800">- Type:CVE
- CVE:CVE-2024-22195
- SUG:NA
- DESC:fix CVE-2024-22195</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-4" date="1715342400">- Type:CVE
- CVE:CVE-2024-34064
- SUG:NA
- DESC:fix CVE-2024-34064</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 3.0.3-5" date="1735128000">- Type:CVE
- CVE:CVE-2024-56326
- SUG:NA
- DESC:fix CVE-2024-56326</changelog>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.0.3-6" date="1735214400">- Type:CVE
- CVE:CVE-2024-56201
- SUG:NA
- DESC:fix CVE-2024-56201</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 3.0.3-7" date="1741608000">- Type:CVE
- CVE:CVE-2025-27516
- SUG:NA
- DESC:fix CVE-2025-27516</changelog>
</package>
<package pkgid="b7aa0f8da236ba5a638f2a30a45a0f2a30521e51a40fd14d8fee2ebf8dd0ab8d" name="python-kdcproxy" arch="src">
  <version epoch="0" ver="1.0.0" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.0-2" date="1763467200">- Fix CVE-2025-59089 and CVE-2025-59088</changelog>
</package>
<package pkgid="11273d4150c8b844c9b860135b7b67f1e1e1863d4bb5521e4b33e8b17e51089f" name="python-ldap" arch="src">
  <version epoch="0" ver="3.3.1" rel="7.oe2203sp4"/>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 3.3.1-6" date="1760356800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix CVE-2025-61911</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 3.3.1-7" date="1762516800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: fix CVE-2025-61912</changelog>
</package>
<package pkgid="b4e8dc87559c4a14a4030b5491f0fbe2ee0db3a3caa18387cf932e39f90f88c2" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="10.oe2203sp4"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt;- 21.3.1-5" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
  <changelog author="xiangyuning &lt;xiangyuning@h-partners.com&gt; - 21.3.1-10" date="1757505600">- Fix CVE-2025-50181</changelog>
</package>
<package pkgid="a33c4f47d7e90385b7ad84962c2e6630e68172a67f1c197b6a3498aa4d14c488" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="11.oe2203sp4"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt;- 21.3.1-5" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
  <changelog author="xiangyuning &lt;xiangyuning@h-partners.com&gt; - 21.3.1-10" date="1757505600">- Fix CVE-2025-50181</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-11" date="1758196800">- Fix CVE-2023-32681</changelog>
</package>
<package pkgid="90def649887860008cce10ebe3b380c6682e407a72a974d80d6262941611af36" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="12.oe2203sp4"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt;- 21.3.1-5" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
  <changelog author="xiangyuning &lt;xiangyuning@h-partners.com&gt; - 21.3.1-10" date="1757505600">- Fix CVE-2025-50181</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-11" date="1758196800">- Fix CVE-2023-32681</changelog>
  <changelog author="chenjianhu &lt;chenjianhu@kylinos.cn&gt; - 21.3.1-12" date="1763467200">- Fix CVE-2025-8869</changelog>
</package>
<package pkgid="b7c9c2bc99d3cf210263b5043af2e23ad018b3889f278207d9a6fadfcde51d2c" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="13.oe2203sp4"/>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
  <changelog author="xiangyuning &lt;xiangyuning@h-partners.com&gt; - 21.3.1-10" date="1757505600">- Fix CVE-2025-50181</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-11" date="1758196800">- Fix CVE-2023-32681</changelog>
  <changelog author="chenjianhu &lt;chenjianhu@kylinos.cn&gt; - 21.3.1-12" date="1763467200">- Fix CVE-2025-8869</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 21.3.1-13" date="1767009600">- Fix CVE-2025-66418</changelog>
</package>
<package pkgid="82f190c266807e9fac1e7fabd6676f86013184483443151b4812ea1760da460a" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="14.oe2203sp4"/>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
  <changelog author="xiangyuning &lt;xiangyuning@h-partners.com&gt; - 21.3.1-10" date="1757505600">- Fix CVE-2025-50181</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-11" date="1758196800">- Fix CVE-2023-32681</changelog>
  <changelog author="chenjianhu &lt;chenjianhu@kylinos.cn&gt; - 21.3.1-12" date="1763467200">- Fix CVE-2025-8869</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 21.3.1-13" date="1767009600">- Fix CVE-2025-66418</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 21.3.1-14" date="1770984000">- Fix CVE-2026-1703 CVE-2026-21441</changelog>
</package>
<package pkgid="1140a00304131fa769dee8878ab931555a32ffe1064269a5007b0722d0ed92ee" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="8.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 21.3.1-3" date="1690804800">- Use local mirrors for pip</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 21.3.1-4" date="1694174400">- fix that pip install failed</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt;- 21.3.1-5" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
</package>
<package pkgid="4fbb06ec56652785359c1ccee94a4ddf409ac4224f7ea6b50dfd955923388082" name="python-pip" arch="src">
  <version epoch="0" ver="21.3.1" rel="9.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 21.3.1-3" date="1690804800">- Use local mirrors for pip</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 21.3.1-4" date="1694174400">- fix that pip install failed</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt;- 21.3.1-5" date="1702468800">- Fix vulnerable regex</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-6" date="1718798400">- fix CVE-2024-3651</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-7" date="1718798401">- fix CVE-2023-43804</changelog>
  <changelog author="yangyuan &lt;yangyuan32@huawei.com&gt; - 21.3.1-8" date="1720872000">- Fix CVE-2023-45803 and CVE-2024-37891</changelog>
  <changelog author="xieyanlong &lt;xieyanlong@kylinos.cn&gt; - 21.3.1-9" date="1752667200">- Fix CVE-2024-47081</changelog>
</package>
<package pkgid="804d9eb43ad86cd6776bee75c58526ba5b5c5bf55b438692e4209f160d3c8290" name="python-ply" arch="src">
  <version epoch="0" ver="3.11" rel="4.oe2203sp4"/>
  <changelog author="weihaohao &lt;weihaohao2@huawei.com&gt; - 3.11-4" date="1769774400">- Type:CVE
- CVE:CVE-2025-56005
- SUG:NA
- DESC:fix CVE-2025-56005</changelog>
</package>
<package pkgid="ee3f4b1e0040167e372325373531f38167501106d13b2ff20ec6e494d4039617" name="python-pyasn1" arch="src">
  <version epoch="0" ver="0.4.8" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.4.8-4" date="1774353600">- Fix CVE-2026-23490</changelog>
</package>
<package pkgid="dbc9993bac4ec2ae6a7c7b15e2b891e8a2eb37d93e452ab21e728df076c95a34" name="python-requests" arch="src">
  <version epoch="0" ver="2.26.0" rel="10.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-9" date="1731931200">- fix CVE-2024-1682</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-10" date="1750680000">- fix CVE-2024-47081</changelog>
</package>
<package pkgid="98cb9354a914b19694d1a5c543e291ddbe6bc4496b6b8bc61d20bf82a1b94e44" name="python-requests" arch="src">
  <version epoch="0" ver="2.26.0" rel="11.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-9" date="1731931200">- fix CVE-2024-1682</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-10" date="1750680000">- fix CVE-2024-47081</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.26.0-11" date="1763553600">- fix CVE-2024-35195</changelog>
</package>
<package pkgid="9102514515c53d33d8b9c19cbf13cc872402c49651f4d853022714ad78ddcfde" name="python-requests" arch="src">
  <version epoch="0" ver="2.26.0" rel="12.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-9" date="1731931200">- fix CVE-2024-1682</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-10" date="1750680000">- fix CVE-2024-47081</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.26.0-11" date="1763553600">- fix CVE-2024-35195</changelog>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 2.26.0-12" date="1774526400">- fix CVE-2026-25645</changelog>
</package>
<package pkgid="61e4e884755827c8c7b369840905d8014bbb25c7504045346bef1f62c8fa2775" name="python-requests" arch="src">
  <version epoch="0" ver="2.26.0" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-8" date="1685534400">- fix CVE-2023-32681</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.26.0-9" date="1731931200">- fix CVE-2024-1682</changelog>
</package>
<package pkgid="40d8bf92abd3e994a7e46d59f9a5edb8f9286b3e1815f3740d0a1bf6f1a8cf6d" name="python-setuptools" arch="src">
  <version epoch="0" ver="59.4.0" rel="6.oe2203sp4"/>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 59.4.0-4" date="1666872000">- Rebuild for next release</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 59.4.0-5" date="1672833600">- Type:CVE
- CVE:CVE-2022-40897
- SUG:NA
- DESC:fix CVE-2022-40897</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech&gt; - 59.4.0-6" date="1721044800">- Fix CVE-2024-6345</changelog>
</package>
<package pkgid="9ecdf83b71c1da687bc7de33b928e15325c9c2c30a15ee8f456a695a8f8a4980" name="python-tornado" arch="src">
  <version epoch="0" ver="6.1" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 6.1-3" date="1732622400">- Fix CVE-2024-52804</changelog>
</package>
<package pkgid="e5508a0165950bd1ce4dff142feaf017187cf1339f6ee1a41fa10bf9d9b02d98" name="python-tornado" arch="src">
  <version epoch="0" ver="6.1" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 6.1-2" date="1686916800">- Fix CVE-2023-28370</changelog>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 6.1-3" date="1732622400">- Fix CVE-2024-52804</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-4" date="1748606400">- Fix CVE-2025-47287</changelog>
</package>
<package pkgid="9459c56d0a6d0ad11e1e2d61ac0a87387d174116e6e66d458ea28bbe0cb94db8" name="python-tornado" arch="src">
  <version epoch="0" ver="6.1" rel="5.oe2203sp4"/>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 6.1-3" date="1732622400">- Fix CVE-2024-52804</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-4" date="1748606400">- Fix CVE-2025-47287</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-5" date="1765800000">- Fix CVE-2025-67724, CVE-2025-67725 and CVE-2025-67726</changelog>
</package>
<package pkgid="d1599bd79504b9f48428e419fa1edf1c17ce7a1fe5d43229b7431121165d5617" name="python-tornado" arch="src">
  <version epoch="0" ver="6.1" rel="6.oe2203sp4"/>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 6.1-3" date="1732622400">- Fix CVE-2024-52804</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-4" date="1748606400">- Fix CVE-2025-47287</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-5" date="1765800000">- Fix CVE-2025-67724, CVE-2025-67725 and CVE-2025-67726</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.1-6" date="1773662400">- Fix CVE-2026-31958</changelog>
</package>
<package pkgid="813ee489e5b178c2e87fed6f058e218d8d7bd225c7a4cd31a8f818ab269d4588" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="11.oe2203sp4"/>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 1.26.12-9" date="1766836800">- Type:CVE
- CVE:CVE-2025-66418
- SUG:NA
- DESC:fix CVE-2025-66418</changelog>
  <changelog author="zhaoyonghao &lt;zhaoyonghao10@h-partners.com&gt; - 1.26.12-10" date="1769083200">- Type:CVE
- CVE:CVE-2025-664571
- SUG:NA
- DESC:fix CVE-2025-66571</changelog>
  <changelog author="tangce &lt;tangce1@h-partners.com&gt; - 1.26.12-11" date="1769860800">- Type:CVE
- CVE:CVE-2026-21441
- SUG:NA
- DESC:fix CVE-2026-21441</changelog>
</package>
<package pkgid="b8be4d861e5489d2548d240897f2edf5e740f65352614e4cbecfc937e76b5a64" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="7.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.7-2" date="1657108800">- add patch Bump RECENT_DATE and solve test case test_recent_date failed</changelog>
  <changelog author="OpenStack_SIG &lt;openstack@openeuler.org&gt; - 1.26.8-1" date="1658145600">- Upgrade package to version 1.26.8</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.8-2" date="1660046400">- delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change</changelog>
  <changelog author="tianlijing &lt;tianlijing@kylinos.cn&gt; - 1.26.12-1" date="1662292800">- update to 1.26.12</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-2" date="1671278400">- DESC:fix util.parse_url function traceback when port have leading zeros</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-3" date="1676030400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change _HOST_PORT_PAT to fix port is 0 but return None</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 1.26.12-4" date="1679400000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix socket timeout value when HTTPConnect is reused
       remove Exclamation mark character from the unreserved characters
       fix _idna_encode handling of x80</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.26.12-5" date="1696420800">- Type:CVE
- CVE:CVE-2023-43804
- SUG:NA
- DESC:fix CVE-2023-43804</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-6" date="1699012800">- Type:CVE
- CVE:CVE-2023-45803
- SUG:NA
- DESC:fix CVE-2023-45803</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 1.26.12-7" date="1719316800">- Type:CVE
- CVE:CVE-2024-37891
- SUG:NA
- DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects</changelog>
</package>
<package pkgid="1eda13b2534d73765c608dd237778c31b0a444e720766dfe55824ab8534282ea" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.26.12" rel="8.oe2203sp4"/>
</package>
<package pkgid="75dfa87ee44468cb11eba490bc91905ddae4ebbd1db6735c67e23c3af6f80d43" name="python-waitress" arch="src">
  <version epoch="0" ver="2.0.0" rel="4.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.0.0-4" date="1730203200">- Fix CVE-2024-49768</changelog>
</package>
<package pkgid="e7dd51f5b7ed9ff5615cdb5de88b7f20ed21641639c9930d58787f72ee79d0ee" name="python-waitress" arch="src">
  <version epoch="0" ver="2.0.0" rel="5.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.0.0-4" date="1730203200">- Fix CVE-2024-49768</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.0.0-5" date="1730289600">- Fix CVE-2024-49769</changelog>
</package>
<package pkgid="f91db604d94fc9fab9e3ebe4ec44e6cbc9302b5ee3f49016cec318c436fb072e" name="python-webob" arch="src">
  <version epoch="0" ver="1.8.7" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.8.7-3" date="1723723200">- Fix CVE-2024-42353</changelog>
</package>
<package pkgid="1d6c2e4417fa9b89736e231b34c53750ce3812a79d4e30d151a4cd57cfb4bdfc" name="python-werkzeug" arch="src">
  <version epoch="0" ver="2.0.3" rel="5.oe2203sp4"/>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-2" date="1673092800">- fix typo and grammar mistake</changelog>
  <changelog author="Bolehu &lt;heyaohua@xfusion.com&gt; - 2.0.3-3" date="1673265600">- fix flake8-bugbear finding</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.3-4" date="1692014400">- Fix CVE-2023-23934 and CVE-2023-25577</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.0.3-5" date="1731412800">- Fix CVE-2024-49767</changelog>
</package>
<package pkgid="00e55e8feed373631a64a513372c8fed8cbcbeebb95403f609adf5a5261f1de6" name="python-werkzeug" arch="src">
  <version epoch="0" ver="2.0.3" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.0.3-4" date="1692014400">- Fix CVE-2023-23934 and CVE-2023-25577</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.0.3-5" date="1731412800">- Fix CVE-2024-49767</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.0.3-6" date="1753963200">- Fix CVE-2023-46136 and CVE-2024-34069</changelog>
</package>
<package pkgid="2d367adc69892763bbc4882c0ee5e80d2a524b076b2d472135449aa10402a699" name="python-xmltodict" arch="src">
  <version epoch="0" ver="1.0.0" rel="1.oe2203sp4"/>
  <changelog author="lixiaoyong &lt;lixiaoyong@kylinos.cn&gt; - 0.14.1-1" date="1728993600">- Upgrade package to version 0.14.1
  - Drop support for Python older than 3.6
  - Additional ruff/Pyflakes/codespell fixes</changelog>
  <changelog author="liwenqiang &lt;liwq@teligen.net&gt; - 0.14.2-1" date="1748606400">- Upgrade package to version 0.14.2</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.0-1" date="1758110400">- Update to 1.0.0 for fix CVE-2025-9375</changelog>
</package>
<package pkgid="38f17661a7f224cdf7df4edc0414647e9d252396078d5aa7596e7b2241e2cc10" name="python-zipp" arch="src">
  <version epoch="0" ver="3.7.0" rel="3.oe2203sp4"/>
  <changelog author="liksh &lt;liks11@chinaunicom.cn&gt; - 3.7.0-1" date="1659009600">- Upgrade for openstack yoga</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.7.0-2" date="1708430400">- remove useless requires</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.7.0-3" date="1720526400">- Fix CVE-2024-5569</changelog>
</package>
<package pkgid="4be2db199ec1b2a39b09fb04621a7229402cf38e41fb855d3f72616d2046ee3c" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="35.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
</package>
<package pkgid="662cd55f2f7bdeb45744504de3aa8806a9567888ce4770fe0b6e8c3614d94820" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="36.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
</package>
<package pkgid="f44e4f396bfdb8ef89bbb925292b7ddeeb597ca0d8de86de687fcf61d1960dd9" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="38.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
</package>
<package pkgid="f609be240d67a9d839609dfadf5276a5fb6529bdc1d84a9f2ebc406e8351dac9" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="40.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
</package>
<package pkgid="14b43fdcb1ed8ebcdafe3353e013eec0909642be0f8ffb220b24f50cae4c5e91" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="41.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
</package>
<package pkgid="3140aad6b86b13fd5bd34ccac5e7f5f3916a75eadd018d2a5bf1948f01c015a2" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="42.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
</package>
<package pkgid="9da4da9393661642f6e21762d3f1adbf48fd54e11c94582fd980266bf4ed4586" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="44.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-35" date="1725364800">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
    - Encode newlines in headers, and verify headers are sound
    - Fix quadratic complexity in parsing quoted cookie values with backslashes
    - Replaced SanitizedNames with a more surgical fix</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
</package>
<package pkgid="bae0f4831843338c6c45cde19a40d0586daf084b0a2cd9e054296452ce67324c" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="45.oe2203sp4"/>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-36" date="1727179200">- Type:CVE
- CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
- SUG:NA
- DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
    - rename all CVE patch name
    - CVE-2024-6232: Remove backtracking when parsing tarfile headers
    - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
    - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
    - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
    - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
    - CVE-2024-4032: Fix "private" (non-global) IP address ranges</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
</package>
<package pkgid="7baa8aa4bcada70123d7be7048eaa4079656b3ee2519ef1a711bfddc90293e12" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="46.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-37" date="1730203200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
-      gh-107845: Fix symlink handling for tarfile.data_filter</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-46" date="1758369600">- Type:CVE
- CVE:CVE-2025-6069
- SUG:NA
- DESC:fix CVE-2025-6069</changelog>
</package>
<package pkgid="e27da65e4a635117ddf9317d3a4bdfc04511c8e7d45c24429a28837c23cc6608" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="47.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-38" date="1731412800">- Type:CVE
- CVE:CVE-2024-9287
- SUG:NA
- DESC:fix CVE-2024-9287
  - Quote template strings in venv activation scripts</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-46" date="1758369600">- Type:CVE
- CVE:CVE-2025-6069
- SUG:NA
- DESC:fix CVE-2025-6069</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 3.9.9-47" date="1759924800">- fix CVE-2025-8291</changelog>
</package>
<package pkgid="ef15131ccd60dd892ac751c5426942d9fffe54a108a09f6b50d734c3d5061a3a" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="48.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 3.9.9-39" date="1733918400">- Type:update
- CVE:NA
- SUG:NA
- DESC:support TLS_SM4</changelog>
  <changelog author="xinsheng &lt;xinsheng3@huawei.com&gt; - 3.9.9-40" date="1735128000">- Type:CVE
- CVE:CVE-2024-11168
- SUG:NA
- DESC:fix CVE-2024-11168
       - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-46" date="1758369600">- Type:CVE
- CVE:CVE-2025-6069
- SUG:NA
- DESC:fix CVE-2025-6069</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 3.9.9-47" date="1759924800">- fix CVE-2025-8291</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-48" date="1761825600">- Type:CVE
- CVE:CVE-2024-5642
- SUG:NA
- DESC:fix CVE-2024-5642</changelog>
</package>
<package pkgid="1404f15ff4aa83a2547b99a24350c1cbbaebb764680a0e57125027e0b94333b2" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="50.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-41" date="1739275200">- Type:CVE
- CVE:CVE-2025-0938
- SUG:NA
- DESC:fix CVE-2025-0938</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.9.9-42" date="1753963200">- Type:CVE
- CVE:CVE-2025-8194
- SUG:NA
- DESC:fix CVE-2025-8194</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-46" date="1758369600">- Type:CVE
- CVE:CVE-2025-6069
- SUG:NA
- DESC:fix CVE-2025-6069</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 3.9.9-47" date="1759924800">- fix CVE-2025-8291</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-48" date="1761825600">- Type:CVE
- CVE:CVE-2024-5642
- SUG:NA
- DESC:fix CVE-2024-5642</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-49" date="1762344000">- Type:CVE
- CVE:CVE-2025-6075
- SUG:NA
- DESC:fix CVE-2025-6075</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.9.9-50" date="1765886400">- Type:CVE
- CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
- SUG:NA
- DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837</changelog>
</package>
<package pkgid="6327677a1f5cb95de0c6d7e57cfd5e934ca3a6bdeeecd5b602792d02c66df4f5" name="python3" arch="src">
  <version epoch="0" ver="3.9.9" rel="52.oe2203sp4"/>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-43" date="1756728000">- Type:CVE
- CVE:CVE-2025-1795
- SUG:NA
- DESC:fix CVE-2025-1795</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-44" date="1756987200">- Type:CVE
- CVE:CVE-2025-4516
- SUG:NA
- DESC:fix CVE-2025-4516</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-45" date="1757332800">- Type:CVE
- CVE:CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435
- SUG:NA
- DESC:fix CVE-2025-4517 CVE-2025-4138 CVE-2024-12718 CVE-2025-4330 CVE-2025-4435</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-46" date="1758369600">- Type:CVE
- CVE:CVE-2025-6069
- SUG:NA
- DESC:fix CVE-2025-6069</changelog>
  <changelog author="lizhipeng &lt;lizhipeng@kylinos.cn&gt; - 3.9.9-47" date="1759924800">- fix CVE-2025-8291</changelog>
  <changelog author="xinsheng &lt;xinsheng3@h-partners.com&gt; - 3.9.9-48" date="1761825600">- Type:CVE
- CVE:CVE-2024-5642
- SUG:NA
- DESC:fix CVE-2024-5642</changelog>
  <changelog author="lipengyu &lt;lipengyu@kylinos.cn&gt; - 3.9.9-49" date="1762344000">- Type:CVE
- CVE:CVE-2025-6075
- SUG:NA
- DESC:fix CVE-2025-6075</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 3.9.9-50" date="1765886400">- Type:CVE
- CVE:CVE-2025-12084 CVE-2025-13836 CVE-2025-13837
- SUG:NA
- DESC:fix CVE-2025-12084 CVE-2025-13836 CVE-2025-13837</changelog>
  <changelog author="mapengyuan &lt;mapengyuan@xfusion.com&gt; - 3.9.9-51" date="1770897600">- Type:CVE
- CVE:CVE-2026-0865 CVE-2026-0672
- SUG:NA
- DESC:fix CVE-2026-0865 CVE-2026-0672</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 3.9.9-52" date="1772020800">- fix CVE-2026-1299</changelog>
</package>
<package pkgid="94ee97deecf90437b00101261e5499ae57dfd9c9014ab406558d88b59c375c2d" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="100.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-97" date="1723550400">- nbd/server: CVE-2024-7409: Close stray clients at server-stop
- main-loop.h: introduce qemu_in_main_thread()
- aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
- nbd/server: CVE-2024-7409: Drop non-negotiating clients
- nbd/server: CVE-2024-7409: Cap default max-connections to 100
- nbd/server: Plumb in new args to nbd_client_add()
- nbd: Minor style and typo fixes</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-98" date="1724241600">- pci-host: designware: Limit value range of iATU viewport register
- hmat acpi: Fix out of bounds access due to missing use of indirection
- migration: Skip only empty block devices
- aspeed/hace: Initialize g_autofree pointer
- hw/net/vmxnet3: Fix guest-triggerable assert()
- qxl: don't assert() if device isn't yet initialized
- Avoid unaligned fetch in ladr_match()
- linux-user: Fix waitid return of siginfo_t and rusage
- hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
- stdvga: fix screen blanking
- virtio-net: drop too short packets early
- ebpf: replace deprecated bpf_program__set_socket_filter
- vhsot-user: only read reply of SET_LOG_BASE from vq 0
- cpu: add Tengyun S5000C cpu support
- hw/virtio: Fix obtain the buffer id from the last descriptor
- hw/core: ensure kernel_end never gets used undefined</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-99" date="1726660800">- target/i386: Introduce SapphireRapids-v3 to add missing features
- qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
- hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
- target/arm: Fix alignment for VLD4.32
- hw/microblaze: pass random seed to fdt
- tests/qtest: npcm7xx-emc-test: Skip checking MAC
- tests: mark io-command test as skipped if socat is missing
- tests: unit: add NULL-pointer check
- tests: test-qga: close socket on failure to connect
- vdpa:block device capacity expansion online support vdpa block device update capacity.
- virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
- ppc/vof: Fix unaligned FDT property access
- vvfat: Fix reading files with non-continuous clusters
- vvfat: Fix bug in writing to middle of file
- savevm: Fix load_snapshot error path crash
- hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
- hw/remote/message.c: Don't directly invoke DeviceClass:reset
- crypto/tlscredspsk: Free username on finalize
- hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
- virtio: remove virtio_tswap16s() call in vring_packed_event_read()
- char-stdio: Restore blocking mode of stdout on exit
- hw/ppc: spapr: Use qemu_vfree() to free spapr-&gt;htab
- smbios: sanitize type from external type before checking have_fields_bitmap
- spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
- KVM: use store-release to mark dirty pages as harvested
- monitor/hmp: print trace as option in help for log command
- tpm_crb: Avoid backend startup just before shutdown under Xen
- crypto/block-luks: make range overlap check more readable
- spapr: Free stdout path
- target/rx: Use target_ulong for address in LI
- virtio-pci: Fix the use of an uninitialized irqfd
- rtl8139: Fix behaviour for old kernels.
- virtio-rng: block max-bytes=0 MIME-Version: 1.0
- hw/audio/es1370: Clean up comment
- vhost-user-server: do not set memory fd non-blocking
- ui: reject extended clipboard message if not activated
- virtio-net: Fix vhost virtqueue notifiers for RSS
- hw/misc/applesmc: Fix memory leak in reset() handler</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-100" date="1728907200">- mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
- softmmu: Support concurrent bounce buffers(CVE-2024-8612)
- system/physmem: Per-AddressSpace bounce buffering
- system/physmem: Propagate AddressSpace to MapClient helpers</changelog>
</package>
<package pkgid="515da0b4388b9b187c60924aeb09d76b5cb32e2ce04afed9e9538bc54209d2e0" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="109.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-100" date="1728907200">- mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
- softmmu: Support concurrent bounce buffers(CVE-2024-8612)
- system/physmem: Per-AddressSpace bounce buffering
- system/physmem: Propagate AddressSpace to MapClient helpers</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-101" date="1729512000">- python/aqmp: use absolute import statement
- sysemu: Cleanup qemu_run_machine_init_done_notifiers()
- vhost-backend: avoid overflow on memslots_limit
- hw/i386/vmmouse: Require 'i8042' property to be set
- hw/scsi/megasas: Fails command if SGL buffer overflows
- target/i386/kvm: Replace use of __u32 type
- hw/avr: Realize AVRCPU qdev object using qdev_realize()
- qemu-keymap: Add license in generated files
- configure: Symlink binaries using .exe suffix with MinGW
- ui: remove break after g_assert_not_reached()
- io/channel-websock: Replace strlen(const_str) by sizeof(const_str) - 1
- target/ppc: Add HASHKEYR and HASHPKEYR SPRs
- tests: Fix error strings
- Hexagon (target/hexagon) remove unused encodings
- target/i386: introduce insn_get_addr
- target/i386: REPZ and REPNZ are mutually exclusive
- target/i386: correctly mask SSE4a bit indices in register operands
- bios-tables-test: Make oem-fields tests be consistent
- tests/vm: update NetBSD to 9.3
- monitor/hmp-cmds: Avoid displaying bogus size in 'info pci' When BAR aren't mapped, we get:
- virtio-mem: don't warn about THP sizes on a kernel without THP Support
- Subject: [PATCH] kvm: Use 'unsigned long' for request argument in functions  wrapping ioctl()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-102" date="1732968000">- target/ppc: Remove unused xer_* macros
- hw/mips: Build fw_cfg.c once
- minikconf: print error entirely on stderr
- target/ppc: Remove extra space from s128 field in ppc_vsr_t
- hw/arm/virt:Keep Guest L1 cache type consistent with KVM
- pc-bios/keymaps: Use the official xkb name for Arabic layout, not the legacy synonym</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-103" date="1732968001">- Introduce the SM4 cipher algorithms (OSCCA GB/T 32907-2016).
- intel_iommu: Add missed sanity check for 256-bit invalidation queue
- linux-user: use 'max' instead of 'qemu32' / 'qemu64' by default
- chardev/baum: Use definitions to avoid dynamic stack allocation
- ui/console: Get tab completion working again in the SDL monitor vc
- s390x/tcg: Fix opcode for lzrf
- virtiofsd: use g_date_time_get_microsecond to get subsecond
- ui/curses: Avoid dynamic stack allocation
- target/m68k: always call gen_exit_tb() after writes to SR
- target/m68k: Perform writback before modifying SR
- target/m68k: Fix MACSR to CCR
- target/m68k: Implement atomic test-and-set
- block/nvme: nvme_process_completion() fix bound for cid
- hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure
- target/ppc: Zero second doubleword of VSR registers for FPR insns
- target/ppc: Set OV32 when OV is set
- target/ppc: Zero second doubleword for VSX madd instructions
- target/ppc: Set result to QNaN for DENBCD when VXCVI occurs
- hw/pci: Add parenthesis to PCI_BUILD_BDF macro
- intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
- acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block
- acpi: ged: Add macro for acpi sleep control register
- hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
- ui/vnc: fix handling of VNC_FEATURE_XVP
- s390/sclp: fix SCLP facility map
- docs/tools/qemu-img.rst: fix typo (sumarizes)
- chardev/char: fix qemu_chr_is_busy() check
- edu: fix DMA range upper bound check
- platform-bus: fix refcount leak
- hw/net/virtio-net: fix qemu set used ring flag even vhost started
- hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
- tests/avocado: fix typo in replay_linux
- util/userfaultfd: Remove unused uffd_poll_events
- hw/core/ptimer: fix timer zero period condition for freq &gt; 1GHz
- hcd-ohci: Drop ohci_service_iso_td() if ed-&gt;head &amp; OHCI_DPTR_MASK is zero
- tests/unit/test-vmstate: Avoid dynamic stack allocation
- hw/usb/hcd-ohci: Use definition to avoid dynamic stack allocation
- hw/i386/multiboot: Avoid dynamic stack allocation
- hw/ppc/spapr: Fix code style problems reported by checkpatch
- chardev/baum: Replace magic values by X_MAX / Y_MAX definitions
- hw/intc/xics: Avoid dynamic stack allocation
- hw/net/e1000e_core: Use definition to avoid dynamic stack allocation
- intel_iommu: Fix invalidation descriptor type field
- configs: Fix typo in the sh4-softmmu devices config file</changelog>
  <changelog author="&lt;ganqixin@huawei.com&gt; - 10:6.2.0-104" date="1734436800">- intel_iommu: Add missed reserved bit check for IEC descriptor
- 9pfs: fix crash on 'Treaddir' request
- s390x/ap: fix missing subsystem reset registration
- qemu/bswap: Undefine CPU_CONVERT() once done
- linux-user: Add missing signals in strace output
- linux-user: Add missing clock_gettime64() syscall strace</changelog>
  <changelog author="&lt;alex.chen@huawei.com&gt; - 10:6.2.0-105" date="1735128000">- target/i386: Add EPYC-Genoa model to support Zen 4 processor series
- target/i386: Add VNMI and automatic IBRS feature bits
- target/i386: Add missing feature bits in EPYC-Milan model
- target/i386: Add feature bits for CPUID_Fn80000021_EAX
- target/i386: Add a couple of feature bits in 8000_0008_EBX
- target/i386: Add new EPYC CPU versions with updated cache_info
- target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-106" date="1740139200">- hw/nvme: Remove redundant dma_blk_write
- tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
- edid: set default resolution to 1280x800 (WXGA)
- iotests/308: Fix for CAP_DAC_OVERRIDE
- hvf: remove unused but set variable
- vvfat: Fix vvfat_write() for writes before the root directory
- hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
- hw/pci: Remove unused pci_irq_pulse() method
- ui/gtk: fix leaks found wtih fuzzing
- target/i386: fix size of EBP writeback in gen_enter()
- tests/qtest/fuzz: fix memleak in qos_fuzz.c
- hw/core/loader: gunzip(): fix memory leak on error path
- migration: fix a typo
- scsi: fetch unit attention when creating the request
- raw-format: Fix error message for invalid offset/size
- tcg: Reset data_gen_ptr correctly
- Fix calculation of minimum in colo_compare_tcp
- hw/intc: Don't clear pending bits on IRQ lowering
- target/arm: Drop user-only special case in sve_stN_r
- usb-hub: Fix handling port power control messages
- target/ppc: Set ctx-&gt;opcode for decode_insn32()
- linux-user: Add proper strace format strings for getdents()/getdents64()
- linux-user: Fix TARGET_PROT_SEM for XTENSA
- linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
- linux-user/hppa: Dump IIR on register dump
- tests: Fix typo in check-help output
- qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
- hw/scsi/megasas: Simplify using the ldst API
- gqa-win: get_pci_info: Clean dev_info if handle is valid
- target/ppc: Fix 7448 support
- vvfat: Fix size of temporary qcow file
- docs: Correct 'vhost-user-blk' spelling
- jackaudio: use ifdefs to hide unavailable functions
- simplebench: Fix Python syntax error (reported by LGTM)
- python: update type hints for mypy 0.930
- Python/aqmp: fix type definitions for mypy 0.920
- tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
- hw/ppc/e500: Prefer QOM cast
- hw/ppc/e500: Remove unused "irqs" parameter
- hw/ppc/e500: Add missing device tree properties to i2c controller node
- linux-user: Show timespec on strace for futex()
- linux-user: Add strace for clock_nanosleep()
- linux-user: Fix strace of chmod() if mode == 0
- linux-user: Log failing executable in EXCP_DUMP()
- linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-107" date="1742990400">- qemu: Support specifying the cache size presented to guest
- hw/core/machine-smp: Initialize caches_bitmap before reading
- qapi/qom: Define cache enumeration and properties for machine
- linux-aio: fix unbalanced plugged counter in laio_io_unplug()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-108" date="1747224000">- vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-109" date="1747915200">- migration:Extand the fdtable in the incoming phase of migration
- qemu6.2.0: Add trace to measure hot migrate downtime</changelog>
</package>
<package pkgid="1c8556b9dfae76f56669970390033117a332ab97cf2d99789a066589d530da44" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="110.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-101" date="1729512000">- python/aqmp: use absolute import statement
- sysemu: Cleanup qemu_run_machine_init_done_notifiers()
- vhost-backend: avoid overflow on memslots_limit
- hw/i386/vmmouse: Require 'i8042' property to be set
- hw/scsi/megasas: Fails command if SGL buffer overflows
- target/i386/kvm: Replace use of __u32 type
- hw/avr: Realize AVRCPU qdev object using qdev_realize()
- qemu-keymap: Add license in generated files
- configure: Symlink binaries using .exe suffix with MinGW
- ui: remove break after g_assert_not_reached()
- io/channel-websock: Replace strlen(const_str) by sizeof(const_str) - 1
- target/ppc: Add HASHKEYR and HASHPKEYR SPRs
- tests: Fix error strings
- Hexagon (target/hexagon) remove unused encodings
- target/i386: introduce insn_get_addr
- target/i386: REPZ and REPNZ are mutually exclusive
- target/i386: correctly mask SSE4a bit indices in register operands
- bios-tables-test: Make oem-fields tests be consistent
- tests/vm: update NetBSD to 9.3
- monitor/hmp-cmds: Avoid displaying bogus size in 'info pci' When BAR aren't mapped, we get:
- virtio-mem: don't warn about THP sizes on a kernel without THP Support
- Subject: [PATCH] kvm: Use 'unsigned long' for request argument in functions  wrapping ioctl()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-102" date="1732968000">- target/ppc: Remove unused xer_* macros
- hw/mips: Build fw_cfg.c once
- minikconf: print error entirely on stderr
- target/ppc: Remove extra space from s128 field in ppc_vsr_t
- hw/arm/virt:Keep Guest L1 cache type consistent with KVM
- pc-bios/keymaps: Use the official xkb name for Arabic layout, not the legacy synonym</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-103" date="1732968001">- Introduce the SM4 cipher algorithms (OSCCA GB/T 32907-2016).
- intel_iommu: Add missed sanity check for 256-bit invalidation queue
- linux-user: use 'max' instead of 'qemu32' / 'qemu64' by default
- chardev/baum: Use definitions to avoid dynamic stack allocation
- ui/console: Get tab completion working again in the SDL monitor vc
- s390x/tcg: Fix opcode for lzrf
- virtiofsd: use g_date_time_get_microsecond to get subsecond
- ui/curses: Avoid dynamic stack allocation
- target/m68k: always call gen_exit_tb() after writes to SR
- target/m68k: Perform writback before modifying SR
- target/m68k: Fix MACSR to CCR
- target/m68k: Implement atomic test-and-set
- block/nvme: nvme_process_completion() fix bound for cid
- hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure
- target/ppc: Zero second doubleword of VSR registers for FPR insns
- target/ppc: Set OV32 when OV is set
- target/ppc: Zero second doubleword for VSX madd instructions
- target/ppc: Set result to QNaN for DENBCD when VXCVI occurs
- hw/pci: Add parenthesis to PCI_BUILD_BDF macro
- intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
- acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block
- acpi: ged: Add macro for acpi sleep control register
- hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
- ui/vnc: fix handling of VNC_FEATURE_XVP
- s390/sclp: fix SCLP facility map
- docs/tools/qemu-img.rst: fix typo (sumarizes)
- chardev/char: fix qemu_chr_is_busy() check
- edu: fix DMA range upper bound check
- platform-bus: fix refcount leak
- hw/net/virtio-net: fix qemu set used ring flag even vhost started
- hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
- tests/avocado: fix typo in replay_linux
- util/userfaultfd: Remove unused uffd_poll_events
- hw/core/ptimer: fix timer zero period condition for freq &gt; 1GHz
- hcd-ohci: Drop ohci_service_iso_td() if ed-&gt;head &amp; OHCI_DPTR_MASK is zero
- tests/unit/test-vmstate: Avoid dynamic stack allocation
- hw/usb/hcd-ohci: Use definition to avoid dynamic stack allocation
- hw/i386/multiboot: Avoid dynamic stack allocation
- hw/ppc/spapr: Fix code style problems reported by checkpatch
- chardev/baum: Replace magic values by X_MAX / Y_MAX definitions
- hw/intc/xics: Avoid dynamic stack allocation
- hw/net/e1000e_core: Use definition to avoid dynamic stack allocation
- intel_iommu: Fix invalidation descriptor type field
- configs: Fix typo in the sh4-softmmu devices config file</changelog>
  <changelog author="&lt;ganqixin@huawei.com&gt; - 10:6.2.0-104" date="1734436800">- intel_iommu: Add missed reserved bit check for IEC descriptor
- 9pfs: fix crash on 'Treaddir' request
- s390x/ap: fix missing subsystem reset registration
- qemu/bswap: Undefine CPU_CONVERT() once done
- linux-user: Add missing signals in strace output
- linux-user: Add missing clock_gettime64() syscall strace</changelog>
  <changelog author="&lt;alex.chen@huawei.com&gt; - 10:6.2.0-105" date="1735128000">- target/i386: Add EPYC-Genoa model to support Zen 4 processor series
- target/i386: Add VNMI and automatic IBRS feature bits
- target/i386: Add missing feature bits in EPYC-Milan model
- target/i386: Add feature bits for CPUID_Fn80000021_EAX
- target/i386: Add a couple of feature bits in 8000_0008_EBX
- target/i386: Add new EPYC CPU versions with updated cache_info
- target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-106" date="1740139200">- hw/nvme: Remove redundant dma_blk_write
- tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
- edid: set default resolution to 1280x800 (WXGA)
- iotests/308: Fix for CAP_DAC_OVERRIDE
- hvf: remove unused but set variable
- vvfat: Fix vvfat_write() for writes before the root directory
- hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
- hw/pci: Remove unused pci_irq_pulse() method
- ui/gtk: fix leaks found wtih fuzzing
- target/i386: fix size of EBP writeback in gen_enter()
- tests/qtest/fuzz: fix memleak in qos_fuzz.c
- hw/core/loader: gunzip(): fix memory leak on error path
- migration: fix a typo
- scsi: fetch unit attention when creating the request
- raw-format: Fix error message for invalid offset/size
- tcg: Reset data_gen_ptr correctly
- Fix calculation of minimum in colo_compare_tcp
- hw/intc: Don't clear pending bits on IRQ lowering
- target/arm: Drop user-only special case in sve_stN_r
- usb-hub: Fix handling port power control messages
- target/ppc: Set ctx-&gt;opcode for decode_insn32()
- linux-user: Add proper strace format strings for getdents()/getdents64()
- linux-user: Fix TARGET_PROT_SEM for XTENSA
- linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
- linux-user/hppa: Dump IIR on register dump
- tests: Fix typo in check-help output
- qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
- hw/scsi/megasas: Simplify using the ldst API
- gqa-win: get_pci_info: Clean dev_info if handle is valid
- target/ppc: Fix 7448 support
- vvfat: Fix size of temporary qcow file
- docs: Correct 'vhost-user-blk' spelling
- jackaudio: use ifdefs to hide unavailable functions
- simplebench: Fix Python syntax error (reported by LGTM)
- python: update type hints for mypy 0.930
- Python/aqmp: fix type definitions for mypy 0.920
- tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
- hw/ppc/e500: Prefer QOM cast
- hw/ppc/e500: Remove unused "irqs" parameter
- hw/ppc/e500: Add missing device tree properties to i2c controller node
- linux-user: Show timespec on strace for futex()
- linux-user: Add strace for clock_nanosleep()
- linux-user: Fix strace of chmod() if mode == 0
- linux-user: Log failing executable in EXCP_DUMP()
- linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-107" date="1742990400">- qemu: Support specifying the cache size presented to guest
- hw/core/machine-smp: Initialize caches_bitmap before reading
- qapi/qom: Define cache enumeration and properties for machine
- linux-aio: fix unbalanced plugged counter in laio_io_unplug()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-108" date="1747224000">- vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-109" date="1747915200">- migration:Extand the fdtable in the incoming phase of migration
- qemu6.2.0: Add trace to measure hot migrate downtime</changelog>
  <changelog author="Pengrui Zhang&lt;zhangpengrui@huawei.com&gt; - 10:6.2.0-110" date="1761134400">- hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint(CVE-2024-8354)</changelog>
</package>
<package pkgid="3be71f258fea86ee585adcb991a4d2ea035fc4a386a98d40d1b3a1bb9babbc4d" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="112.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-103" date="1732968000">- Introduce the SM4 cipher algorithms (OSCCA GB/T 32907-2016).
- intel_iommu: Add missed sanity check for 256-bit invalidation queue
- linux-user: use 'max' instead of 'qemu32' / 'qemu64' by default
- chardev/baum: Use definitions to avoid dynamic stack allocation
- ui/console: Get tab completion working again in the SDL monitor vc
- s390x/tcg: Fix opcode for lzrf
- virtiofsd: use g_date_time_get_microsecond to get subsecond
- ui/curses: Avoid dynamic stack allocation
- target/m68k: always call gen_exit_tb() after writes to SR
- target/m68k: Perform writback before modifying SR
- target/m68k: Fix MACSR to CCR
- target/m68k: Implement atomic test-and-set
- block/nvme: nvme_process_completion() fix bound for cid
- hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure
- target/ppc: Zero second doubleword of VSR registers for FPR insns
- target/ppc: Set OV32 when OV is set
- target/ppc: Zero second doubleword for VSX madd instructions
- target/ppc: Set result to QNaN for DENBCD when VXCVI occurs
- hw/pci: Add parenthesis to PCI_BUILD_BDF macro
- intel_iommu: Send IQE event when setting reserved bit in IQT_TAIL
- acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block
- acpi: ged: Add macro for acpi sleep control register
- hw/pci-bridge: Add a Kconfig switch for the normal PCI bridge
- ui/vnc: fix handling of VNC_FEATURE_XVP
- s390/sclp: fix SCLP facility map
- docs/tools/qemu-img.rst: fix typo (sumarizes)
- chardev/char: fix qemu_chr_is_busy() check
- edu: fix DMA range upper bound check
- platform-bus: fix refcount leak
- hw/net/virtio-net: fix qemu set used ring flag even vhost started
- hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
- tests/avocado: fix typo in replay_linux
- util/userfaultfd: Remove unused uffd_poll_events
- hw/core/ptimer: fix timer zero period condition for freq &gt; 1GHz
- hcd-ohci: Drop ohci_service_iso_td() if ed-&gt;head &amp; OHCI_DPTR_MASK is zero
- tests/unit/test-vmstate: Avoid dynamic stack allocation
- hw/usb/hcd-ohci: Use definition to avoid dynamic stack allocation
- hw/i386/multiboot: Avoid dynamic stack allocation
- hw/ppc/spapr: Fix code style problems reported by checkpatch
- chardev/baum: Replace magic values by X_MAX / Y_MAX definitions
- hw/intc/xics: Avoid dynamic stack allocation
- hw/net/e1000e_core: Use definition to avoid dynamic stack allocation
- intel_iommu: Fix invalidation descriptor type field
- configs: Fix typo in the sh4-softmmu devices config file</changelog>
  <changelog author="&lt;ganqixin@huawei.com&gt; - 10:6.2.0-104" date="1734436800">- intel_iommu: Add missed reserved bit check for IEC descriptor
- 9pfs: fix crash on 'Treaddir' request
- s390x/ap: fix missing subsystem reset registration
- qemu/bswap: Undefine CPU_CONVERT() once done
- linux-user: Add missing signals in strace output
- linux-user: Add missing clock_gettime64() syscall strace</changelog>
  <changelog author="&lt;alex.chen@huawei.com&gt; - 10:6.2.0-105" date="1735128000">- target/i386: Add EPYC-Genoa model to support Zen 4 processor series
- target/i386: Add VNMI and automatic IBRS feature bits
- target/i386: Add missing feature bits in EPYC-Milan model
- target/i386: Add feature bits for CPUID_Fn80000021_EAX
- target/i386: Add a couple of feature bits in 8000_0008_EBX
- target/i386: Add new EPYC CPU versions with updated cache_info
- target/i386: allow versioned CPUs to specify new cache_info</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-106" date="1740139200">- hw/nvme: Remove redundant dma_blk_write
- tests/avocado/machine_s390_ccw_virtio: Adapt test to new default resolution
- edid: set default resolution to 1280x800 (WXGA)
- iotests/308: Fix for CAP_DAC_OVERRIDE
- hvf: remove unused but set variable
- vvfat: Fix vvfat_write() for writes before the root directory
- hw/misc/nrf51_rng: Don't use BIT_MASK() when we mean BIT()
- hw/pci: Remove unused pci_irq_pulse() method
- ui/gtk: fix leaks found wtih fuzzing
- target/i386: fix size of EBP writeback in gen_enter()
- tests/qtest/fuzz: fix memleak in qos_fuzz.c
- hw/core/loader: gunzip(): fix memory leak on error path
- migration: fix a typo
- scsi: fetch unit attention when creating the request
- raw-format: Fix error message for invalid offset/size
- tcg: Reset data_gen_ptr correctly
- Fix calculation of minimum in colo_compare_tcp
- hw/intc: Don't clear pending bits on IRQ lowering
- target/arm: Drop user-only special case in sve_stN_r
- usb-hub: Fix handling port power control messages
- target/ppc: Set ctx-&gt;opcode for decode_insn32()
- linux-user: Add proper strace format strings for getdents()/getdents64()
- linux-user: Fix TARGET_PROT_SEM for XTENSA
- linux-user/hppa: Set TASK_UNMAPPED_BASE to 0xfa000000 for hppa arch
- linux-user/hppa: Dump IIR on register dump
- tests: Fix typo in check-help output
- qdev-core.h: Fix wrongly named reference to TYPE_SPLIT_IRQ
- hw/scsi/megasas: Simplify using the ldst API
- gqa-win: get_pci_info: Clean dev_info if handle is valid
- target/ppc: Fix 7448 support
- vvfat: Fix size of temporary qcow file
- docs: Correct 'vhost-user-blk' spelling
- jackaudio: use ifdefs to hide unavailable functions
- simplebench: Fix Python syntax error (reported by LGTM)
- python: update type hints for mypy 0.930
- Python/aqmp: fix type definitions for mypy 0.920
- tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
- hw/ppc/e500: Prefer QOM cast
- hw/ppc/e500: Remove unused "irqs" parameter
- hw/ppc/e500: Add missing device tree properties to i2c controller node
- linux-user: Show timespec on strace for futex()
- linux-user: Add strace for clock_nanosleep()
- linux-user: Fix strace of chmod() if mode == 0
- linux-user: Log failing executable in EXCP_DUMP()
- linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-107" date="1742990400">- qemu: Support specifying the cache size presented to guest
- hw/core/machine-smp: Initialize caches_bitmap before reading
- qapi/qom: Define cache enumeration and properties for machine
- linux-aio: fix unbalanced plugged counter in laio_io_unplug()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-108" date="1747224000">- vdpa:Fix dirty page bitmap synchronization not done after suspend for vdpa devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-109" date="1747915200">- migration:Extand the fdtable in the incoming phase of migration
- qemu6.2.0: Add trace to measure hot migrate downtime</changelog>
  <changelog author="Pengrui Zhang&lt;zhangpengrui@huawei.com&gt; - 10:6.2.0-110" date="1761134400">- hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint(CVE-2024-8354)</changelog>
  <changelog author="Pengrui Zhang &lt;zhangpengrui@huawei.com&gt; - 10:6.2.0-111" date="1769083200">- target/i386: Add Hygon Dhyana-v3 CPU model
- target/i386: Add new Hygon 'Dharma' CPU model
- migration: Don't sync volatile memory after migration completes
- hw/display/framebuffer: Add cast to force 64x64 multiply
- vmxcap: Add 5-level EPT bit
- i386: Add Icelake-Server-v6 CPU model with 5-level EPT support
- vmxcap: add tertiary execution controls
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE
- target/i386: enumerate bit 56 of MSR_IA32_VMX_BASIC
- target/i386: fix feature dependency for WAITPKG
- target/i386: add support for LAM in CPUID enumeration
- target/i386: add control bits support for LAM
- target/i386: add support for FRED in CPUID enumeration
- target/i386: mark CR4.FRED not reserved
- vmxcap: add support for VMX FRED controls
- target/i386: enumerate VMX nested-exception support
- target/i386: Add get/set/migrate support for FRED MSRs
- target/i386: Delete duplicated macro definition CR4_FRED_MASK
- target/i386: Add VMX control bits for nested FRED support
- target/i386: Raise the highest index value used for any VMCS encoding
- target/i386: Add more features enumerated by CPUID.7.2.EDX
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word
- i386/cpuid: Remove subleaf constraint on CPUID leaf 1F
- target/i386: Don't construct a all-zero entry for CPUID[0xD 0x3f]
- target/i386: Enable fdp-excptn-only and zero-fcs-fds
- target/i386: Construct CPUID 2 as stateful iff times &gt; 1
- target/i386: Make invtsc migratable when user sets tsc-khz explicitly
- target/i386/cpu: Fix notes for CPU models
- target/i386: Introduce SierraForest-v2 model
- target/i386: Export BHI_NO bit to guests
- target/i386: Add new CPU model ClearwaterForest
- docs: Add GNR, SRF and CWF CPU models
- target/i386: add sha512, sm3, sm4 feature bits
- target/i386: add avx-vnni-int16 feature
- net: pad packets to minimum length in qemu_receive_packet()(CVE-2025-12464)
- block-qdict: Fix-Werror=maybe-uninitialized build failure
- block/curl.c: Check error return from curl_easy_setopt()
- block: Handle curl 7.55.0..7.85.0 version changes
- amd_iommu: fix uninitialized werror
- io: release active GSource in TLS channel finalizer
- io: move websocket resource release to close method
- io: fix use after free in websocket handshake code(CVE-2025-11234)</changelog>
  <changelog author="Pengrui Zhang &lt;zhangpengrui@huawei.com&gt; - 10:6.2.0-112" date="1770379200">- docs: Add spec of OVMF GUIDed table for SEV guests
- target/arm: support the IPIV feature</changelog>
</package>
<package pkgid="1db4adb2b1fe8d6b57411528db050b523c80bed4be61ee3e3843ce7a6b270301" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="96.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-87" date="1703246400">- vdpa: suspend function return 0 when the vdpa device is stopped
- vdpa: don't suspend/resume device when vdpa device not started
- vdpa: support vdpa device suspend/resume
- vdpa: correct param passed in when unregister save
- vdpa: set vring enable only if the vring address has already been set
- shadow_dev: introduce shadow dev for virtio-net device
- revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
- migration: Set downtime_start even for postcopy
- gdb-xml: fix duplicate register in arm-neon.xml
- iotests: fix default machine type detection
- migration: fix RAMBlock add NULL check
- s390x: Fix spelling errors
- ppc: spelling fixes
- hw/scsi/vhost-scsi: don't double close vhostfd on error
- virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
- hw/scsi/vhost-scsi: don't leak vqs on error
- hw/i386/pc: Add missing property descriptions
- pcie_aer: Don't trigger a LSI if none are defined
- pci: Export the pci_intx() function
- hw/qdev: Cosmetic around documentation
- tests/unit: fix a -Wformat-truncation warning
- tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
- i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
- ui/vnc-clipboard: fix inflate_buffer
- hw/usb/hcd-xhci.c: spelling: tranfer</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
</package>
<package pkgid="278d86894d12d9221d4291c131ef834b0cc6c39cbd553133ae327dd476776aaa" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="97.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-88" date="1708516800">- ui/vnc.c: Fixed a deadlock bug.
- hw/i386: Fix comment style in topology.h
- migration/multifd: Remove unnecessary usage of local Error
- linux-user: fix sockaddr_in6 endianness
- vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
- iotests: fix 194: filter out racy postcopy-active event
- tests/avocado: fix waiting for vm shutdown in replay_linux
- ui/vnc: fix debug output for invalid audio message</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-89" date="1709985600">- qga-win: Fix guest-get-fsinfo multi-disks collection
- hw/timer: fix systick trace message
- virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
- ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
- esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
- net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
- net: Provide MemReentrancyGuard * to qemu_new_nic()</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-97" date="1723550400">- nbd/server: CVE-2024-7409: Close stray clients at server-stop
- main-loop.h: introduce qemu_in_main_thread()
- aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
- nbd/server: CVE-2024-7409: Drop non-negotiating clients
- nbd/server: CVE-2024-7409: Cap default max-connections to 100
- nbd/server: Plumb in new args to nbd_client_add()
- nbd: Minor style and typo fixes</changelog>
</package>
<package pkgid="f5af7d3e30728ff2edf2ad908d581db9d589fa9152a4a0665cafb9dde7aba5f7" name="qemu" arch="src">
  <version epoch="10" ver="6.2.0" rel="99.oe2203sp4"/>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-90" date="1711195200">- i386/cpuid: Move leaf 7 to correct group
- i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
- i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
- i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
- target/i386: Change wrong XFRM value in SGX CPUID leaf
- target/i386: Enable support for XSAVES based features
- target/i386: Add kvm_get_one_msr helper
- hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
- linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
- ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
- tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
- qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
- target/ppc: Modify the uncorrect value irq to n_IRQ
- block-migration: Ensure we don't crash during migration cleanup
- target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
- hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
- configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
- vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
- hw/ide/core: set ERR_STAT in unsupported command completion
- linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
- load_elf: fix iterator's type for elf file processing
- hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
- hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
- hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
- chardev/char.c: fix "abstract device type" error message
- block/rbd: fix handling of holes in .bdrv_co_block_status
- qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
- usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
- hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
- block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
- vl: Improve error message for conflicting -incoming and -loadvm
- hw/smbios: Fix OEM strings table option validation</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-91" date="1713787200">- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
- hw/virtio: Introduce virtio_bh_new_guarded() helper
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
- rtl8139: Remove unused variable
- tulip: Remove unused variable
- virtio-mem: Fix the bitmap index of the section offset
- virtio-mem: Fix the iterator variable in a vmem-&gt;rdl_list loop
- system/memory: use ldn_he_p/stn_he_p
- block: Fix crash when loading snapshot on inactive node
- smmu: Clear SMMUPciBus pointer cache when system reset
- block/mirror: Fix NULL s-&gt;job in active writes
- amd_iommu: Fix APIC address check
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
- libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
- ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
- ivshmem.c: change endianness to LITTLE_ENDIAN
- hw/ppc/mac.h: Remove MAX_CPUS macro
- configure: remove dead variables
- virtio-gpu: do not byteswap padding
- hw/intc: clean-up error reporting for failed ITS cmd
- qemu-iotests: Discard stderr when probing devices
- linux-user: un-parent OBJECT(cpu) when closing thread
- hw/net/rocker: Avoid undefined shifts with more than 31 ports
- contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
- scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-92" date="1718280000">- s390x/sclp: Simplify get_sclp_device() 
- target/ppc: Remove msr_pr macro
- docs/system/target-arm: Re-alphabetize board list
- migration: Extend query-migrate to provide dirty page limit info
- migration: Implement dirty-limit convergence algo
- migration: Put the detection logic before auto-converge checking
- migration: Refactor auto-converge capability logic
- migration: Introduce dirty-limit capability
- qapi/migration: Introduce vcpu-dirty-limit parameters
- qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
- Change the value of no_ged from true to false
- Allow UNIX socket option for VNC websocket
- tpm_emulator: Avoid double initialization during
- chardev/char-socket: Update AF_UNIX for Windows
- KVM: dirty ring: add missing memory barrier
- i386: reset KVM nested state upon CPU reset
- esp: Handle CMD_BUSRESET by resetting the SCSI bus
- dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
- vfio/pci: Add Ascend310b scend910b support
- target/i386: Export RFDS bit to guests
- target/i386: Add new CPU model SierraForest
- target/i386: Introduce Icelake-Server-v7 to enable TSX
- hw/virtio: handle un-configured shutdown in virtio-pci
- target/s390x: display deprecation status in '-cpu  help'
- target/i386: display deprecation status in '-cpu  help'
- pc-bios/s390-ccw: Fix booting with logical block size &lt; physical block size</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-93" date="1718452800">- cvm: bug-fix for macro isolation
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
- hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
- Add support for the virtcca cvm feature.</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-94" date="1718712000">- hw/arm/virt: Disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;liupingwei@huawei.com&gt; - 10:6.2.0-95" date="1718971200">- cvm: bug-fix for disable DTB randomness for confidential VMs</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-96" date="1720699200">- vdpa: Fix bug where vdpa appliance migration does not resume after rollback
- block: Parse filenames only when explicitly requested (CVE-2024-4467)
- block: introduce bdrv_open_file_child() helper
- iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
- iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
- qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
- qcow2: Do not reopen data_file in invalidate_cache
- hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
- vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
- target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
- vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
- hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-97" date="1723550400">- nbd/server: CVE-2024-7409: Close stray clients at server-stop
- main-loop.h: introduce qemu_in_main_thread()
- aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
- nbd/server: CVE-2024-7409: Drop non-negotiating clients
- nbd/server: CVE-2024-7409: Cap default max-connections to 100
- nbd/server: Plumb in new args to nbd_client_add()
- nbd: Minor style and typo fixes</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-98" date="1724241600">- pci-host: designware: Limit value range of iATU viewport register
- hmat acpi: Fix out of bounds access due to missing use of indirection
- migration: Skip only empty block devices
- aspeed/hace: Initialize g_autofree pointer
- hw/net/vmxnet3: Fix guest-triggerable assert()
- qxl: don't assert() if device isn't yet initialized
- Avoid unaligned fetch in ladr_match()
- linux-user: Fix waitid return of siginfo_t and rusage
- hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
- stdvga: fix screen blanking
- virtio-net: drop too short packets early
- ebpf: replace deprecated bpf_program__set_socket_filter
- vhsot-user: only read reply of SET_LOG_BASE from vq 0
- cpu: add Tengyun S5000C cpu support
- hw/virtio: Fix obtain the buffer id from the last descriptor
- hw/core: ensure kernel_end never gets used undefined</changelog>
  <changelog author="&lt;fengjiabo1@huawei.com&gt; - 10:6.2.0-99" date="1726660800">- target/i386: Introduce SapphireRapids-v3 to add missing features
- qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
- hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
- target/arm: Fix alignment for VLD4.32
- hw/microblaze: pass random seed to fdt
- tests/qtest: npcm7xx-emc-test: Skip checking MAC
- tests: mark io-command test as skipped if socat is missing
- tests: unit: add NULL-pointer check
- tests: test-qga: close socket on failure to connect
- vdpa:block device capacity expansion online support vdpa block device update capacity.
- virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
- ppc/vof: Fix unaligned FDT property access
- vvfat: Fix reading files with non-continuous clusters
- vvfat: Fix bug in writing to middle of file
- savevm: Fix load_snapshot error path crash
- hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
- hw/remote/message.c: Don't directly invoke DeviceClass:reset
- crypto/tlscredspsk: Free username on finalize
- hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
- virtio: remove virtio_tswap16s() call in vring_packed_event_read()
- char-stdio: Restore blocking mode of stdout on exit
- hw/ppc: spapr: Use qemu_vfree() to free spapr-&gt;htab
- smbios: sanitize type from external type before checking have_fields_bitmap
- spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
- KVM: use store-release to mark dirty pages as harvested
- monitor/hmp: print trace as option in help for log command
- tpm_crb: Avoid backend startup just before shutdown under Xen
- crypto/block-luks: make range overlap check more readable
- spapr: Free stdout path
- target/rx: Use target_ulong for address in LI
- virtio-pci: Fix the use of an uninitialized irqfd
- rtl8139: Fix behaviour for old kernels.
- virtio-rng: block max-bytes=0 MIME-Version: 1.0
- hw/audio/es1370: Clean up comment
- vhost-user-server: do not set memory fd non-blocking
- ui: reject extended clipboard message if not activated
- virtio-net: Fix vhost virtqueue notifiers for RSS
- hw/misc/applesmc: Fix memory leak in reset() handler</changelog>
</package>
<package pkgid="568f2a44ad1703850294a1d2239daaba1655ee65bbb7ea8acb34c5d62a8a97fe" name="qpdf" arch="src">
  <version epoch="0" ver="8.4.2" rel="5.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 8.4.2-3" date="1669723200">- fix missing patch when get src package from x86 architecture</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.4.2-4" date="1692619200">- Fix CVE-2021-25786</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 8.4.2-5" date="1722859200">- Fix CVE-2022-34503</changelog>
</package>
<package pkgid="78c679d15efffb6f03b4a2fdd62e49204d750c54f195594e010bf8e99bcc0b8b" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="17.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.15.2-8" date="1693569600">- Fix CVE-2023-37369</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-10" date="1698840000">- fix CVE-2023-33285</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-11" date="1698926400">- fix CVE-2023-34410</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-12" date="1700827200">- fix qtbase5.15.2-CVE-2023-38197.patch</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-13" date="1700913600">- fix qtbase5.15.2-CVE-2023-43114.patch</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-14" date="1706702400">- add qtbase5.15-CVE-2023-51714.patch</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-15" date="1713355200">- add CVE-2024-25580-qtbase-5.15.diff</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 5.15.2-16" date="1713960000">- Fix CVE-2023-45935</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-17" date="1743595200">- fix CVE-2025-30348</changelog>
</package>
<package pkgid="e5fef17ad6740a6b154d7d9b40d576bd2079026b4c1c8d45dc344d9647a48abc" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.2" rel="18.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 5.15.2-9" date="1694001600">- add loongarch64 and sw_64 syscall_fork support</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-10" date="1698840000">- fix CVE-2023-33285</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-11" date="1698926400">- fix CVE-2023-34410</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-12" date="1700827200">- fix qtbase5.15.2-CVE-2023-38197.patch</changelog>
  <changelog author="hua_yadong &lt;huayadong@kylinos.cn&gt; - 5.15.2-13" date="1700913600">- fix qtbase5.15.2-CVE-2023-43114.patch</changelog>
  <changelog author="douyan &lt;douyan@kylinos.cn&gt; - 5.15.2-14" date="1706702400">- add qtbase5.15-CVE-2023-51714.patch</changelog>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 5.15.2-15" date="1713355200">- add CVE-2024-25580-qtbase-5.15.diff</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 5.15.2-16" date="1713960000">- Fix CVE-2023-45935</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-17" date="1743595200">- fix CVE-2025-30348</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-18" date="1749297600">- fix CVE-2025-5455</changelog>
</package>
<package pkgid="5413851837ef701d7ec48542bda2963b9ebd046469058ab5b095b3284a2fb353" name="qt5-qtconnectivity" arch="src">
  <version epoch="0" ver="5.15.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-2" date="1737547200">- fix CVE-2025-23050</changelog>
</package>
<package pkgid="6deb576083eccdbff5df938bbf7e142bebfbf14ebaf7534b1f647438fb241497" name="qt5-qtdeclarative" arch="src">
  <version epoch="0" ver="5.15.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-2" date="1765368000">- fix CVE-2025-12385</changelog>
</package>
<package pkgid="2d957eaf8d499e4618000ec489f2b9c21f76af99777255526c7df4dd2ca15b59" name="qt5-qtimageformats" arch="src">
  <version epoch="0" ver="5.15.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-2" date="1760616000">- fix CVE-2025-5683</changelog>
</package>
<package pkgid="ee7d1e386be5828203df4dbb0f998f53906a3ad28a618f3f92967752e2b81a0d" name="qt5-qtsvg" arch="src">
  <version epoch="0" ver="5.15.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.15.2-2" date="1772971200">- fix CVE-2025-10729</changelog>
</package>
<package pkgid="4116544642e721ffd8f45cc407cbf0ef5ef8368a6c243ab46dff4472430a4876" name="radvd" arch="src">
  <version epoch="0" ver="2.19" rel="3.oe2203sp4"/>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 2.19-3" date="1728648000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.</changelog>
</package>
<package pkgid="ec01b25390900f4616938f0b000baaa5952b881c3cc8309911361400ed5950dc" name="radvd" arch="src">
  <version epoch="0" ver="2.19" rel="4.oe2203sp4"/>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 2.19-3" date="1728648000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.19-4" date="1741608000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:revert upstream patch to avoid functional changes</changelog>
</package>
<package pkgid="29f51d71c064390f839981a8bb8e138ca733f457ff335e6e019b362e44642bfe" name="rapidjson" arch="src">
  <version epoch="0" ver="1.1.0" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 1.1.0-11" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.1.0-12" date="1720699200">- Fix CVE-2024-38517</changelog>
</package>
<package pkgid="080336013f52a925ea580999cb9abe0d8d4ea47fbed46927d576672051e1808f" name="raptor2" arch="src">
  <version epoch="0" ver="2.0.15" rel="19.oe2203sp4"/>
  <changelog author="zhangliangpengkun &lt;zhangliangpengkun@xfusion.com&gt; - 2.0.15-19" date="1744977600">- fix CVE-2024-57823</changelog>
</package>
<package pkgid="c7842d21ba08f9dca194226936925ac639bb8fbc41741bf4e9514e512c292803" name="raptor2" arch="src">
  <version epoch="0" ver="2.0.15" rel="21.oe2203sp4"/>
</package>
<package pkgid="b1f37ebd5013192bef739eed3a0c30a2bf37b5c90e8a206945e8fadda3c9aff1" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.6.7" rel="22.oe2203sp4"/>
  <changelog author="zhangnan &lt;zhangnan134@huawei.com&gt; - 0.6.7-13" date="1687262400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ras-events:quit loop read_ras_event when kbuf data is broken</changelog>
  <changelog author="Xia Bing &lt;xiabing12@h-partners.com&gt; - 0.6.7-14" date="1698840000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 0.6.7-15" date="1701259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
       and ensure rasdaemon restart once be upgraded</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-16" date="1703073600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-17" date="1703764800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix rasdaemon disable service after upgrade</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 0.6.7-18" date="1711368000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-19" date="1712577600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete</changelog>
  <changelog author="Bing Xia &lt;xiabing12@h-partners.com&gt; - 0.6.7-20" date="1713873600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix for vendor errors are not recorded in the SQLite database if 
       some cpus are offline at the system start</changelog>
  <changelog author="yangjunshuo &lt;yangjunshuo@huawei.com&gt; - 0.6.7-21" date="1714046400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cpu isolate errors when some cpus are offline
  before the service started</changelog>
  <changelog author="Junhao He &lt;hejunhao3@huawei.com&gt; - 0.6.7-22" date="1725105600">- Type:feature
- ID:NA
- SUG:NA
- DESC:Add HBM Memory ACLS support for HiSilicon</changelog>
</package>
<package pkgid="3f172e0ef2b70634809aea9c66c4275285c3a8171d25b5a3fec426d7ffea58c5" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.6.7" rel="23.oe2203sp4"/>
  <changelog author="Xia Bing &lt;xiabing12@h-partners.com&gt; - 0.6.7-14" date="1698840000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information</changelog>
  <changelog author="renhongxun &lt;renhongxun@h-partners.com&gt; - 0.6.7-15" date="1701259200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
       and ensure rasdaemon restart once be upgraded</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-16" date="1703073600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-17" date="1703764800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix rasdaemon disable service after upgrade</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 0.6.7-18" date="1711368000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-19" date="1712577600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete</changelog>
  <changelog author="Bing Xia &lt;xiabing12@h-partners.com&gt; - 0.6.7-20" date="1713873600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix for vendor errors are not recorded in the SQLite database if 
       some cpus are offline at the system start</changelog>
  <changelog author="yangjunshuo &lt;yangjunshuo@huawei.com&gt; - 0.6.7-21" date="1714046400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cpu isolate errors when some cpus are offline
  before the service started</changelog>
  <changelog author="Junhao He &lt;hejunhao3@huawei.com&gt; - 0.6.7-22" date="1725105600">- Type:feature
- ID:NA
- SUG:NA
- DESC:Add HBM Memory ACLS support for HiSilicon</changelog>
  <changelog author="Junhao He &lt;hejunhao3@huawei.com&gt; - 0.6.7-23" date="1728734400">- Type:feature
- ID:NA
- SUG:NA
- DESC:Enable build HiSilicon HBM Memory ACLS</changelog>
</package>
<package pkgid="1281cbdc031a3cb60875b45bc1680fbf5428fcc1958ada504e3989be857941fa" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.6.7" rel="26.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-17" date="1703764800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix rasdaemon disable service after upgrade</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 0.6.7-18" date="1711368000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 0.6.7-19" date="1712577600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete</changelog>
  <changelog author="Bing Xia &lt;xiabing12@h-partners.com&gt; - 0.6.7-20" date="1713873600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix for vendor errors are not recorded in the SQLite database if 
       some cpus are offline at the system start</changelog>
  <changelog author="yangjunshuo &lt;yangjunshuo@huawei.com&gt; - 0.6.7-21" date="1714046400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix cpu isolate errors when some cpus are offline
  before the service started</changelog>
  <changelog author="Junhao He &lt;hejunhao3@huawei.com&gt; - 0.6.7-22" date="1725105600">- Type:feature
- ID:NA
- SUG:NA
- DESC:Add HBM Memory ACLS support for HiSilicon</changelog>
  <changelog author="Junhao He &lt;hejunhao3@huawei.com&gt; - 0.6.7-23" date="1728734400">- Type:feature
- ID:NA
- SUG:NA
- DESC:Enable build HiSilicon HBM Memory ACLS</changelog>
  <changelog author="Yongkang Hou &lt;houyongkang@inspur.com&gt; - 0.6.7-24" date="1731153600">- Type:feature
- ID:NA
- SUG:NA
- DESC:update description</changelog>
  <changelog author="guodashun &lt;guodashun1@huawei.com&gt; - 0.6.7-25" date="1734350400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:set to default when param is overflow</changelog>
  <changelog author="zhangnan &lt;zhangnan134@huawei.com&gt; - 0.6.7-26" date="1745064000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ras-mc-ctl --summary failed</changelog>
</package>
<package pkgid="49579eef08a331e095179ba71da2796599450ff9ed9c866d0467da0ab3074e3b" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="27.oe2203sp4"/>
  <changelog author="Juan Zhou &lt;zhoujuan51@h-partners.com&gt; - 41.0-18" date="1698321600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Skip resolving MAC for RDMA over UBLink</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-19" date="1698753600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Support STARS over RDMA</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-20" date="1700654400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Get dmac from kernel driver</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-21" date="1701086400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Corrects several minor issues found in review</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-22" date="1701432000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Bugfix for wrong timing of modifying ibv_qp state to err</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-23" date="1701950400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Bugfix for lock and owner bit</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-24" date="1702036800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing DB when compiler does not support SVE</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-25" date="1702382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix congest type flags error and replace a corrupt patch</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 41.0-26" date="1723118400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: ibnetdisc: Fix leak in add_to_portlid_hash</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-27" date="1724328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes several bugs for hns</changelog>
</package>
<package pkgid="4aa83ccf56fdb91279abc021a1e4f93b61e4e24ff5f7a7849c47d3881ef3eb99" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="29.oe2203sp4"/>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-20" date="1700654400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Get dmac from kernel driver</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-21" date="1701086400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Corrects several minor issues found in review</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-22" date="1701432000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Bugfix for wrong timing of modifying ibv_qp state to err</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-23" date="1701950400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Bugfix for lock and owner bit</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-24" date="1702036800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing DB when compiler does not support SVE</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-25" date="1702382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix congest type flags error and replace a corrupt patch</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 41.0-26" date="1723118400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: ibnetdisc: Fix leak in add_to_portlid_hash</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-27" date="1724328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes several bugs for hns</changelog>
  <changelog author="Wentao Hu &lt;huwentao19@h-partners.com&gt; - 41.0-28" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Two bugfixes in post_send flow</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-29" date="1735819200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed two bugs in libhns</changelog>
</package>
<package pkgid="a7031540231958475b1359674d0f39a110979e17ca7819c764ed364add013f56" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="32.oe2203sp4"/>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-23" date="1701950400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Bugfix for lock and owner bit</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-24" date="1702036800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing DB when compiler does not support SVE</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-25" date="1702382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix congest type flags error and replace a corrupt patch</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 41.0-26" date="1723118400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: ibnetdisc: Fix leak in add_to_portlid_hash</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-27" date="1724328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes several bugs for hns</changelog>
  <changelog author="Wentao Hu &lt;huwentao19@h-partners.com&gt; - 41.0-28" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Two bugfixes in post_send flow</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-29" date="1735819200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed two bugs in libhns</changelog>
  <changelog author="Dazhao Lao &lt;laodazhao@huawei.com&gt; - 41.0-30" date="1740484800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed roh ud wqe dmac in libhns</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-31" date="1740657600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing fields for SRQ WC</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-32" date="1741089600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Add Yunsilicon user space RDMA driver</changelog>
</package>
<package pkgid="1996bea3059455257999d521618e1f35cf1509b10a9045777d64e77464e4d71c" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="33.oe2203sp4"/>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-24" date="1702036800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing DB when compiler does not support SVE</changelog>
  <changelog author="Ran Zhou &lt;zhouran10@h-partners.com&gt; - 41.0-25" date="1702382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix congest type flags error and replace a corrupt patch</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 41.0-26" date="1723118400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: ibnetdisc: Fix leak in add_to_portlid_hash</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-27" date="1724328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes several bugs for hns</changelog>
  <changelog author="Wentao Hu &lt;huwentao19@h-partners.com&gt; - 41.0-28" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Two bugfixes in post_send flow</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-29" date="1735819200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed two bugs in libhns</changelog>
  <changelog author="Dazhao Lao &lt;laodazhao@huawei.com&gt; - 41.0-30" date="1740484800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed roh ud wqe dmac in libhns</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-31" date="1740657600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing fields for SRQ WC</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-32" date="1741089600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Add Yunsilicon user space RDMA driver</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-33" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes some bugs for libhns</changelog>
</package>
<package pkgid="f8273ad6d71d9fb9ba43ab483660925fe2e36ff97c88880e6216f62f2a25e31b" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="36.oe2203sp4"/>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-27" date="1724328000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes several bugs for hns</changelog>
  <changelog author="Wentao Hu &lt;huwentao19@h-partners.com&gt; - 41.0-28" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Two bugfixes in post_send flow</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-29" date="1735819200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed two bugs in libhns</changelog>
  <changelog author="Dazhao Lao &lt;laodazhao@huawei.com&gt; - 41.0-30" date="1740484800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed roh ud wqe dmac in libhns</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-31" date="1740657600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing fields for SRQ WC</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-32" date="1741089600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Add Yunsilicon user space RDMA driver</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-33" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes some bugs for libhns</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-34" date="1742472000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: [libxscale] Match dev by vid and did</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-35" date="1747224000">- Type: feature
- ID: NA
- SUG: NA
- DESC: [libxscale] update to version 2412GA</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 41.0-36" date="1751976000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches for libhns</changelog>
</package>
<package pkgid="30c25e9808002d4dffc75d57a2376f845455c6b9e4cd141030ff99419917b915" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="37.oe2203sp4"/>
  <changelog author="Wentao Hu &lt;huwentao19@h-partners.com&gt; - 41.0-28" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Two bugfixes in post_send flow</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-29" date="1735819200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed two bugs in libhns</changelog>
  <changelog author="Dazhao Lao &lt;laodazhao@huawei.com&gt; - 41.0-30" date="1740484800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixed roh ud wqe dmac in libhns</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-31" date="1740657600">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix missing fields for SRQ WC</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-32" date="1741089600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Add Yunsilicon user space RDMA driver</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-33" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes some bugs for libhns</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-34" date="1742472000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: [libxscale] Match dev by vid and did</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-35" date="1747224000">- Type: feature
- ID: NA
- SUG: NA
- DESC: [libxscale] update to version 2412GA</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 41.0-36" date="1751976000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches for libhns</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-37" date="1756382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Magic number and Whitespace warning cleanup</changelog>
</package>
<package pkgid="29dd115cb122d487cd4911cb5ab908f49898377fe8f613aa55a929255eb32163" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="41.oe2203sp4"/>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-32" date="1741089600">- Type: requirement
- ID: NA
- SUG: NA
- DESC: Add Yunsilicon user space RDMA driver</changelog>
  <changelog author="Xinghai Cen &lt;cenxinghai@h-partners.com&gt; - 41.0-33" date="1741780800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fixes some bugs for libhns</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-34" date="1742472000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: [libxscale] Match dev by vid and did</changelog>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-35" date="1747224000">- Type: feature
- ID: NA
- SUG: NA
- DESC: [libxscale] update to version 2412GA</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 41.0-36" date="1751976000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches for libhns</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-37" date="1756382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Magic number and Whitespace warning cleanup</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 41.0-38" date="1757678400">- fix sw_64 error: File not found</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-39" date="1761566400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data when QP wraps around</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-40" date="1762776000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; - 41.0-41" date="1762862400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: rxe: Fix double unlock in cq_ex polling</changelog>
</package>
<package pkgid="e3a0520ced229328cb10f5b9b7a39bc7082cc1f53004b10d2582960a33111d1e" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="44.oe2203sp4"/>
  <changelog author="Xin Tian &lt;tianx@yunsilicon.com&gt; - 41.0-35" date="1747224000">- Type: feature
- ID: NA
- SUG: NA
- DESC: [libxscale] update to version 2412GA</changelog>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 41.0-36" date="1751976000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches for libhns</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-37" date="1756382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Magic number and Whitespace warning cleanup</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 41.0-38" date="1757678400">- fix sw_64 error: File not found</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-39" date="1761566400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data when QP wraps around</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-40" date="1762776000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; - 41.0-41" date="1762862400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: rxe: Fix double unlock in cq_ex polling</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-42" date="1769428800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix the CI</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-43" date="1769428801">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Improvements to CQ Handling and Error State Debugging</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-44" date="1770292800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Remove MW support</changelog>
</package>
<package pkgid="107b75bbbc6628286330757012f258ab6eb47250f70faf071094ace221811365" name="rdma-core" arch="src">
  <version epoch="0" ver="41.0" rel="45.oe2203sp4"/>
  <changelog author="Guofeng Yue &lt;yueguofeng@h-partners.com&gt; - 41.0-36" date="1751976000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Sync some patches for libhns</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-37" date="1756382400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Magic number and Whitespace warning cleanup</changelog>
  <changelog author="zhang_chunjing &lt;zhang_chunjing@hoperun.com&gt; - 41.0-38" date="1757678400">- fix sw_64 error: File not found</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-39" date="1761566400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data when QP wraps around</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-40" date="1762776000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around</changelog>
  <changelog author="huangwenhua &lt;huangwenhua@kylinos.cn&gt; - 41.0-41" date="1762862400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: rxe: Fix double unlock in cq_ex polling</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-42" date="1769428800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Fix the CI</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-43" date="1769428801">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: Improvements to CQ Handling and Error State Debugging</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-44" date="1770292800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: libhns: Remove MW support</changelog>
  <changelog author="Donghua Huang &lt;huangdonghua3@h-partners.com&gt; - 41.0-45" date="1774440000">- Type: feature
- ID: NA
- SUG: NA
- DESC: Add tracing support for libhns, including HNS RoCE I/O tracepoints and USDT support</changelog>
</package>
<package pkgid="95d866541b74f786c5a0df8e6ec0e8a797200078f403a63305a28c8979cfd285" name="redis" arch="src">
  <version epoch="0" ver="4.0.14" rel="7.oe2203sp4"/>
  <changelog author="wushaozheng&lt;wushaozheng@ncti-gba.cn&gt; - 4.0.14-2" date="1679918400">- Fix CVE-2022-36021.patch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.14-3" date="1680523200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 4.0.14-4" date="1680523201">- Update config.guess and config.sub for loongarch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-5" date="1684152000">- Fix CVE-2023-28856</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
</package>
<package pkgid="24b7c30985964d4ede3151eccccc9c552ce3a16e1f99ecf7538dcbc59d568cac" name="redis" arch="src">
  <version epoch="0" ver="7.2.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.7-1" date="1739361600">- Update to 7.2.7
- Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
  CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
  CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
  CVE-2023-25155 CVE-2024-46981</changelog>
  <changelog author="mahailiang &lt;mahailiang@uniontech.com&gt; - 7.2.7-2" date="1741348800">- add sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.8-1" date="1746360000">- Update to 7.2.8 to fix CVE-2025-21605</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.9-1" date="1748433600">- update to 7.2.9 to fix CVE-2025-27151</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.9-2" date="1749124800">- Fix CVE-2025-49112</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.10-1" date="1752148800">- Update to 7.2.10
- Fix CVE-2025-32023 CVE-2025-48367</changelog>
</package>
<package pkgid="0fb83db9c96dcf044f8e0081b87987fb7ebb95668e7873e766bd7c4e4aa3ba22" name="redis" arch="src">
  <version epoch="0" ver="7.2.11" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.7-1" date="1739361600">- Update to 7.2.7
- Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
  CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
  CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
  CVE-2023-25155 CVE-2024-46981</changelog>
  <changelog author="mahailiang &lt;mahailiang@uniontech.com&gt; - 7.2.7-2" date="1741348800">- add sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.8-1" date="1746360000">- Update to 7.2.8 to fix CVE-2025-21605</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.9-1" date="1748433600">- update to 7.2.9 to fix CVE-2025-27151</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.9-2" date="1749124800">- Fix CVE-2025-49112</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.10-1" date="1752148800">- Update to 7.2.10
- Fix CVE-2025-32023 CVE-2025-48367</changelog>
  <changelog author="Liu Qingtao &lt;liu.qingtao2@zte.com.cn&gt; - 7.2.10-2" date="1758196800">- Added support for unaligned access optimizations on RISC-V with Zicclsm extension.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.11-1" date="1759924800">- update to 7.2.11
  * fix CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819</changelog>
</package>
<package pkgid="0f54f327ef98683293a381783f6cc243225b3263476e0a83a12bd74f7b46dcb7" name="redis" arch="src">
  <version epoch="0" ver="7.2.7" rel="1.oe2203sp4"/>
  <changelog author="wushaozheng&lt;wushaozheng@ncti-gba.cn&gt; - 4.0.14-2" date="1679918400">- Fix CVE-2022-36021.patch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 4.0.14-3" date="1680523200">- Add sw64 architecture</changelog>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 4.0.14-4" date="1680523201">- Update config.guess and config.sub for loongarch</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-5" date="1684152000">- Fix CVE-2023-28856</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.7-1" date="1739361600">- Update to 7.2.7
- Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
  CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
  CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
  CVE-2023-25155 CVE-2024-46981</changelog>
</package>
<package pkgid="474f7952addf3da0401bd13fb8ef6147ed6c4839ee3f2b8ca37fc7444224591c" name="redis" arch="src">
  <version epoch="0" ver="7.2.8" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-5" date="1684152000">- Fix CVE-2023-28856</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.7-1" date="1739361600">- Update to 7.2.7
- Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
  CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
  CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
  CVE-2023-25155 CVE-2024-46981</changelog>
  <changelog author="mahailiang &lt;mahailiang@uniontech.com&gt; - 7.2.7-2" date="1741348800">- add sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.8-1" date="1746360000">- Update to 7.2.8 to fix CVE-2025-21605</changelog>
</package>
<package pkgid="d273ddde3189d3dfe8121c395a9d253c9bcd812bbe4f699dddac3f2cf97e8c77" name="redis" arch="src">
  <version epoch="0" ver="7.2.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.0.14-6" date="1690804800">- Fix CVE-2022-24834</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 4.0.14-7" date="1729080000">- Fix CVE-2023-45145,CVE-2024-31228 and CVE-2024-31449</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.7-1" date="1739361600">- Update to 7.2.7
- Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
  CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
  CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
  CVE-2023-25155 CVE-2024-46981</changelog>
  <changelog author="mahailiang &lt;mahailiang@uniontech.com&gt; - 7.2.7-2" date="1741348800">- add sw_64 support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.8-1" date="1746360000">- Update to 7.2.8 to fix CVE-2025-21605</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.2.9-1" date="1748433600">- update to 7.2.9 to fix CVE-2025-27151</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.2.9-2" date="1749124800">- Fix CVE-2025-49112</changelog>
</package>
<package pkgid="f8eba22e3b2d57865be11627bf7852128ad2bb01b5438bd60bb6d4fc768abac0" name="redis6" arch="src">
  <version epoch="0" ver="6.2.7" rel="6.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@h-partners.com&gt; - 6.2.7-3" date="1703073600">- add Conflicts with redis and redis5</changelog>
  <changelog author="zhangliangpengkun &lt;zhangliangpengkun@xfusion.com&gt; - 6.2.7-4" date="1760011200">- fix CVE-2025-49844</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.2.7-5" date="1764849600">- Fix CVE-2025-21605 CVE-2025-32023 CVE-2025-48367</changelog>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 6.2.7-6" date="1764849601">- Fix CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
</package>
<package pkgid="d1f5241e6bd5c33f7fcc235784d9493aed003613324d0a90c10a2d2174dc4e64" name="resource-agents" arch="src">
  <version epoch="0" ver="4.2.0" rel="5.oe2203sp4"/>
  <changelog author="wubijie123 &lt;wubijie@kyliuos.cn&gt; - 4.2.0-5" date="1751457600">- Type:cves
- ID:CVE-2024-47081
- SUG:NA
- DESC:Batch fix cves through rebuild</changelog>
</package>
<package pkgid="6d2f63a7533fdf6f3f295ac82e0bd97991ef595f6f1904e85d771e90c1330595" name="rpcbind" arch="src">
  <version epoch="0" ver="1.2.6" rel="8.oe2203sp4"/>
  <changelog author="wangqing &lt;wangqing151@huawei.com&gt; - 1.2.6-5" date="1679918400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add macro WITHOUT_SYSTEMD to relieve dependence on systemd</changelog>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.2.6-6" date="1684756800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add a user directory when the rpc user directory does not exist</changelog>
  <changelog author="liuhaipeng &lt;liuhaipeng@xfusion.com&gt; - 1.2.6-7" date="1688299200">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:fix the upgrade or upgrade exception alarm</changelog>
  <changelog author="sunsuwan &lt;sunsuwan3@huawei.com&gt; - 1.2.6-8" date="1718712000">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add back the mistakenly deleted triggerin</changelog>
</package>
<package pkgid="11f8120a6c60c8771120a2fc096d6ee34b6e48b51fca478d40f444a140d30462" name="rpm" arch="src">
  <version epoch="0" ver="4.17.0" rel="45.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 4.17.0-36" date="1711454400">- fix macros autopath num error</changelog>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-37" date="1715083200">- Backport some patches from upstream</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 4.17.0-38" date="1717502400">- Don't segfault on missing priority tag</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-39" date="1720180800">- IMA digest list plugin support signature within IMA header</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 4.17.0-40" date="1721649600">- Backport some patches from upstream</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-41" date="1724068800">- Fix the judgement of digests count</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-42" date="1724155200">- Fix the wrong IMA signature header check</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-43" date="1724328000">- Fix the calculation of hdr size</changelog>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-44" date="1725364800">- Backport some patches from upstream</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.17.0-45" date="1729944000">- fix RPM_LD_FLAGS not got exported</changelog>
</package>
<package pkgid="e2768aeeff5e545442d2befb1fc7a6e1934bf4e8bb0ca2156c9986fe3eeeaae5" name="rpm" arch="src">
  <version epoch="0" ver="4.17.0" rel="46.oe2203sp4"/>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-37" date="1715083200">- Backport some patches from upstream</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 4.17.0-38" date="1717502400">- Don't segfault on missing priority tag</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-39" date="1720180800">- IMA digest list plugin support signature within IMA header</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 4.17.0-40" date="1721649600">- Backport some patches from upstream</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-41" date="1724068800">- Fix the judgement of digests count</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-42" date="1724155200">- Fix the wrong IMA signature header check</changelog>
  <changelog author="luhuaxin &lt;luhuaxin1@huawei.com&gt; - 4.17.0-43" date="1724328000">- Fix the calculation of hdr size</changelog>
  <changelog author="gengqihu&lt;gengqihu2@h-partners.com&gt; - 4.17.0-44" date="1725364800">- Backport some patches from upstream</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.17.0-45" date="1729944000">- fix RPM_LD_FLAGS not got exported</changelog>
  <changelog author="hugel&lt;gengqihu2@h-partners.com&gt; - 4.17.0-46" date="1732622400">- sync patches from upstream</changelog>
</package>
<package pkgid="f53fab580dc569fd3175064b188df2144ff772353492ede802098a050f4fcf8b" name="rpm-ostree" arch="src">
  <version epoch="0" ver="2022.16" rel="5.oe2203sp4"/>
  <changelog author="chenmaodong &lt;chenmaodong@xfusion.com&gt; - 2022.8-4" date="1672315200">- Fix has_modules_enable() check</changelog>
  <changelog author="duyiwei &lt;duyiwei@kylinos.cn&gt; - 2022.16-1" date="1684756800">- Update rpm-ostree to 2022.16.</changelog>
  <changelog author="Jingwiw  &lt;wangjingwei@iscas.ac.cn&gt; - 2022.16-2" date="1691150400">- enable riscv64 architecture</changelog>
  <changelog author="wangyueliang &lt;wangyueliang@kylinos.cn&gt; - 2022.16-3" date="1695038400">- fix compose error for selinux.
- add-for-support-NestOS-kernel.</changelog>
  <changelog author="wangyueliang &lt;wangyueliang@kylinos.cn&gt; - 2022.16-4" date="1697198400">- merge feature from branch openEuler-22.03-LTS-SP1：
- DESC: add loongarch64 and sw_64 support
- AUTHOR: panchenbo &lt;panchenbo@kylinsec.com.cn&gt;</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2022.16-5" date="1728993600">- Fix compilation on Rust-1.76</changelog>
</package>
<package pkgid="b5f35ed5871788ebe79ce7b45bdff507c325e3912e611ed6585832e550e5fc96" name="rpmrebuild" arch="src">
  <version epoch="0" ver="2.16" rel="16.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-10" date="1705060800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix errors found from shellcheck scan</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-11" date="1705320000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix failure when recompiling noarch rpm and remove the require to rpm-build</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-12" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert: remove the require to rpm-build.For consistency with other community-released dependencies</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.16-13" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:avoid truncate trailer space and do not escape backslash when read filename</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.16-14" date="1722513600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert "avoid truncate trailer space and do not escape backslash when read filename"</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 2.16-15" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 2.16-16" date="1749729600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem of %defattr missing</changelog>
</package>
<package pkgid="2926b137d37badd84226c54399fe714c48dc2e729ae449bb53c250468f4a0757" name="rsync" arch="src">
  <version epoch="0" ver="3.2.5" rel="4.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.2.5-4" date="1736942400">- fix CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088,
  CVE-2024-12747</changelog>
</package>
<package pkgid="48a97f273bc6b17809e72aecebd30e7f5e618b8120e99ebb5c1ce8d70bbfaf70" name="rsync" arch="src">
  <version epoch="0" ver="3.2.5" rel="5.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.2.5-4" date="1736942400">- fix CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088,
  CVE-2024-12747</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.2.5-5" date="1763640000">- fix CVE-2025-10158</changelog>
</package>
<package pkgid="89bf98bb6e46318a3b8f4f8eac40b4760a2ddfd8e30b35fab9142d19e08795dd" name="rsyslog" arch="src">
  <version epoch="0" ver="8.2210.0" rel="10.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2210.0-6" date="1696680000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:adapt for non-systemd scenario</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2210.0-7" date="1703505600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove rsyslog-doc package</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2210.0-8" date="1711022400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tcp net subsystem: handle data race gracefully
       fix startup issue on modern systemd systems
       tcpflood bugfix: plain tcp send error not properly reported
       tcpflood bugfix: TCP sending was not implemented properly
       lookup tables: fix static analyzer issue
       lookup tables bugfix: reload on HUP did not work when backgrounded
       openssl: Replaced depreceated method SSLv23_method with TLS_method
       mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
       core bugfix: potential segfault on busy systems
       imfile: fix ext directory's fd leak in case of inotify on symlink
       imfile tests: ext directory's fd leak in case of inotify on symlink</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2210.0-9" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:imfile: remove state file on file delete fix
       omfile: do not carry out actual action when writing to /dev/null
       core bugfix: rsyslog messages may not always have FQDN</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 8.2210.0-10" date="1759147200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rainerscript: do not try to call a function if it does not exist
       gnutls bugfix: Avoid blocking sockets during TLS handshake
       gnutls bugfix: Add timeout to GnuTLS handshake
       core: fix potential NULL ptr access on HUP in very early startup phase
       omfwd: fix segfault in UDP freeaddrinfo
       gnutls TLS driver: fix small memory leak
       rsyslog startup bugfix: cosmetic memory leak
       core: fix potential misadressing in sigmask
       covscan: remove defect type of RESOURCE_LEAK
       Fix a buffer overflow when the argument to replace is empty
       Fix passing the value to EscapeChar
       Do not free the uninitialized cstring
       Keep original free pattern
       network subsystem: improve connection failure error message
       Fix runConf NULL pointer refence
       nsd_ptcp regression fix: remove debugging messages emited to stderr</changelog>
</package>
<package pkgid="a41a2ae554e586f2619ad734d449a1f4a47af3d7b5a2e1aa5fa9a01d7c8a0a79" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="136.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-127" date="1663848000">- remove duplicated bigdecimal.rb file</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
</package>
<package pkgid="5eb771eb614457e919e6bac035a97345cc0a0b0707de58ee11ccc0213b6f42b1" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="137.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-128" date="1672920000">- fix CVE-2021-33621</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-129" date="1681214400">- fix CVE-2023-28755 CVE-2023-28756</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
</package>
<package pkgid="c7c7b3aef718c0408a8aacf780542ee81bb9bedf968438b1bfb8227c6ebea286" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="139.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-130" date="1685707200">- remove rubygem-power_assert</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-131" date="1688817600">- fix CVE-2023-36617</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
</package>
<package pkgid="f2de182c7666eb9003d45062370cdea865be2bc69d31bc7733cddc9368e6f19c" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="141.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-132" date="1711454400">- fix CVE-2024-27280 and CVE-2024-27281</changelog>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-140" date="1728388800">- fix CVE-2024-47220</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-141" date="1730203200">- fix CVE-2024-49761</changelog>
</package>
<package pkgid="41f09517c4795e73cd09725147b9d4bc12daa5d8a72d78fa12c701c41b1776ea" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="142.oe2203sp4"/>
  <changelog author="zhoupengcheng11 &lt;zhoupengcheng11@huawei.com&gt; - 3.0.3-133" date="1714996800">- fix CVE-2024-27282</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-140" date="1728388800">- fix CVE-2024-47220</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-141" date="1730203200">- fix CVE-2024-49761</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-142" date="1740744000">- fix CVE-2025-27219 CVE-2025-27220 CVE-2025-27221</changelog>
</package>
<package pkgid="1e4b70e7375884637add0791f92f7ff89ceabcb817543ae5b799d8652f13329c" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="143.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-134" date="1716811200">- Dump plain objects as RDoc::Options so that the generated .rdoc_options file is loadable</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-140" date="1728388800">- fix CVE-2024-47220</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-141" date="1730203200">- fix CVE-2024-49761</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-142" date="1740744000">- fix CVE-2025-27219 CVE-2025-27220 CVE-2025-27221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-143" date="1749124800">- fix CVE-2025-43857</changelog>
</package>
<package pkgid="f8518caf978b89587c3bfb8f2df821c7e7a05c355e695f4a3a75467d72fa38cb" name="ruby" arch="src">
  <version epoch="0" ver="3.0.3" rel="144.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-135" date="1718712000">- fix CVE-2024-35221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-136" date="1720267200">- upgrade rexml to fix CVE-2024-36176</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 3.0.3-137" date="1723204800">- fix CVE-2024-41946</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-138" date="1725019200">- license compliance rectification</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-139" date="1725278400">- upgrade rexml to fix CVE-2024-39908 CVE-2024-41123 CVE-2024-43398</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-140" date="1728388800">- fix CVE-2024-47220</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-141" date="1730203200">- fix CVE-2024-49761</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-142" date="1740744000">- fix CVE-2025-27219 CVE-2025-27220 CVE-2025-27221</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-143" date="1749124800">- fix CVE-2025-43857</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 3.0.3-144" date="1762603200">- fix CVE-2025-58767 CVE-2025-61594</changelog>
</package>
<package pkgid="f1ef7d6ddd9a67a1f5332e4c8742c14ebd4700dc8ba0ee517e1d403fdabdfc20" name="rubygem-actionmailer" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-2" date="1729166400">- Fix CVE-2024-47889</changelog>
</package>
<package pkgid="8d2960961992295afb01fe79389f8c5e76b92e40c5d4ae33246ecba259a249a6" name="rubygem-actionpack" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="6.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-2" date="1666267200">- Fix compilation failed</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-3" date="1690200000">- Fix CVE-2023-28362</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-4" date="1707134400">- Fix CVE-2023-22792 and CVE-2023-22795</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-5" date="1717675200">- Fix CVE-2024-28103</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:6.1.4.1-6" date="1719316800">- Type:CVES
- ID:CVE-2022-23633
- SUG:NA
- DESC:fix CVE-2022-23633</changelog>
</package>
<package pkgid="1a7b7d7650924473c5038401f6e166f8f29ffb85afe5f6274dba05179c7fd6cc" name="rubygem-actionpack" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-2" date="1666267200">- Fix compilation failed</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-3" date="1690200000">- Fix CVE-2023-28362</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-4" date="1707134400">- Fix CVE-2023-22792 and CVE-2023-22795</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-5" date="1717675200">- Fix CVE-2024-28103</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:6.1.4.1-6" date="1719316800">- Type:CVES
- ID:CVE-2022-23633
- SUG:NA
- DESC:fix CVE-2022-23633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:6.1.4.1-7" date="1729166400">- Fix CVE-2024-41128 and CVE-2024-47887</changelog>
</package>
<package pkgid="644d16a427c75f2603bcacb9ab71f476167d1a9a8bccc334860fee9b3111753a" name="rubygem-activesupport" arch="src">
  <version epoch="1" ver="6.1.4.1" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan32@h-partners.com&gt; - 6.1.4.1-2" date="1657022400">- Add support dalli 3.2.2</changelog>
  <changelog author="wushaozheng &lt;wushaozheng@ncti-gba.cn&gt; - 1:6.1.4.1-3" date="1676980800">- fix CVE-2023-22796</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-4" date="1678363200">- Fix the self-compilation problem</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:6.1.4.1-5" date="1678449600">- Rectify the failure to start memcached as the root user</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-6" date="1694433600">- Fix CVE-2023-38037</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:6.1.4.1-7" date="1719316800">- Type:CVES
- ID:CVE-2022-23633
- SUG:NA
- DESC:fix CVE-2022-23633</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:6.1.4.1-8" date="1719403200">- Fix CVE-2023-28120</changelog>
</package>
<package pkgid="9e8d924e9a7e259d51119ba5c361b181d6992a4976173b273730b19a8b5c84f7" name="rubygem-bcrypt" arch="src">
  <version epoch="0" ver="3.1.12" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.1.12-2" date="1774267200">- Fix CVE-2026-33306</changelog>
</package>
<package pkgid="102183b18b612b537acdc895b2c6a2428a6fcdc9d6d01ce6271759f76db957ce" name="rubygem-mini_magick" arch="src">
  <version epoch="0" ver="4.8.0" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 4.8.0-6" date="1756382400">- Fix testing with current versions of ImageMagick</changelog>
</package>
<package pkgid="f0c954d4ca70b2f017c59a1ee06004a7ec2c0864a6869f206dd976ea66c40f81" name="rubygem-puma" arch="src">
  <version epoch="0" ver="5.6.5" rel="3.oe2203sp4"/>
  <changelog author="cadongxia &lt;caodongxia@h-partners.com&gt; - 5.5.2-1" date="1667304000">- Upgrade to 5.5.2</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.5.2-2" date="1702987200">- Fix CVE-2022-23634</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.6.5-1" date="1712836800">- Update to 5.6.5
- Fix CVE-2022-24790,CVE-2023-40175,CVE-2024-21647</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 5.6.5-2" date="1723032000">- OpenSSL certificate has expired, skip relevant test case</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.6.5-3" date="1727438400">- Fix CVE-2024-45614</changelog>
</package>
<package pkgid="492a9d68a3016a1623d971eca38c09381fdde9b15c7c97dd531f89e8b0cfeff8" name="rubygem-rack" arch="src">
  <version epoch="1" ver="2.2.3.1" rel="5.oe2203sp4"/>
  <changelog author="sjxur &lt;sjxur@isoftstone.com&gt; - 1:2.2.3.1-2" date="1681905600">- fix issue(I6UCVJ) for rubygem-rack build problem in openEuler:22.03:LTS:Next</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:2.2.3.1-3" date="1720008000">- Fix CVE-2024-39316</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-4" date="1720180800">- Type:CVES
- ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
- SUG:NA
- DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-5" date="1720180801">- Type:CVES
- ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
- SUG:NA
- DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572</changelog>
</package>
<package pkgid="6dbc7f00c38795abef6d02896c08ae7cba3bb05d20f2b4712af70a9a4ea4ebd9" name="rubygem-rack" arch="src">
  <version epoch="1" ver="2.2.3.1" rel="8.oe2203sp4"/>
  <changelog author="sjxur &lt;sjxur@isoftstone.com&gt; - 1:2.2.3.1-2" date="1681905600">- fix issue(I6UCVJ) for rubygem-rack build problem in openEuler:22.03:LTS:Next</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:2.2.3.1-3" date="1720008000">- Fix CVE-2024-39316</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-4" date="1720180800">- Type:CVES
- ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
- SUG:NA
- DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-5" date="1720180801">- Type:CVES
- ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
- SUG:NA
- DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-6" date="1741780800">- Type:CVE
- CVE:CVE-2025-27610
- SUG:NA
- DESC:fix CVE-2025-27610</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-7" date="1741867200">- Type:CVE
- CVE:CVE-2025-27111
- SUG:NA
- DESC:fix CVE-2025-27111</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-8" date="1742299200">- Type:CVE
- CVE:CVE-2025-25184
- SUG:NA
- DESC:fix CVE-2025-25184</changelog>
</package>
<package pkgid="8e068ee812117c249b57762b21ef21a40123bc357d295a919c9d29491c9cafd4" name="rubygem-rack" arch="src">
  <version epoch="1" ver="2.2.3.1" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:2.2.3.1-3" date="1720008000">- Fix CVE-2024-39316</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-4" date="1720180800">- Type:CVES
- ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
- SUG:NA
- DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-5" date="1720180801">- Type:CVES
- ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
- SUG:NA
- DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-6" date="1741780800">- Type:CVE
- CVE:CVE-2025-27610
- SUG:NA
- DESC:fix CVE-2025-27610</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-7" date="1741867200">- Type:CVE
- CVE:CVE-2025-27111
- SUG:NA
- DESC:fix CVE-2025-27111</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 1:2.2.3.1-8" date="1742299200">- Type:CVE
- CVE:CVE-2025-25184
- SUG:NA
- DESC:fix CVE-2025-25184</changelog>
  <changelog author="zouzhimin &lt;zouzhimin@kylinos.cn&gt; - 1:2.2.3.1-9" date="1755691200">- Type:CVES
- ID:CVE-2025-46727
- SUG:NA
- DESC:CVE-2025-46727</changelog>
</package>
<package pkgid="d9730a457eed962487c9a5ec634247008119934b5e5855a77275a8eaf2f4bf17" name="rubygem-sinatra" arch="src">
  <version epoch="1" ver="2.0.8.1" rel="3.oe2203sp4"/>
  <changelog author="jiangxinyu &lt;jiangxinyu@kylinos.cn&gt; - 1:2.0.8.1-2" date="1721217600">- fix the correctly ignores syntactically invalid range requests test</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:2.0.8.1-3" date="1731931200">- Fix CVE-2022-45442</changelog>
</package>
<package pkgid="8034ed6d7b80d5fdeae8b22fd5f7fb00d02252df17d94b23c9ae281501faa7df" name="rubygem-webrick" arch="src">
  <version epoch="0" ver="1.7.0" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.7.0-2" date="1727611200">- Fix CVE-2024-47220</changelog>
</package>
<package pkgid="f7777eca9f5fa840fd48af6f9c3993aaefe824326151c36eede43b7ad980dbcc" name="runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="28.oe2203sp4"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-19" date="1698321600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-20" date="1701691200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-26" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name from docker-runc to runc</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
</package>
<package pkgid="be0c874d04476f3aabc1a06e440c87f801d85c1f415bb18e684cf39b585c86d1" name="runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="30.oe2203sp4"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-21" date="1702036800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-22" date="1703160000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-23" date="1706788800">- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix CVE-2024-21626</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-24" date="1707220800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-26" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name from docker-runc to runc</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-29" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 1.1.3-30" date="1725969600">- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310</changelog>
</package>
<package pkgid="58067a33f8ef01dc20e823bd8dc71ee83e108dffc147347b0560105720d38f3d" name="runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="34.oe2203sp4"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-25" date="1716552000">- Type:CVE
- CVE:CVE-2024-3154
- SUG:NA
- DESC:fix CVE-2024-3154</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-26" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name from docker-runc to runc</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-29" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 1.1.3-30" date="1725969600">- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 1.1.3-31" date="1728388800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix can't set cpuset-cpus and cpuset-mems at the same time</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1.1.3-32" date="1736164800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix failed exec after systemctl daemon-reload</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-33" date="1742990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:allowing libct/cap to work with nil capabilities</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-34" date="1764158400">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-31133 and CVE-2025-52565 and CVE-2025-52881</changelog>
</package>
<package pkgid="a39b5d993440669ee7aed5720b98515f8b6c0986708eaf3c08b2b67112c541d0" name="runc" arch="src">
  <version epoch="0" ver="1.1.3" rel="36.oe2203sp4"/>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-27" date="1718798400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Set temporary single CPU affinity before cgroup cpuset transition</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-28" date="1720699200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.1.3-29" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload</changelog>
  <changelog author="Song Zhang&lt;zhangsong34@huawei.com&gt; - 1.1.3-30" date="1725969600">- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 1.1.3-31" date="1728388800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix can't set cpuset-cpus and cpuset-mems at the same time</changelog>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1.1.3-32" date="1736164800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix failed exec after systemctl daemon-reload</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-33" date="1742990400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:allowing libct/cap to work with nil capabilities</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-34" date="1764158400">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-31133 and CVE-2025-52565 and CVE-2025-52881</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-35" date="1766750400">- Type:CVE
- CVE:NA
- SUG:NA
- DESC:fix CVE-2025-65637</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.1.3-36" date="1766750401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check sysctl fullpath whether is mountpoint</changelog>
</package>
<package pkgid="b3783adce900624ca4b3208b4619350a5d18b106c8996fda9e8c3f667b6c62c3" name="rust" arch="src">
  <version epoch="0" ver="1.76.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-1" date="1683806400">- Update to 1.64.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.64.0-2" date="1690718400">- Use local mirror for speed up</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-3" date="1708171200">- Fix CVE-2024-24575,CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.76.0-1" date="1740398400">- Update to 1.76.0 because firefox update 128ESR version
- Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
- Obsoletes rust-analysis</changelog>
</package>
<package pkgid="632491f8081f9158d9cfab40ea8cbdf80dfab67b85db424c526589a2f687547d" name="rust" arch="src">
  <version epoch="0" ver="1.82.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-3" date="1708171200">- Fix CVE-2024-24575,CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.76.0-1" date="1740398400">- Update to 1.76.0 because firefox update 128ESR version
- Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
- Obsoletes rust-analysis</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.82.0-1" date="1758628800">- Update to 1.82.0 because firefox update 140ESR version
- Synchronize the code from the openEuler-24.03-LTS-SP1 branch
- Remove rls command</changelog>
</package>
<package pkgid="c4d9409ffa751aa30da28545f338b51d72059300117322886221ef7721c2c497" name="samba" arch="src">
  <version epoch="0" ver="4.17.5" rel="14.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-10" date="1703764800">- Type:cves
- ID:CVE-2018-14628
- SUG:NA
- DESC:fix CVE-2018-14628</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-11" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove sensitive info</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-12" date="1705665600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:speeds up the creation of source rpm</changelog>
  <changelog author="zhangyaqi &lt;zhangyaqi@kylinos.cn&gt; - 4.17.5-13" date="1723118400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:s4:dsdb:strcasecmp_with_ldb_val() avoids overflow</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.17.5-14" date="1760616000">- Type:cves
- ID:CVE-2025-10230 CVE-2025-9640
- SUG:NA
- DESC:fix CVE-2025-10230 CVE-2025-9640</changelog>
</package>
<package pkgid="1e4bc1547ed683a2e5e861450b9202998ebfa584e91b50158e70c42c1bd5d6a6" name="sbt" arch="src">
  <version epoch="0" ver="0.13.1" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.13.1-3" date="1719403200">- Fix CVE-2023-46122</changelog>
</package>
<package pkgid="c953b89ea8b4ea54ee35e4566cd300801fde321e2fa3f728deb34652670fcac7" name="screen" arch="src">
  <version epoch="1" ver="4.9.0" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.9.0-3" date="1747137600">- fix CVE-2025-46802, CVE-2025-46804, CVE-2025-46805</changelog>
</package>
<package pkgid="825ac07cb9e0048b758ac7ee54e9d1d960572fcdb335505bd9f61a388784a89a" name="scsi-target-utils" arch="src">
  <version epoch="0" ver="1.0.79" rel="6.oe2203sp4"/>
  <changelog author="Qiang Wei &lt;qiang.wei@suse.com&gt; - 1.0.79-5" date="1670587200">- Make Ceph rbd, rdma, glusterfs support optional</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.0.79-6" date="1725883200">- Fix CVE-2024-45751</changelog>
</package>
<package pkgid="4ca44c5b27718bc773e9530ed0c61d7c44371afa18490bd38a803d0a0eedccd7" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="10.oe2203sp4"/>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-1" date="1717502400">- Type:enhencement
- DESC:add sdma-dk spec and packge</changelog>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-2" date="1718107200">- Type:bugfix
- DESC:fix sdma-dk spec</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
</package>
<package pkgid="c5197fa9f004ad1dbc305f202c0026352d253ecf0112ccffa9250cb88eef0454" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="11.oe2203sp4"/>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-2" date="1718107200">- Type:bugfix
- DESC:fix sdma-dk spec</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-11" date="1745496000">- Type:bugfix
- DESC:fix query bug of retrieving more cqes than user designation</changelog>
</package>
<package pkgid="02a1dfc86b6b4ce7feab931752c53a4679eb6472d635fed25ad366306786ca7f" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="12.oe2203sp4"/>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-11" date="1745496000">- Type:bugfix
- DESC:fix query bug of retrieving more cqes than user designation</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-12" date="1749729600">- Type:bugfix
- DESC:optimize code of copy_data &amp; rndcnt_invalid</changelog>
</package>
<package pkgid="52b78989dc7ca5c5da14b4c28bf07751650d4fb73166b4e037bfa3e9d6321378" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="13.oe2203sp4"/>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-11" date="1745496000">- Type:bugfix
- DESC:fix query bug of retrieving more cqes than user designation</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-12" date="1749729600">- Type:bugfix
- DESC:optimize code of copy_data &amp; rndcnt_invalid</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-13" date="1751457600">- Type:bugfix
- DESC:fix alloc_chn bug &amp; optimize sdma_tool</changelog>
</package>
<package pkgid="5a7ff5db960fbeb0da5ba72bdeef199ffc7ef604b972f534794a5bcafbab5b8c" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="14.oe2203sp4"/>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-11" date="1745496000">- Type:bugfix
- DESC:fix query bug of retrieving more cqes than user designation</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-12" date="1749729600">- Type:bugfix
- DESC:optimize code of copy_data &amp; rndcnt_invalid</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-13" date="1751457600">- Type:bugfix
- DESC:fix alloc_chn bug &amp; optimize sdma_tool</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-14" date="1754308800">- Type:bugfix
- DESC:add constructor in sdma user driver</changelog>
</package>
<package pkgid="d0b77c03e77ae070f5cef4b670a863a828c2ce3984b6874822e45f9a4b68ace2" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="15.oe2203sp4"/>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-10" date="1742299200">- Type:bugfix
- DESC:synchronize bugfix of sdma_tool to openeuler</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-11" date="1745496000">- Type:bugfix
- DESC:fix query bug of retrieving more cqes than user designation</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-12" date="1749729600">- Type:bugfix
- DESC:optimize code of copy_data &amp; rndcnt_invalid</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-13" date="1751457600">- Type:bugfix
- DESC:fix alloc_chn bug &amp; optimize sdma_tool</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-14" date="1754308800">- Type:bugfix
- DESC:add constructor in sdma user driver</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-15" date="1761220800">- Type:bugfix
- DESC:fix code check problems</changelog>
</package>
<package pkgid="31be06967d80947711e7005926115a206e37ef4d1b9df0f7749f9bda6e62b281" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="4.oe2203sp4"/>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-1" date="1717502400">- Type:enhencement
- DESC:add sdma-dk spec and packge</changelog>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-2" date="1718107200">- Type:bugfix
- DESC:fix sdma-dk spec</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
</package>
<package pkgid="3c6aeeca8710e26e5f80b47ca47e6af83481e40cfc14d2505ce059fd87910bf4" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="5.oe2203sp4"/>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-1" date="1717502400">- Type:enhencement
- DESC:add sdma-dk spec and packge</changelog>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-2" date="1718107200">- Type:bugfix
- DESC:fix sdma-dk spec</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
</package>
<package pkgid="2d737bd12d2613b5268c54de29588a05a17de70db630136340cd653d58e6683a" name="sdma-dk" arch="src">
  <version epoch="0" ver="1.0.0" rel="9.oe2203sp4"/>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-1" date="1717502400">- Type:enhencement
- DESC:add sdma-dk spec and packge</changelog>
  <changelog author="wangzijian &lt;wangzijian22@huawei.com&gt; - 1.0.0-2" date="1718107200">- Type:bugfix
- DESC:fix sdma-dk spec</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-3" date="1726056000">- Type:bugfix
- DESC:add fast mode and fix sdma-dk code</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-4" date="1726401600">- Type:bugfix
- DESC:fix bug code by review</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-5" date="1728388800">- Type:feature
- DESC: add sdma_tool to support function test and performance test of sdma</changelog>
  <changelog author="zhangshuowen &lt;zhangshuowen@hisilicon.com&gt; - 1.0.0-6" date="1729080000">- Type:bugfix
- DESC:fix O2 optimization problem</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-7" date="1730894400">- Type:bugfix
- DESC:add vld filp in iquery</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-8" date="1733227200">- Type:bugfix
- DESC:add hostname print</changelog>
  <changelog author="zhangyuyang &lt;zhangyuyang31@huawei.com&gt; - 1.0.0-9" date="1735560000">- Type:bugfix
- DESC:change hostname len and add valid flip</changelog>
</package>
<package pkgid="d8afd5c79d8a58efd2cb3dbe520c13311dbedcba7ee7d747f5566e0f310f809e" name="selinux-policy" arch="src">
  <version epoch="0" ver="35.5" rel="23.oe2203sp4"/>
  <changelog author="lixiao&lt;lixiaoemail2017@163.com&gt; - 35.5-15" date="1671883200">- add the dependency between packages</changelog>
  <changelog author="lixiao&lt;lixiaoemail2017@163.com&gt; - 35.5-16" date="1672315200">- add rule for hostnamed to rpmscript dbus chat</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 35.5-17" date="1679572800">- backport patch Allow virt_domain read device sysctls
                 Allow icecast rename its log files</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 35.5-18" date="1686225600">- allow init_t create fifo file in net_conf dir.</changelog>
  <changelog author="zcfsite &lt;zhchf2010@126.com&gt; - 35.5-19" date="1688126400">- backport upstream patches</changelog>
  <changelog author="huangzq6 &lt;huangzhenqiang2@huawei.com&gt; - 35.5-20" date="1690545600">- backport some selinux-policy upstream patches</changelog>
  <changelog author="wangqingsan &lt;wangqingsan@huawei.com&gt; - 35.5-21" date="1692878400">- backport upstream patches</changelog>
  <changelog author="gengqihu &lt;gengqihu2@h-partners.com&gt; - 35.5-22" date="1711368000">- fix semodule_package fail</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 35.5-23" date="1732708800">- Recovering the SELinux Label</changelog>
</package>
<package pkgid="5488ae4faf6d57ca8b6344f8d4b5c7a8ba70a08839d9a0b00e870efc618be110" name="setup" arch="src">
  <version epoch="0" ver="2.13.9.1" rel="2.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.13.9.1-2" date="1736856000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Adjust commands sequence</changelog>
</package>
<package pkgid="2486e4b7cc5b7b1c352e371faa0a8a3aff29a17e646bbf1feca2c546428ee47b" name="shadow" arch="src">
  <version epoch="2" ver="4.9" rel="18.oe2203sp4"/>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-9" date="1681992000">- fix CVE-2023-29383</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-10" date="1687176000">- backport patches from upstream</changelog>
  <changelog author="xiongshenglan&lt;xiongshenglan@huawei.com&gt; - 2:4.9-11" date="1692100800">- Remove encrypted passwd for useradd-groupadd-groupmod-usermod</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-12" date="1692705600">- backport patches from upstream</changelog>
  <changelog author="wangyunjia &lt;yunjia.wang@huawei.com&gt; - 2:4.9-13" date="1695211200">- backport some patches</changelog>
  <changelog author="wangqingsan &lt;wangqingsan@huawei.com&gt; - 2:4.9-14" date="1699531200">- backport some patches</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2:4.9-15" date="1707048000">- backport some patches</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 2:4.9-16" date="1710590400">- backport some patches</changelog>
  <changelog author="lixinyun &lt;li.xinyun@h3c.com&gt; - 2:4.9-17" date="1719921600">- backport patches from upstream</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:4.9-18" date="1742299200">- backport patches from upstream</changelog>
</package>
<package pkgid="e2ddae2f015c64eddd4470e962a4073c7c8d89d0534a1606a20be8d3dab4d317" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="25.oe2203sp4"/>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-16" date="1702900800">- fix CVE-2023-3446 CVE-2023-5678</changelog>
  <changelog author="zhangruifang &lt;zhangruifang@h-partners.com&gt; - 15.6-17" date="1703505600">- backport patchs from upstream</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 15.6-18" date="1706616000">- fix CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551</changelog>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 15.6-19" date="1709121600">- fix CVE-2023-0465 CVE-2023-2650 CVE-2024-0727</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 15.6-20" date="1711454400">- backport patch from upstream</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-21" date="1713873600">- add tpcm support with ipmi channel</changelog>
  <changelog author="lijuzhang &lt;lijuzhang@inspur.com&gt; - 15.6-22" date="1713873601">- replace vendor for BOOTX64.CSV or BOOTAA64.CSV</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-23" date="1715083200">- Fix the TPCM feature issue</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; -15.6-24" date="1729598400">- backport patch from upstream</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; -15.6-25" date="1739275200">- fix the issue that the gBS-&gt;LoadImage pointer was empty.</changelog>
</package>
<package pkgid="0ae000fecab510021b12725e4294f9564caf729ba67365c80afe4107822f46a5" name="shim" arch="src">
  <version epoch="0" ver="15.6" rel="27.oe2203sp4"/>
  <changelog author="zhengxiaoxiao &lt;zhengxiaoxiao2@huawei.com&gt; - 15.6-19" date="1709121600">- fix CVE-2023-0465 CVE-2023-2650 CVE-2024-0727</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 15.6-20" date="1711454400">- backport patch from upstream</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-21" date="1713873600">- add tpcm support with ipmi channel</changelog>
  <changelog author="lijuzhang &lt;lijuzhang@inspur.com&gt; - 15.6-22" date="1713873601">- replace vendor for BOOTX64.CSV or BOOTAA64.CSV</changelog>
  <changelog author="jinlun &lt;jinlun@huawei.com&gt; - 15.6-23" date="1715083200">- Fix the TPCM feature issue</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; -15.6-24" date="1729598400">- backport patch from upstream</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; -15.6-25" date="1739275200">- fix the issue that the gBS-&gt;LoadImage pointer was empty.</changelog>
  <changelog author="Qin Fandong &lt;qinfandong@kylinos.cn&gt; - 15.6-26" date="1753963200">- Add shim to dnf protected packages list</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 15.6-27" date="1770120000">- fix CVE-2025-69421, CVE-2026-22796</changelog>
</package>
<package pkgid="b451e1a62bc6d97bc6b515aecb99ae9248d1e006c25b4c732d49199081868aae" name="skopeo" arch="src">
  <version epoch="1" ver="1.8.0" rel="7.oe2203sp4"/>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.8.0-1" date="1697544000">- update to 1.8.0</changelog>
  <changelog author="zhangbowei &lt;zhangbowei@kylinos.cn&gt; -1:1.8.0-2" date="1713441600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2022-41723</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.8.0-3" date="1715428800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2024-28180</changelog>
  <changelog author="lijian &lt;lijian2@kylinos.cn&gt; - 1:1.8.0-4" date="1715428801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix CVE-2023-29406</changelog>
  <changelog author="wangyueliang &lt;wangyueliang@kylinos.cn&gt; - 1:1.8.0-5" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: rebuild for 22.03LTS_SP4</changelog>
  <changelog author="Hongyu Pu &lt;puhongyu@cqsoftware.com.cn&gt; - 1:1.8.0-6" date="1755864000">- Type:cve
- CVE:CVE-2025-27144
- SUG:NA
- DESC:backport CVE-2025-27144</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 1:1.8.0-7" date="1756036800">- Type:cve
- CVE:CVE-2023-39325 and CVE-2023-44487
- SUG:NA
- DESC:backport CVE-2023-39325 and CVE-2023-44487</changelog>
</package>
<package pkgid="8973cb89f111f797f94387c9c12ebba15656071ccffad9ddc2dca28db9575935" name="sleuthkit" arch="src">
  <version epoch="0" ver="4.6.7" rel="13.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 4.6.7-12" date="1718280000">- License compliance rectification</changelog>
  <changelog author="Saisai Zhao &lt;zhaosaisai@kylinos.cn&gt; - 4.6.7-13" date="1756728000">- Fix CVE-2020-10232</changelog>
</package>
<package pkgid="fa300625e2b0f26a404a67e12827c48a8b8ab770afd8f85ce77d365ce1090a6f" name="socat" arch="src">
  <version epoch="0" ver="1.7.3.2" rel="9.oe2203sp4"/>
  <changelog author="yueyuankun &lt;yueyuankun@kylinos.cn&gt; - 1.7.3.2-9" date="1734004800">- Fix CVE-2024-54661</changelog>
</package>
<package pkgid="769ef07d38f5dcc79f05752bbc56d0dc39549f581296eafd72fa493d953bb2fd" name="sox" arch="src">
  <version epoch="0" ver="14.4.2.0" rel="31.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 14.4.2.0-29" date="1701950400">- Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
- CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
- CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
- CVE-2017-18189</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 14.4.2.0-30" date="1703419200">- DESC: apply CVE-2021-40426.patch</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 14.4.2.0-31" date="1736164800">- Fix CVE-2019-8354,CVE-2019-8355,CVE-2019-8356,CVE-2019-8357 and CVE-2019-13590</changelog>
</package>
<package pkgid="a3b68e99de03096e94df4061cac2babe632cf9d265ba96ce7e4f152484c63449" name="spark" arch="src">
  <version epoch="0" ver="3.2.2" rel="3.oe2203sp4"/>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 3.2.2-2" date="1710244800">- add ppc64le support</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 3.2.2-3" date="1735214400">- Type: CVE
- CVE: CVE-2024-23945
- SUG: NA
- DESC: fix CVE-2024-23945</changelog>
</package>
<package pkgid="bab9fa8aaef5afc5c7fcd24bb138d53b65867a4a83f4e2acd8cdbd3f13f70b8e" name="spdk" arch="src">
  <version epoch="0" ver="21.01.1" rel="18.oe2203sp4"/>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 21.01.1-9" date="1702555200">- Return error when failing to get resource</changelog>
  <changelog author="Ren Zhijie &lt;zhijie.ren@shingroup.cn&gt; - 21.01.1-10" date="1709553600">- Add support for ppc64le</changelog>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 21.01.1-11" date="1709726400">- Fix probe core dump while admin cmd timeout</changelog>
  <changelog author="wangxiaomeng &lt;wangxiaomeng@kylinos.cn&gt; - 21.01.1-12" date="1710504000">- Fix build warning</changelog>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 21.01.1-13" date="1714392000">- lib/nvme: add mutex before submit admin request</changelog>
  <changelog author="Hongtao Zhang &lt;zhanghongtao22@huawei.com&gt; - 21.01.1-14" date="1716206400">- nvme/cuse: Add ctrlr_lock for cuse register and unregister</changelog>
  <changelog author="yanshuai &lt;yanshuai01@kylinos.cn&gt; - 21.01.1-15" date="1716206401">- lib/nvme: fixed use-after-free detected by Coverity</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 21.01.1-16" date="1720699200">- scripts: Do msr existence check only on x86_64 machines</changelog>
  <changelog author="jiaqingtong &lt;jiaqingtong@huawei.com&gt; - 21.01.1-17" date="1746878400">- vhost: add vhost interrupt coalescing model</changelog>
  <changelog author="SiXiang Jing &lt;jingsixiang1@h-partners.com&gt; - 21.01.1-18" date="1762344000">- lib/nvmf: fix CVE-2025-57275</changelog>
</package>
<package pkgid="3d576e516585e2b6c0aa2216340a84a2154faa518e5f31498147dba54c6934c7" name="springframework" arch="src">
  <version epoch="0" ver="3.2.18" rel="14.oe2203sp4"/>
  <changelog author="liujunhen &lt;liujh@teligen.net&gt; - 3.2.18-14" date="1747828800">- Fix CVE-2022-22950</changelog>
</package>
<package pkgid="f94cb325282e9a5447102dc2b8b64c646b3d48d6f267dafe260692b8dbd3658f" name="sqlite" arch="src">
  <version epoch="0" ver="3.37.2" rel="8.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.37.2-8" date="1774180800">- fix CVE-2025-70873, CVE-2025-6965</changelog>
</package>
<package pkgid="705ac5572e32b7bb45950c07f384f01887af70b434ba7eb3b6f93adf00944211" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="25.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 7:4.9-16" date="1664280000">- Type:cves
- ID:CVE-2022-41318
- SUG:NA
- DESC:fix CVE-2022-41318</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
</package>
<package pkgid="22ca423fdfe3de31bc66e489b237cb284fbb9fb508b0869cd8da45ff1438b1fc" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="26.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-17" date="1668168000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
</package>
<package pkgid="2b3d4d5556e6a4edd364299ceb85a6518e6974eff59a3a088fcb555c9747845b" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="27.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-18" date="1698753600">- Type:cves
- ID:CVE-2023-46846 CVE-2023-46847
- SUG:NA
- DESC:fix CVE-2023-46846 CVE-2023-46847</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-27" date="1730203200">- Type:cves
- ID:CVE-2024-45802
- SUG:NA
- DESC:fix CVE-2024-45802</changelog>
</package>
<package pkgid="5f79154fcd35a7213477929c3fb6a18ae05ed37751af04df70040bf0193f6c13" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="28.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-19" date="1698926400">- Type:CVE
- ID:CVE-2023-46724
- SUG:NA
- DESC:fix CVE-2023-46724</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-20" date="1699444800">- Type:CVE
- ID:CVE-2023-46728
- SUG:NA
- DESC:fix CVE-2023-46728</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7:4.9-21" date="1701777600">- Type:cves
- ID:CVE-2023-49285 CVE-2023-49286
- SUG:NA
- DESC:fix CVE-2023-49285 CVE-2023-49286</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-22" date="1702641600">- Type:cves
- ID:CVE-2023-50269
- SUG:NA
- DESC:fix CVE-2023-50269</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-27" date="1730203200">- Type:cves
- ID:CVE-2024-45802
- SUG:NA
- DESC:fix CVE-2024-45802</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-28" date="1758542400">- Type:cves
- ID:CVE-2025-59362
- SUG:NA
- DESC:fix CVE-2025-59362</changelog>
</package>
<package pkgid="ee168fd53606e2598fbace0ab1c4d1bd7d5b211b7798f3b33a9750ed680aa183" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="29.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-23" date="1706184000">- Type:cves
- ID:CVE-2024-23638
- SUG:NA
- DESC:fix CVE-2024-23638</changelog>
  <changelog author="hehuazhen &lt;hehuazhen@huawei.com&gt; - 7:4.9-24" date="1708344000">- Type:cves
- ID:CVE-2024-25617
- SUG:NA
- DESC:fix CVE-2024-25617</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-27" date="1730203200">- Type:cves
- ID:CVE-2024-45802
- SUG:NA
- DESC:fix CVE-2024-45802</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-28" date="1758542400">- Type:cves
- ID:CVE-2025-59362
- SUG:NA
- DESC:fix CVE-2025-59362</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-29" date="1766404800">- Type:cves
- ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
- SUG:NA
- DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168</changelog>
</package>
<package pkgid="de9e4f9a047d0579c99016d1c0808c0799dd53eb0c590f4a4f5325f5e45f606c" name="squid" arch="src">
  <version epoch="7" ver="4.9" rel="30.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-25" date="1719489600">- Type:cves
- ID:CVE-2024-37894
- SUG:NA
- DESC:fix CVE-2024-37894</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-26" date="1726747200">- Type:cves
- ID:CVE-2024-25111
- SUG:NA
- DESC:fix CVE-2024-25111</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-27" date="1730203200">- Type:cves
- ID:CVE-2024-45802
- SUG:NA
- DESC:fix CVE-2024-45802</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-28" date="1758542400">- Type:cves
- ID:CVE-2025-59362
- SUG:NA
- DESC:fix CVE-2025-59362</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7:4.9-29" date="1766404800">- Type:cves
- ID:CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168
- SUG:NA
- DESC:fix CVE-2023-49288 CVE-2025-54574 CVE-2023-5824 CVE-2025-62168</changelog>
  <changelog author="xinghe &lt;xingheyd@163.com&gt; - 7:4.9-30" date="1774612800">- Type:cves
- ID:CVE-2026-33526 CVE-2026-33515
- SUG:NA
- DESC:fix CVE-2026-33526 CVE-2026-33515</changelog>
</package>
<package pkgid="98be14bd5b97b8e15013ac7f9e654182c6e6caa3f44b37b431b8c17e1e3beb74" name="sssd" arch="src">
  <version epoch="0" ver="2.6.1" rel="21.oe2203sp4"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-12" date="1701172800">- backport upstream patches</changelog>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.6.1-14" date="1713528000">- fix CVE-2023-3758</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.6.1-15" date="1718712000">- backport upstream patches</changelog>
  <changelog author="fangxiuning&lt;fangxiuning@huawei.com&gt; - 2.6.1-16" date="1727611200">- backport upstream patches</changelog>
  <changelog author="fangxiuning&lt;fangxiuning@huawei.com&gt; - 2.6.1-17" date="1729857600">- backport patches to fix bugs</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2.6.1-18" date="1733227200">- backport upstream patches</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2.6.1-19" date="1733400000">- backport make sure invalid krb5 context is not used</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.6.1-20" date="1755000000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.6.1-21" date="1756209600">- backport upstream patch to fix nss coredump</changelog>
</package>
<package pkgid="108efc188d17bd7b8d081e8ffd186c55c1e16009264a3699ccbfa1e617eb4489" name="sssd" arch="src">
  <version epoch="0" ver="2.6.1" rel="22.oe2203sp4"/>
  <changelog author="wangcheng &lt;wangcheng156@huawei.com&gt; - 2.6.1-13" date="1708603200">- backport upstream patches</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 2.6.1-14" date="1713528000">- fix CVE-2023-3758</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2.6.1-15" date="1718712000">- backport upstream patches</changelog>
  <changelog author="fangxiuning&lt;fangxiuning@huawei.com&gt; - 2.6.1-16" date="1727611200">- backport upstream patches</changelog>
  <changelog author="fangxiuning&lt;fangxiuning@huawei.com&gt; - 2.6.1-17" date="1729857600">- backport patches to fix bugs</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2.6.1-18" date="1733227200">- backport upstream patches</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2.6.1-19" date="1733400000">- backport make sure invalid krb5 context is not used</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.6.1-20" date="1755000000">- backport upstream patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.6.1-21" date="1756209600">- backport upstream patch to fix nss coredump</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@h-partners.com&gt; - 2.6.1-22" date="1760961600">- fix CVE-2025-11561</changelog>
</package>
<package pkgid="fa52221fe1f0371fe0b5594ed0615bcf6285a8bfd02784ed618a4b9bbae72ee8" name="strace" arch="src">
  <version epoch="0" ver="5.14" rel="6.oe2203sp4"/>
  <changelog author="Hui Li&lt;lihui@loongson.cn&gt; - 5.14-3" date="1673352000">- Add loongarch64 architecture</changelog>
  <changelog author="chenzanyu &lt;chenzanyu@huawei.com&gt; - 5.14-4" date="1680609600">- solve ilp32 strace build error</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 5.14-5" date="1709121600">- remove redundant judgments</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 5.14-6" date="1735300800">- strace: fix potential deadlock during cleanup</changelog>
</package>
<package pkgid="ca7a187c9ec575337e10b44ef60530b1a5db7be29f21627882f0f212d8a470f2" name="subversion" arch="src">
  <version epoch="0" ver="1.14.2" rel="5.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.14.2-2" date="1675425600">- Fix compile warning: LICENSE and NOTICE files are repeat packed</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 1.14.2-3" date="1711713600">- Remove non-standard requires from the help subpackage</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.14.2-4" date="1728475200">- fix CVE-2024-45720</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.14.2-5" date="1733745600">- fix CVE-2024-46901</changelog>
</package>
<package pkgid="ea6b5844902de8acdef808b154c4809c12e03dd080ca5dd4bb5338b0c9be0f2c" name="sudo" arch="src">
  <version epoch="0" ver="1.9.8p2" rel="19.oe2203sp4"/>
  <changelog author="zhoushuiqing &lt;zhoushuiqing2@huawei.com&gt; - 1.9.8p2-14" date="1691409600">- Backport patche from upstream community</changelog>
  <changelog author="zhangruifang &lt;zhangruifang1@h-partners.com&gt; - 1.9.8p2-15" date="1701172800">- Backport patches from upstream community</changelog>
  <changelog author="wangqingsan &lt;wangqingsan@huawei.com&gt; - 1.9.8p2-16" date="1704888000">- fix CVE-2023-42465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.9.8p2-17" date="1706702400">- Backport patch from upstream community</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.9.8p2-18" date="1744977600">- Backport patch from upstream community</changelog>
  <changelog author="xuce &lt;xuce10@h-partners.com&gt; - 1.9.8p2-19" date="1751457600">- fix cve-2025-32462</changelog>
</package>
<package pkgid="1dc41b1f247cb22f123b6db7157e959d1ee627561a31d04592758ec49094d6f1" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="11.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-5" date="1724846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cpu_utility and cpu_patrol must be an integer</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-10" date="1725883200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split cpu_sentry and syssentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-11" date="1726056000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix configparser.InterpolationSyntaxError</changelog>
</package>
<package pkgid="d67cd5a6757e862c600451cf4327b714e3cd4ae5e74d4f3304b3ecd13fb9c1e1" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="15.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-10" date="1725883200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split cpu_sentry and syssentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-11" date="1726056000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix configparser.InterpolationSyntaxError</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-12" date="1726315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix syssentry fails to be started when cpu_sentry is not installed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-13" date="1726920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:optimize the handing of cat-cli error msg in cpu_sentry
       over threshold should be warn level log in cat-cli</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-14" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add separator to err info</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-15" date="1727265601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove threshold:max cpu cores</changelog>
</package>
<package pkgid="f64ece2dc4512e8a74695d4e28c40fdae66f71b14bfa45cc5b6b0b60a2792514" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="22.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-13" date="1726920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:optimize the handing of cat-cli error msg in cpu_sentry
       over threshold should be warn level log in cat-cli</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-14" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add separator to err info</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-15" date="1727265601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove threshold:max cpu cores</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-16" date="1729512000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add hbm_online_repair</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-17" date="1730116800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix hbm_online_repair notice BMC function and create efi fd</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-18" date="1730462400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix uint8 bug and change page isolation threshold default value</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-19" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix write file return code bug</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-20" date="1730808000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: update the commit of the log level and format function of sysSentry</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-21" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: add boundary check for settings</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-22" date="1730980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix xalarm not reject alarm msg exceeds max length</changelog>
</package>
<package pkgid="211fb10828c1fae7ebb222b764384e50eaac9c890bd2761ff9b36b36f7ddd06f" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="36.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong@huawei.com&gt; - 1.0.2-27" date="1737547200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move logrotate-sysSentry.conf from /etc/ to /etc/sysSentry/</changelog>
  <changelog author="jinsaihang &lt;jinsaihang@h-partners.com&gt; - 1.0.2-28" date="1737720000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:adapt get_alarm for kenel 5.10</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-29" date="1737892800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:collect module adapt to the 5.10 kernel</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-30" date="1737892801">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add avg_block_io and ai_block_io</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-31" date="1739534400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix bug of ebpf and ai_block_io</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-32" date="1741867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the sentryCollector service can't be stopped for a long</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-33" date="1741867201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix an issue with printing error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-34" date="1743249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix period task some bugs
       fix env_file and environ_conf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-35" date="1747483200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix cpu_sentry result when found_fault_cores_number != isolated_cores_number</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 1.0.2-36" date="1757419200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add huge page aggregation</changelog>
</package>
<package pkgid="576eebf47f412869e7e09bcf34d24b653c86734d18ba5640fcca6a4d7a0907ce" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="39.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-30" date="1737892800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add avg_block_io and ai_block_io</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-31" date="1739534400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix bug of ebpf and ai_block_io</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-32" date="1741867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the sentryCollector service can't be stopped for a long</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-33" date="1741867201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix an issue with printing error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-34" date="1743249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix period task some bugs
       fix env_file and environ_conf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-35" date="1747483200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix cpu_sentry result when found_fault_cores_number != isolated_cores_number</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 1.0.2-36" date="1757419200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add huge page aggregation</changelog>
  <changelog author="zengchao001 &lt;zc18179036325@163.com&gt; - 1.0.2-37" date="1767960000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add soc_ring_sentry plugin</changelog>
  <changelog author="shixuantong &lt;shixuantong1@h-partners.com&gt; - 1.0.2-38" date="1769169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:some bugfix</changelog>
  <changelog author="shixuantong &lt;shixuantong1@h-partners.com&gt; - 1.0.2-39" date="1769688000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add NONZERO_EXITED status for plugin exited with non-zero
       fix process exit status and service kill mode</changelog>
</package>
<package pkgid="8d67527e60d21e82d36399136a721025f34441375e14242150ee9638e24aa749" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="4.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-1" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Package init</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
</package>
<package pkgid="ea242bbc13a59a0e185e8f4793a7099934d51c098d255fbe29fcc0d86bd20672" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="40.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-31" date="1739534400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix bug of ebpf and ai_block_io</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-32" date="1741867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the sentryCollector service can't be stopped for a long</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-33" date="1741867201">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix an issue with printing error</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-34" date="1743249600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix period task some bugs
       fix env_file and environ_conf</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-35" date="1747483200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix cpu_sentry result when found_fault_cores_number != isolated_cores_number</changelog>
  <changelog author="zhuo &lt;1107893276@qq.com&gt; - 1.0.2-36" date="1757419200">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add huge page aggregation</changelog>
  <changelog author="zengchao001 &lt;zc18179036325@163.com&gt; - 1.0.2-37" date="1767960000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add soc_ring_sentry plugin</changelog>
  <changelog author="shixuantong &lt;shixuantong1@h-partners.com&gt; - 1.0.2-38" date="1769169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:some bugfix</changelog>
  <changelog author="shixuantong &lt;shixuantong1@h-partners.com&gt; - 1.0.2-39" date="1769688000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add NONZERO_EXITED status for plugin exited with non-zero
       fix process exit status and service kill mode</changelog>
  <changelog author="shixuantong &lt;shixuantong1@h-partners.com&gt; - 1.0.2-40" date="1770465600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix period type task abnormal status</changelog>
</package>
<package pkgid="b7d91a85f5e17cf2bca4cad4f366ec1e3d5581612098a3fa8b6a6f0e2253f9fe" name="sysSentry" arch="src">
  <version epoch="0" ver="1.0.2" rel="9.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-1" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Package init</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-5" date="1724846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cpu_utility and cpu_patrol must be an integer</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
</package>
<package pkgid="2b54964cf958535924beebef249f5bd52f6effb403fc06c9d2b4bb389e08b673" name="sysboost" arch="src">
  <version epoch="0" ver="1.0.5" rel="2.oe2203sp4"/>
  <changelog author="liutie &lt;liutie4@huawei.com&gt; - 1.0.0-0" date="1686657600">- ID:NA
- SUG:NA
- DESC: init sysboost</changelog>
  <changelog author="liutie &lt;liutie4@huawei.com&gt; - 1.0.0-1" date="1692878400">- ID:NA
- SUG:NA
- DESC: remove post scriptlet</changelog>
  <changelog author="Liu Yuntao &lt;liuyuntao10@huawei.com&gt; - 1.0.0-2" date="1697544000">- DESC: 1. sync from openeuler-23.09
-       2. update pathes corresponding to code refactor</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 1.0.5-1" date="1733918400">- Desc: init 22.03-LTS-SP4</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 1.0.5-2" date="1734523200">- Desc: Resolve x86 build failures</changelog>
</package>
<package pkgid="4acfa78385079c7637efbcae40545aeacf59b0af795a7101ce985cb41dd22adc" name="syslinux" arch="src">
  <version epoch="0" ver="6.04" rel="16.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 6.04-14" date="1689076800">- fix CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-15" date="1722513600">- Clean changelog format, fix yaml</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-16" date="1724932800">- update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
- CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
- CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652</changelog>
</package>
<package pkgid="63ed38af1bcfd53d4e9bffd9457db67ff6af936923f393bd8f207bef21f02918" name="syslinux" arch="src">
  <version epoch="0" ver="6.04" rel="17.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 6.04-14" date="1689076800">- fix CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-15" date="1722513600">- Clean changelog format, fix yaml</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-16" date="1724932800">- update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
- CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
- CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 6.04-17" date="1741780800">- fix CVE-2020-24370</changelog>
</package>
<package pkgid="e6be32a1ca54dee8956d7a55374e3f59369a58f2c975adef4a3b261df8e0dbae" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="100.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-91" date="1733313600">- add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
      backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
      backport-man-fix-section-number.patch
      backport-repart-fix-invalid-errno-in-log.patch
      backport-sysusers-insist-that-root-group-is-0.patch
      backport-importd-Always-specify-file-unpacked-by-tar.patch
      backport-docs-remove-dev-tty-confusion.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-92" date="1733313601">- wait-online: fix handling of unmanaged state
- add backport-wait-online-make-manager_link_is_online-return-0-whe.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-93" date="1733313602">- add backport-psi-util-fix-error-handling.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-94" date="1733313603">- add backport-pid1-cgroup-show-ignore-EOPNOTSUPP-in-cg_read_pid.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-95" date="1733745600">- add backport-cgroup-util-introduce-cg_is_threaded.patch
      backport-core-execute-warn-when-threaded-mode-is-detected.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-96" date="1733832000">- backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-97" date="1733918400">- add backport-logind-give-better-error-messages-when-failing-to-at.patch
      backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
      backport-fs-util-readlinkat-supports-an-empty-string.patch
      backport-exec-invoke-correct-dont_close-size.patch
      backport-core-Fix-file-descriptor-leak.patch
      backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
      backport-core-service-fix-accept-socket-deserialization.patch
      backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
      backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
      backport-sysusers-handle-NSS-errors-gracefully.patch
      backport-shared-log-error-when-execve-fail.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-98" date="1734091200">- add backport-run-split-out-creation-of-unit-creation-messages.patch
      backport-run-pass-the-pty-slave-fd-to-transient-service.patch
      backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
      backport-sd-event-do-not-assert-on-invalid-signal.patch
      backport-sd-event-change-error-code-EINVAL-EIO.patch
      backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
      backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
      backport-main-reopen-dev-console-for-user-service-manager.patch
      backport-log-add-common-helper-log_set_target_and_open.patch
      backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
      backport-journalctl-erase-verify-key-before-free.patch
      backport-core-service-use-log_unit_-where-appropriate.patch
      backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
      backport-Manager-also-log-caller-of-daemon-reexec.patch
      backport-manager-improve-message-about-Reload-Reexec-requests.patch
      backport-core-fix-null-in-output.patch
      backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
      backport-core-Log-in-more-scenarios-about-which-process-initi.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-99" date="1735041600">- systemd-logind button_dispatch add log to display devices that triggered the button</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-100" date="1735041601">- add DefaultEnableMemswLimit support</changelog>
</package>
<package pkgid="365019ac0cf3166207fd1283e650dd2e693418bad61749992c59385d4b3e7a1e" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="101.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-92" date="1733313600">- wait-online: fix handling of unmanaged state
- add backport-wait-online-make-manager_link_is_online-return-0-whe.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-93" date="1733313601">- add backport-psi-util-fix-error-handling.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-94" date="1733313602">- add backport-pid1-cgroup-show-ignore-EOPNOTSUPP-in-cg_read_pid.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-95" date="1733745600">- add backport-cgroup-util-introduce-cg_is_threaded.patch
      backport-core-execute-warn-when-threaded-mode-is-detected.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-96" date="1733832000">- backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-97" date="1733918400">- add backport-logind-give-better-error-messages-when-failing-to-at.patch
      backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
      backport-fs-util-readlinkat-supports-an-empty-string.patch
      backport-exec-invoke-correct-dont_close-size.patch
      backport-core-Fix-file-descriptor-leak.patch
      backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
      backport-core-service-fix-accept-socket-deserialization.patch
      backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
      backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
      backport-sysusers-handle-NSS-errors-gracefully.patch
      backport-shared-log-error-when-execve-fail.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-98" date="1734091200">- add backport-run-split-out-creation-of-unit-creation-messages.patch
      backport-run-pass-the-pty-slave-fd-to-transient-service.patch
      backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
      backport-sd-event-do-not-assert-on-invalid-signal.patch
      backport-sd-event-change-error-code-EINVAL-EIO.patch
      backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
      backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
      backport-main-reopen-dev-console-for-user-service-manager.patch
      backport-log-add-common-helper-log_set_target_and_open.patch
      backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
      backport-journalctl-erase-verify-key-before-free.patch
      backport-core-service-use-log_unit_-where-appropriate.patch
      backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
      backport-Manager-also-log-caller-of-daemon-reexec.patch
      backport-manager-improve-message-about-Reload-Reexec-requests.patch
      backport-core-fix-null-in-output.patch
      backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
      backport-core-Log-in-more-scenarios-about-which-process-initi.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-99" date="1735041600">- systemd-logind button_dispatch add log to display devices that triggered the button</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-100" date="1735041601">- add DefaultEnableMemswLimit support</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-101" date="1739793600">- sysctl: improve performance for applying glob pattern</changelog>
</package>
<package pkgid="a1ab2da1c2296a73588948199ed1214c0b29a2a6e385c774a1ff94a8bcc0c3a5" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="103.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-94" date="1733313600">- add backport-pid1-cgroup-show-ignore-EOPNOTSUPP-in-cg_read_pid.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-95" date="1733745600">- add backport-cgroup-util-introduce-cg_is_threaded.patch
      backport-core-execute-warn-when-threaded-mode-is-detected.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-96" date="1733832000">- backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-97" date="1733918400">- add backport-logind-give-better-error-messages-when-failing-to-at.patch
      backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
      backport-fs-util-readlinkat-supports-an-empty-string.patch
      backport-exec-invoke-correct-dont_close-size.patch
      backport-core-Fix-file-descriptor-leak.patch
      backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
      backport-core-service-fix-accept-socket-deserialization.patch
      backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
      backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
      backport-sysusers-handle-NSS-errors-gracefully.patch
      backport-shared-log-error-when-execve-fail.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-98" date="1734091200">- add backport-run-split-out-creation-of-unit-creation-messages.patch
      backport-run-pass-the-pty-slave-fd-to-transient-service.patch
      backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
      backport-sd-event-do-not-assert-on-invalid-signal.patch
      backport-sd-event-change-error-code-EINVAL-EIO.patch
      backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
      backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
      backport-main-reopen-dev-console-for-user-service-manager.patch
      backport-log-add-common-helper-log_set_target_and_open.patch
      backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
      backport-journalctl-erase-verify-key-before-free.patch
      backport-core-service-use-log_unit_-where-appropriate.patch
      backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
      backport-Manager-also-log-caller-of-daemon-reexec.patch
      backport-manager-improve-message-about-Reload-Reexec-requests.patch
      backport-core-fix-null-in-output.patch
      backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
      backport-core-Log-in-more-scenarios-about-which-process-initi.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-99" date="1735041600">- systemd-logind button_dispatch add log to display devices that triggered the button</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-100" date="1735041601">- add DefaultEnableMemswLimit support</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-101" date="1739793600">- sysctl: improve performance for applying glob pattern</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 249-102" date="1743422400">- sync patch from systemd community
- add backport-shutdown-close-DM-block-device-before-issuing-DM_DEV.patch
      backport-execute-free-syscall_log-hashmap-when-done.patch
      backport-logind-let-system-wide-idle-begin-at-the-time-logind.patch
      backport-core-fix-assert-when-AddDependencyUnitFiles-is-calle.patch</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 249-103" date="1750766400">- Fix CVE-2025-4598</changelog>
</package>
<package pkgid="df681586f59baed6c10c4755aa273587781e3cffaabf41155f5f4243a28ee57e" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="105.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-96" date="1733832000">- backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-97" date="1733918400">- add backport-logind-give-better-error-messages-when-failing-to-at.patch
      backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
      backport-fs-util-readlinkat-supports-an-empty-string.patch
      backport-exec-invoke-correct-dont_close-size.patch
      backport-core-Fix-file-descriptor-leak.patch
      backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
      backport-core-service-fix-accept-socket-deserialization.patch
      backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
      backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
      backport-sysusers-handle-NSS-errors-gracefully.patch
      backport-shared-log-error-when-execve-fail.patch</changelog>
  <changelog author="wangyuhang &lt;wangyuhang27@huawei.com&gt; - 249-98" date="1734091200">- add backport-run-split-out-creation-of-unit-creation-messages.patch
      backport-run-pass-the-pty-slave-fd-to-transient-service.patch
      backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
      backport-sd-event-do-not-assert-on-invalid-signal.patch
      backport-sd-event-change-error-code-EINVAL-EIO.patch
      backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
      backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
      backport-main-reopen-dev-console-for-user-service-manager.patch
      backport-log-add-common-helper-log_set_target_and_open.patch
      backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
      backport-journalctl-erase-verify-key-before-free.patch
      backport-core-service-use-log_unit_-where-appropriate.patch
      backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
      backport-Manager-also-log-caller-of-daemon-reexec.patch
      backport-manager-improve-message-about-Reload-Reexec-requests.patch
      backport-core-fix-null-in-output.patch
      backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
      backport-core-Log-in-more-scenarios-about-which-process-initi.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 249-99" date="1735041600">- systemd-logind button_dispatch add log to display devices that triggered the button</changelog>
  <changelog author="xujing &lt;xujing125@huawei.com&gt; - 249-100" date="1735041601">- add DefaultEnableMemswLimit support</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-101" date="1739793600">- sysctl: improve performance for applying glob pattern</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 249-102" date="1743422400">- sync patch from systemd community
- add backport-shutdown-close-DM-block-device-before-issuing-DM_DEV.patch
      backport-execute-free-syscall_log-hashmap-when-done.patch
      backport-logind-let-system-wide-idle-begin-at-the-time-logind.patch
      backport-core-fix-assert-when-AddDependencyUnitFiles-is-calle.patch</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 249-103" date="1750766400">- Fix CVE-2025-4598</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 249-104" date="1752494400">- Fix mount units failed issue, which mount process finished, but there is no mount.</changelog>
  <changelog author="caiwentao &lt;cwt678@126.com&gt; - 249-105" date="1752580800">- core: shorten long unit names that are based on paths and append path hash at the end</changelog>
</package>
<package pkgid="41af1d7a558cbaacf0673db457d75bed4272962f492f3d73d66f6a9d77faa668" name="systemd" arch="src">
  <version epoch="0" ver="249" rel="97.oe2203sp4"/>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-88" date="1732968000">- add backport-import-use-CURLOPT_PROTOCOLS_STR-with-libcurl-7.85.0.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-89" date="1733227200">- add backport-man-fix-directory-for-user-home-bind-mounts.patch
      backport-nspawn-fix-directory-in-logged-error.patch
      backport-test-boot-timestamp-Handle-ERANGE-error.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-90" date="1733313600">- add backport-core-when-isolating-to-a-unit-also-keep-units-runnin.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-91" date="1733313601">- add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
      backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
      backport-man-fix-section-number.patch
      backport-repart-fix-invalid-errno-in-log.patch
      backport-sysusers-insist-that-root-group-is-0.patch
      backport-importd-Always-specify-file-unpacked-by-tar.patch
      backport-docs-remove-dev-tty-confusion.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-92" date="1733313602">- wait-online: fix handling of unmanaged state
- add backport-wait-online-make-manager_link_is_online-return-0-whe.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-93" date="1733313603">- add backport-psi-util-fix-error-handling.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-94" date="1733313604">- add backport-pid1-cgroup-show-ignore-EOPNOTSUPP-in-cg_read_pid.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-95" date="1733745600">- add backport-cgroup-util-introduce-cg_is_threaded.patch
      backport-core-execute-warn-when-threaded-mode-is-detected.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-96" date="1733832000">- backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 249-97" date="1733918400">- add backport-logind-give-better-error-messages-when-failing-to-at.patch
      backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
      backport-fs-util-readlinkat-supports-an-empty-string.patch
      backport-exec-invoke-correct-dont_close-size.patch
      backport-core-Fix-file-descriptor-leak.patch
      backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
      backport-core-service-fix-accept-socket-deserialization.patch
      backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
      backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
      backport-sysusers-handle-NSS-errors-gracefully.patch
      backport-shared-log-error-when-execve-fail.patch</changelog>
</package>
<package pkgid="7a01f3b4a4635b3417b198982b11d29e68e84328a0ee7a21b13e0b247d22adc4" name="taglib" arch="src">
  <version epoch="0" ver="1.11.1" rel="13.oe2203sp4"/>
  <changelog author="Xingwei &lt;xingwei14@h-partners.com&gt; - 1.11.1-13" date="1748606400">- Type:CVE
- CVE:CVE-2023-47466
- SUG:NA
- DESC:fix CVE-2023-47466</changelog>
</package>
<package pkgid="31ce88be156f1722555a938db5c9a96fc9cce9041833c5e50c48e2ada38d8975" name="tar" arch="src">
  <version epoch="2" ver="1.34" rel="6.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2:1.34-6" date="1767700800">- fix CVE-2025-45582</changelog>
</package>
<package pkgid="3586984c3a51eec40f5af8093bb4f774f3d778339b6b2023460471da8b634054" name="telnet" arch="src">
  <version epoch="1" ver="0.17" rel="80.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:0.17-79" date="1711972800">- Type:cves
- CVE:CVE-2022-39028
- SUG:NA
- DESC:fix CVE-2022-39028</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1:0.17-80" date="1764676800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix telnet crashes on stack overflow due to infinite recursion.</changelog>
</package>
<package pkgid="817283bf839acfddfe897bbf5b0f3fea5902eb31eafba6897de403a17f124fea" name="texlive-base" arch="src">
  <version epoch="7" ver="20180414" rel="38.oe2203sp4"/>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 20180414-34" date="1673006400">- Fix build on riscv64</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 7:20180414-35" date="1688385600">- Fix CVE-2023-32700</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 7:20180414-36" date="1691755200">- add sw_64 support and fix loongarch64 error</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 7:20180414-37" date="1710763200">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7:20180414-38" date="1722859200">- Fix CVE-2023-46048</changelog>
</package>
<package pkgid="f669a6fe0194a28b28c8c92816bb78cb828b0fffeea880b29cbee58fb4a2f466" name="texlive-base" arch="src">
  <version epoch="7" ver="20180414" rel="39.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 7:20180414-37" date="1710763200">- add ppc64le support</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7:20180414-38" date="1722859200">- Fix CVE-2023-46048</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7:20180414-39" date="1763380800">- Fix CVE-2023-32668</changelog>
</package>
<package pkgid="092f78670edf29004e56f1dcd347cca33a3627514463e70a970f284292f4d753" name="tigervnc" arch="src">
  <version epoch="0" ver="1.12.0" rel="10.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang_z@163.com&gt; - 1.12.0-10" date="1774872000">- Type:CVE
- CVE:CVE-2026-34352
- SUG:NA
- DESC:fix CVE-2026-34352</changelog>
</package>
<package pkgid="734639a9b104759b8cbb47a8e2d6cb648eb36e7bf5319b01365442f31b8ea77b" name="tinyxml" arch="src">
  <version epoch="0" ver="2.6.2" rel="24.oe2203sp4"/>
  <changelog author="will_niutao &lt;huawei2@huawei.com&gt; - 2.6.2-23" date="1682683200">- fix the devel package error</changelog>
  <changelog author="Jianmin &lt;jianmin@iscas.ac.cn&gt; - 2.6.2-24" date="1735041600">- fix CVE-2023-34194</changelog>
</package>
<package pkgid="adb7e87a36e0abe4c9644fbeca5af276674be4a424c38837f0233a3a6859f791" name="tinyxml2" arch="src">
  <version epoch="0" ver="6.0.0" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 6.0.0-6" date="1769601600">- Fix CVE-2024-50614 and CVE-2024-50615</changelog>
</package>
<package pkgid="0220163ed604a9a5835c5d73fd1b64bfa958de21a24509cd0c80fc11a1874c8f" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
</package>
<package pkgid="9ff309aa018944fb55e3035eb50784f543e60f8bee1f89652c7557518e9ed498" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
</package>
<package pkgid="3068e8bd81024614e05255c0291818edfd348934c1890136f2bad29d179501f2" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
</package>
<package pkgid="bb04b964fa7ccae6b75d58c6fbe6b198e88febebcf3afef6efdbb401679e01ce" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
</package>
<package pkgid="942a807da2054de7f120bba48dcd1abdbabcd0fc4b860b68a9922a79eedfcadc" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-5" date="1751284800">- Fix CVE-2025-48976</changelog>
</package>
<package pkgid="db756d600184233999fcc02cc91aa4a68c05b159254fd875e746273e592b6373" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="6.oe2203sp4"/>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-5" date="1751284800">- Fix CVE-2025-48976</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-6" date="1752235200">- Fix CVE-2025-52434 CVE-2025-53506 CVE-2025-52520</changelog>
</package>
<package pkgid="2e78d6935ba3122bbd9bfdeb3a985b77ff6b5546ef6c5185b14ef9936ca9e54e" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-5" date="1751284800">- Fix CVE-2025-48976</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-6" date="1752235200">- Fix CVE-2025-52434 CVE-2025-53506 CVE-2025-52520</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-7" date="1755172800">- Fix CVE-2025-55668</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-8" date="1755259200">- Fix CVE-2025-48989</changelog>
</package>
<package pkgid="d1d774bc63f7059ed37a4b1414d5fcaf5be7596de833a6268047e5069a0a986b" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.100" rel="9.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-5" date="1751284800">- Fix CVE-2025-48976</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-6" date="1752235200">- Fix CVE-2025-52434 CVE-2025-53506 CVE-2025-52520</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-7" date="1755172800">- Fix CVE-2025-55668</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-8" date="1755259200">- Fix CVE-2025-48989</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-9" date="1761652800">- Fix CVE-2025-55752, CVE-2025-55754 and CVE-2025-61795</changelog>
</package>
<package pkgid="448f5cfebe3627af3e5fdacb6d51a47b9faf75d9dc3f52ba7e70942c8d0254fe" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.115" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-1" date="1740139200">- Update to 9.0.100 for fix CVE-2024-56337
- Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
  the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-2" date="1745928000">- Fix CVE-2025-31650, CVE-2025-31651</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-3" date="1749038400">- Fix CVE-2025-46701</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-4" date="1750248000">- Fix CVE-2025-48988, CVE-2025-49125</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-5" date="1751284800">- Fix CVE-2025-48976</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.100-6" date="1752235200">- Fix CVE-2025-52434 CVE-2025-53506 CVE-2025-52520</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-7" date="1755172800">- Fix CVE-2025-55668</changelog>
  <changelog author="Yu Peng &lt;yupeng@kylinos.cn&gt; - 1:9.0.100-8" date="1755259200">- Fix CVE-2025-48989</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.100-9" date="1761652800">- Fix CVE-2025-55752, CVE-2025-55754 and CVE-2025-61795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:9.0.115-1" date="1773230400">- Update to 9.0.115 for fix CVE-2026-24733, CVE-2026-24734 and CVE-2025-66614</changelog>
</package>
<package pkgid="8facfd397b9744d14edf36f86b7c96fa92d7cb6b70ff7f5699d854b6ecbcb5c7" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.96" rel="1.oe2203sp4"/>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
</package>
<package pkgid="95ac6ab316eb2a08b5beede43b6b6e81d620c958d5250e0d922b7cd526d23778" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.96" rel="2.oe2203sp4"/>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
</package>
<package pkgid="502f61a8bfdba059360bd087450c47a5039e3f808249cbfa2e399b8b1a3fcbd0" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.96" rel="3.oe2203sp4"/>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
</package>
<package pkgid="9d68ef82a8ee642301cc5a9592e964188ca9c9c7b9ccd83827d7787b49b70e09" name="tomcat" arch="src">
  <version epoch="1" ver="9.0.96" rel="4.oe2203sp4"/>
  <changelog author="xulei &lt;xulei@xfusion.com&gt; - 1:9.0.10-29" date="1671624000">- Fix CVE-2022-42252</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-30" date="1681732800">- Fix CVE-2023-28708</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-31" date="1694088000">- Fix CVE-2023-41080
- Add requires apache-commons-dbcp,pool,collections for fix path error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-32" date="1697803200">- Fix CVE-2023-45648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.10-33" date="1706011200">- Fix CVE-2024-21733,CVE-2023-24998,CVE-2023-28709,CVE-2023-42795</changelog>
  <changelog author="chenyaqiang &lt;chengyaqiang@huawei.com&gt; - 1:9.0.96-1" date="1730980800">- Update to 9.0.96
- Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
  CVE-2024-23672 CVE-2024-24549 CVE-2024-34750</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-2" date="1732017600">- Fix CVE-2024-52318</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-3" date="1732622400">- Add requires ecj for fix server error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:9.0.96-4" date="1734523200">- Fix CVE-2024-50379 CVE-2024-54677</changelog>
</package>
<package pkgid="0040c587a77c6541aeb86adc885d58c9c4ee62e0b9232e1428b7feca0ab6ff7b" name="tomcatjss" arch="src">
  <version epoch="0" ver="8.1.0" rel="3.oe2203sp4"/>
  <changelog author="wulei &lt;wulei80@h-partners.com&gt; - 8.1.0-2" date="1669032000">- Rectify the tomcatjss compilation failure caused by the openjdk-latest upgrade</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 8.1.0-3" date="1731499200">- Fix build fail for tomcat upgrade</changelog>
</package>
<package pkgid="d5d0c8f82c3d4e07143586a7c6d38330459414c7395248cf1762511500679a43" name="transfig" arch="src">
  <version epoch="1" ver="3.2.8b" rel="3.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:3.2.8b-3" date="1743508800">- Fix CVE-2025-31162,CVE-2025-31163 and CVE-2025-31164</changelog>
</package>
<package pkgid="9c7cf7b4e667297b73c7ca6ff6f778ad617c86fb493051857301f03a467106a1" name="transfig" arch="src">
  <version epoch="1" ver="3.2.8b" rel="4.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 1:3.2.8b-3" date="1743508800">- Fix CVE-2025-31162,CVE-2025-31163 and CVE-2025-31164</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:3.2.8b-4" date="1753876800">- Fix CVE-2025-46397,CVE-2025-46398,CVE-2025-46399 and CVE-2025-46400</changelog>
</package>
<package pkgid="408a8a9e1064785a1331cf1ae8c2057ed2eb37401f6e93c17b5bf80509a822e7" name="tuned" arch="src">
  <version epoch="0" ver="2.24.1" rel="1.oe2203sp4"/>
  <changelog author="hongrongxuan &lt;hongrongxuan@huawei.com&gt; - 2.19.0-3" date="1672056000">- change the default percentage when dirty data starts writeback</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 2.24.1-1" date="1733140800">- Upgrade to 2.24.1:
  - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
  - added sanity checks for API methods parameters. (CVE-2024-52337)</changelog>
</package>
<package pkgid="8c24eaf8747860d77d3e330195dc01304ad173e60c276122d60ea976d02c537f" name="tuned" arch="src">
  <version epoch="0" ver="2.24.1" rel="2.oe2203sp4"/>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 2.24.1-1" date="1733140800">- Upgrade to 2.24.1:
  - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
  - added sanity checks for API methods parameters. (CVE-2024-52337)</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.24.1-2" date="1741867200">- profiles: add spark-omni</changelog>
</package>
<package pkgid="c99e0e36d660e7935ef714dbbc38c25c742e5f25e8fbe49a8752f138b6b43ad5" name="tuned" arch="src">
  <version epoch="0" ver="2.24.1" rel="3.oe2203sp4"/>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 2.24.1-1" date="1733140800">- Upgrade to 2.24.1:
  - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
  - added sanity checks for API methods parameters. (CVE-2024-52337)</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.24.1-2" date="1741867200">- profiles: add spark-omni</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; - 2.24.1-3" date="1750680000">- profiles: add programmable scheduling based on eBPF
- package:  change package tuned to architecture-dependent</changelog>
</package>
<package pkgid="f0905c7044bcc9e3b755f20a8184628e2c9a99cda5953f0183940d6ec470d106" name="tuned" arch="src">
  <version epoch="0" ver="2.24.1" rel="5.oe2203sp4"/>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 2.24.1-1" date="1733140800">- Upgrade to 2.24.1:
  - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
  - added sanity checks for API methods parameters. (CVE-2024-52337)</changelog>
  <changelog author="LemmyHuang &lt;huangliming5@huawei.com&gt; - 2.24.1-2" date="1741867200">- profiles: add spark-omni</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; - 2.24.1-3" date="1750680000">- profiles: add programmable scheduling based on eBPF
- package:  change package tuned to architecture-dependent</changelog>
  <changelog author="wuchangye &lt;wuchangye@huawei.com&gt; - 2.24.1-4" date="1757851200">- tuned-ebpf: support optional param filter: arg_prefix</changelog>
  <changelog author="tianmuyang &lt;tianmuyang@huawei.com&gt; - 2.24.1-5" date="1758024000">- tuned-ebpf: Add pid cache to avoid binding one process for multiple times
- tuned-ebpf: Add "AND" logic of cpu mask in eBPF programmable schedule</changelog>
</package>
<package pkgid="1c7c78e46d21367c1523ccac3e0157abf316cead1b2047e8807c4db82b9bf97d" name="tzdata" arch="src">
  <version epoch="0" ver="2022a" rel="20.oe2203sp4"/>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-14" date="1680782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Palestine no longer observes DST during Ramadan</changelog>
  <changelog author="qinyu&lt;qinyu32@huawei.com&gt; - 2022a-15" date="1680782401">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Greenland changed standard time already</changelog>
  <changelog author="langfei&lt;langfei@huawei.com&gt; - 2022a-16" date="1702468800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-17" date="1706011200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-18" date="1707048000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Palestine springs forward a week later after Ramadan</changelog>
  <changelog author="langfei &lt;langfei@huawei.com&gt; - 2022a-19" date="1730376000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: The time zone rule of Paraguay is changed.</changelog>
  <changelog author="langfei &lt;langfei@huawei.com&gt; - 2022a-20" date="1743163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Aysén Region moves from -04/-03 to -03; new zone;
-	Improve recent commentary for Chilean decrees.</changelog>
</package>
<package pkgid="5d40d0f449314666d624a2960259410f305ea855857c2d7921b4ffd97db5fc96" name="tzdata" arch="src">
  <version epoch="0" ver="2022a" rel="21.oe2203sp4"/>
  <changelog author="langfei&lt;langfei@huawei.com&gt; - 2022a-16" date="1702468800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-17" date="1706011200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5</changelog>
  <changelog author="liuchao &lt;liuchao173@huawei.com&gt; - 2022a-18" date="1707048000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Palestine springs forward a week later after Ramadan</changelog>
  <changelog author="langfei &lt;langfei@huawei.com&gt; - 2022a-19" date="1730376000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: The time zone rule of Paraguay is changed.</changelog>
  <changelog author="langfei &lt;langfei@huawei.com&gt; - 2022a-20" date="1743163200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Aysén Region moves from -04/-03 to -03; new zone;
-	Improve recent commentary for Chilean decrees.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2022a-21" date="1758888000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Rename Europe/Kiev to Europe/Kyiv</changelog>
</package>
<package pkgid="28e8c3bcacbee407e9c45fbc7ae466099b39790202fc2bc5f87dbdc1e65e4e79" name="ub-dhcp" arch="src">
  <version epoch="12" ver="1.0.0" rel="7.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-1" date="1667304000">- Type:requirement
- ID:NA
- SUG:restart
- DESC:update to 4.4.3</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 12:1.0.0-1" date="1697198400">- Release based on dhcp 4.4.3.</changelog>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 12:1.0.0-2" date="1703073600">- Merge the openEuler modification suggestions.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-3" date="1703505600">- Corrected the offset of the duid type pointer.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-4" date="1710331200">- Code security review issues are rectified.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-5" date="1717675200">- Modify the dguid of network control packets.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 12:1.0.0-6" date="1723723200">- Update to openeuler-sp4.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 12:1.0.0-7" date="1723723201">- Security check and modification.</changelog>
</package>
<package pkgid="6fed55cb4dbaa0b50b230630902ae0df4e0469308c536b5a9785a3a36ae2dbd6" name="ub-dhcp" arch="src">
  <version epoch="12" ver="1.0.0" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 12:1.0.0-1" date="1697198400">- Release based on dhcp 4.4.3.</changelog>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 12:1.0.0-2" date="1703073600">- Merge the openEuler modification suggestions.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-3" date="1703505600">- Corrected the offset of the duid type pointer.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-4" date="1710331200">- Code security review issues are rectified.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 12:1.0.0-5" date="1717675200">- Modify the dguid of network control packets.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 12:1.0.0-6" date="1723723200">- Update to openeuler-sp4.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 12:1.0.0-7" date="1723723201">- Security check and modification.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 12:1.0.0-8" date="1726747200">- modify for ICSL.</changelog>
</package>
<package pkgid="5afa046b23ee27560f0f83144ada4a0a605e5de8a08801ff8453edd565f2f593" name="ub-lldpd" arch="src">
  <version epoch="0" ver="1.0.0" rel="3.oe2203sp4"/>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 1.0.0-1" date="1696939200">- Release based on lldpd 1.0.13.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 1.0.0-2" date="1717675200">- Modify the dguid of network control packets.
- Add the UB-LLDP fuzz test case.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 1.0.0-3" date="1723723200">- update to openeuler-sp4.
- Security check and modification.</changelog>
</package>
<package pkgid="33b63221ee75f53a47744410da737e2ebb7837fd610ef8bb597316e611a620bf" name="ub-lldpd" arch="src">
  <version epoch="0" ver="1.0.0" rel="4.oe2203sp4"/>
  <changelog author="Jeiwei Li &lt;lijiewei5@huawei.com&gt; - 1.0.0-1" date="1696939200">- Release based on lldpd 1.0.13.</changelog>
  <changelog author="Zhongyuan Zhou &lt;zhouzhongyuan1@huawei.com&gt; - 1.0.0-2" date="1717675200">- Modify the dguid of network control packets.
- Add the UB-LLDP fuzz test case.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 1.0.0-3" date="1723723200">- update to openeuler-sp4.
- Security check and modification.</changelog>
  <changelog author="Ge Hu &lt;huge4@huawei.com&gt; - 1.0.0-4" date="1726747200">- modify for ICSL.</changelog>
</package>
<package pkgid="6014ece2750a0ff8901359acda03a730a411174cc03a82f925b6560dc2cb660e" name="uboot-tools" arch="src">
  <version epoch="0" ver="2021.10" rel="10.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-8" date="1727179200">- fix CVE-2022-2347</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-9" date="1739966400">- fix CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-10" date="1746532800">- fix CVE-2022-33103</changelog>
</package>
<package pkgid="3f193a5944339bcc268843ed4b1666ab97e0fad033e5fd6e0fb4a8d878ccda0c" name="uboot-tools" arch="src">
  <version epoch="0" ver="2021.10" rel="8.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2021.10-7" date="1664366400">- fix CVE-2022-30767</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-8" date="1727179200">- fix CVE-2022-2347</changelog>
</package>
<package pkgid="9ed69d8ffe75b21d9759e5ee587d021fdd1a979aa7152de0067acf6562f1f626" name="uboot-tools" arch="src">
  <version epoch="0" ver="2021.10" rel="9.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-8" date="1727179200">- fix CVE-2022-2347</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2021.10-9" date="1739966400">- fix CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259</changelog>
</package>
<package pkgid="f0285ff6ae3a597d7c1d928b00a84020e840c003b44be7660a976e4334b360d3" name="udisks2" arch="src">
  <version epoch="0" ver="2.9.4" rel="7.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.4-5" date="1717416000">- udisksctl: Guard object lookup</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.4-6" date="1718712000">- udiskslinuxmanager:use dbus interface after free</changelog>
  <changelog author="zhangjian &lt;zhangjian496@huawei.com&gt; - 2.9.4-7" date="1750680000">- fix cve-2025-6019</changelog>
</package>
<package pkgid="1b2464ff773792d575f737b512e5936813a76c02d1edb53a2b7d7b76a10dbaef" name="udisks2" arch="src">
  <version epoch="0" ver="2.9.4" rel="9.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.4-5" date="1717416000">- udisksctl: Guard object lookup</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.4-6" date="1718712000">- udiskslinuxmanager:use dbus interface after free</changelog>
  <changelog author="zhangjian &lt;zhangjian496@huawei.com&gt; - 2.9.4-7" date="1750680000">- fix cve-2025-6019</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.9.4-8" date="1752235200">- udisksctl: fix segfault</changelog>
  <changelog author="wangmian &lt;wangmian19@h-partners.com&gt; - 2.9.4-9" date="1756900800">- fix cve-2025-8067</changelog>
</package>
<package pkgid="2423a56c0b39c7bf022f12ef6d9016844bfe2fdfa0cda105bc027c27bd71e049" name="umdk-urma" arch="src">
  <version epoch="0" ver="1.3.0" rel="B014.oe2203sp4"/>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B014" date="1724760000">- Bugfix: support dynamic qp function</changelog>
</package>
<package pkgid="e458b7e2e82413b521b9d1b071f9ada95acc768ccda563f34d52597e3431da73" name="umdk-urma" arch="src">
  <version epoch="0" ver="1.3.0" rel="B015.oe2203sp4"/>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B014" date="1724760000">- Bugfix: support dynamic qp function</changelog>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B015" date="1727179200">- Bugfix: add prefix of hns3 to udma</changelog>
</package>
<package pkgid="dabbd741582649269d08f1fc0af34a333c9369035ef3c0940f84a80e645e4340" name="umdk-urma" arch="src">
  <version epoch="0" ver="1.3.0" rel="B016.oe2203sp4"/>
  <changelog author="Yizhen Fan &lt;fanyizhen@huawei.com&gt; - 1.3.0-B007" date="1701259200">- Type:bugfix
- DESC:modify SO_REUSEADDR to SO_REUSEPORT</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.3.0-B008" date="1711108800">- add BuildRequires:systemd for /usr/lib/systemd/system Macros</changelog>
  <changelog author="WenChen &lt;chenwen54@huawei.com&gt; - 1.3.0-B009" date="1716379200">- add sync urma_tag</changelog>
  <changelog author="WenChen &lt;chenwen54@huawei.com&gt; - 1.3.0-B010" date="1717588800">- fix bugs urma_perftest init</changelog>
  <changelog author="WenChen &lt;chenwen54@huawei.com&gt; - 1.3.0-B011" date="1718884800">- Bugfix: urma tool information error</changelog>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B012" date="1718884801">- Bugfix: hns3 udma: add rq mode for UM</changelog>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B013" date="1721304000">- Bugfix: add log for udma</changelog>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B014" date="1724760000">- Bugfix: support dynamic qp function</changelog>
  <changelog author="WeiboZhao &lt;zhaoweibo3@huawei.com&gt; - 1.3.0-B015" date="1727179200">- Bugfix: add prefix of hns3 to udma</changelog>
  <changelog author="ChenYutao &lt;884071658@qq.com&gt; - 1.3.0-B016" date="1728907200">- Bugfix: Do not show cc_alg in tp_mode_flag of vport_table</changelog>
</package>
<package pkgid="ccf4e14e54981d1c0ede4a0207a51ebaa749a35ef356cef804fe34e288cee5db" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="13.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
</package>
<package pkgid="54904774695afc3a174c8f663fc288ed882d851e3a511d197e831debca8012c6" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="14.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 1.13.2-6" date="1663848000">- Type:cves
- CVE:CVE-2022-3204
- SUG:NA
- DESC:fix CVE-2022-3204</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
</package>
<package pkgid="0b12ff353f6479f8629063c057e5c531d215b2bdc26d9e9bb3559d54665ca1f0" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="15.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
</package>
<package pkgid="e7cd86418e405455f187c59354168d9fd759b04c97cd5a0694c116b15487b268" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="16.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-7" date="1677067200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport to fix upstream issue #610 #611</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
</package>
<package pkgid="d763efa321d9b57477fa6e41e134c8c4bd5cf251b15a643340d22db14759d89c" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="17.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-8" date="1677844800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-17" date="1737633600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add check to fix coredump</changelog>
</package>
<package pkgid="28d0a50f4fa3b5115f261497e1f020f95da0dc678656c9c6e89d7db2b8e7b502" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="18.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-9" date="1708689600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-17" date="1737633600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add check to fix coredump</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-18" date="1754308800">- Type:cves
- CVE:CVE-2025-5994
- SUG:NA
- DESC:fix CVE-2025-5994</changelog>
</package>
<package pkgid="f0dac4a230dde5b7749f54889fe70759a0d901c5bbedc267645b543d39482dac" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="19.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-10" date="1709035200">- Type:cves
- CVE:CVE-2024-1488
- SUG:NA
- DESC:fix CVE-2024-1488</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-17" date="1737633600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add check to fix coredump</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-18" date="1754308800">- Type:cves
- CVE:CVE-2025-5994
- SUG:NA
- DESC:fix CVE-2025-5994</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-19" date="1755604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add CVE-2025-5994's after patches</changelog>
</package>
<package pkgid="b844c186ffa59c25e1e63e9c8df9e833a1dd0b751006785a795e44f13fb05043" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="20.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-11" date="1709640000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change ExecReload to fix reload failure</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-17" date="1737633600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add check to fix coredump</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-18" date="1754308800">- Type:cves
- CVE:CVE-2025-5994
- SUG:NA
- DESC:fix CVE-2025-5994</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-19" date="1755604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add CVE-2025-5994's after patches</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-20" date="1762516800">- Type:cves
- CVE:CVE-2025-11411
- SUG:NA
- DESC:fix CVE-2025-11411</changelog>
</package>
<package pkgid="e107fdfb286bbb0d5a411e3e759696e5c77c2f68e298e414f2a2e209a42c8003" name="unbound" arch="src">
  <version epoch="0" ver="1.13.2" rel="21.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-12" date="1719316800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:move files about anchor and pem to separate package</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-13" date="1724068800">- Type:cves
- CVE:CVE-2024-43167 CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43167 CVE-2024-43168</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-14" date="1724673600">- Type:cves
- CVE:CVE-2024-43168
- SUG:NA
- DESC:fix CVE-2024-43168 better</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-15" date="1727352000">- Type:CVE
- CVE:CVE-2024-33655
- SUG:NA
- DESC:fix CVE-2024-33655</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-16" date="1729080000">- Type:cves
- CVE:CVE-2024-8508
- SUG:NA
- DESC:fix CVE-2024-8508</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-17" date="1737633600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add check to fix coredump</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-18" date="1754308800">- Type:cves
- CVE:CVE-2025-5994
- SUG:NA
- DESC:fix CVE-2025-5994</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-19" date="1755604800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream to add CVE-2025-5994's after patches</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-20" date="1762516800">- Type:cves
- CVE:CVE-2025-11411
- SUG:NA
- DESC:fix CVE-2025-11411</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.13.2-21" date="1771934400">- Type:CVE
- CVE:CVE-2025-11411
- SUG:NA
- DESC:Additional fix for CVE-2025-11411 to include YXDOMAIN and non-referral nodata answers in the mitigation</changelog>
</package>
<package pkgid="03cdde830e489b0cb340c35410506a35bae82af19827ae7007f91880a508b38e" name="undertow" arch="src">
  <version epoch="1" ver="1.4.0" rel="10.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:1.4.0-7" date="1730808000">- Fix CVE-2021-3690,CVE-2023-1973 and CVE-2023-5379</changelog>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 1:1.4.0-8" date="1734436800">- Fix CVE-2024-4109</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:1.4.0-9" date="1741089600">- Fix CVE-2017-12196,CVE-2019-10184 and CVE-2019-10212</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:1.4.0-10" date="1770811200">- Fix CVE-2024-3884 and CVE-2024-4027</changelog>
</package>
<package pkgid="1a78e854fb86aa70c30b18d06943ae3f4e45c805a408af1a7cbe9e0ff40996e9" name="undertow" arch="src">
  <version epoch="1" ver="1.4.0" rel="7.oe2203sp4"/>
  <changelog author="mayp &lt;mayanping@ncti-gba.cn&gt; - 1:1.4.0-5" date="1680523200">- Fix CVE-2023-1108</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1:1.4.0-6" date="1686657600">- Delete TransferTestCase.java TestCase</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:1.4.0-7" date="1730808000">- Fix CVE-2021-3690,CVE-2023-1973 and CVE-2023-5379</changelog>
</package>
<package pkgid="628dca9d21a5d21e9b88bc511ce6d23c14c88eef257fc1f9f338db1d00b64a5b" name="undertow" arch="src">
  <version epoch="1" ver="1.4.0" rel="8.oe2203sp4"/>
  <changelog author="mayp &lt;mayanping@ncti-gba.cn&gt; - 1:1.4.0-5" date="1680523200">- Fix CVE-2023-1108</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1:1.4.0-6" date="1686657600">- Delete TransferTestCase.java TestCase</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:1.4.0-7" date="1730808000">- Fix CVE-2021-3690,CVE-2023-1973 and CVE-2023-5379</changelog>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 1:1.4.0-8" date="1734436800">- Fix CVE-2024-4109</changelog>
</package>
<package pkgid="360072f928d395ab67be11e115c70891fc732b3d72d4bd0a6951a523833e96e0" name="undertow" arch="src">
  <version epoch="1" ver="1.4.0" rel="9.oe2203sp4"/>
  <changelog author="mayp &lt;mayanping@ncti-gba.cn&gt; - 1:1.4.0-5" date="1680523200">- Fix CVE-2023-1108</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1:1.4.0-6" date="1686657600">- Delete TransferTestCase.java TestCase</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:1.4.0-7" date="1730808000">- Fix CVE-2021-3690,CVE-2023-1973 and CVE-2023-5379</changelog>
  <changelog author="liyajie &lt;liyajie15@h-partners.com&gt; - 1:1.4.0-8" date="1734436800">- Fix CVE-2024-4109</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:1.4.0-9" date="1741089600">- Fix CVE-2017-12196,CVE-2019-10184 and CVE-2019-10212</changelog>
</package>
<package pkgid="27bf43638ecfd4fb14fb2a047ba17ae0eedf4eead9414867ace82471c63c4d2a" name="unixbench" arch="src">
  <version epoch="0" ver="6.0.0" rel="1.oe2203sp4"/>
  <changelog author="openeuler_bot &lt;infra@openeuler.sh&gt; - 6.0.0-1" date="1750334400">- update unixbench to 6.0.0</changelog>
</package>
<package pkgid="851c2c32f51cac6130d0bacf2ad2886014a80a2702ae55b1659595e4e462ce77" name="unrtf" arch="src">
  <version epoch="0" ver="0.21.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.21.9-2" date="1767182400">- Fix CVE-2025-65410,CVE-2025-65411</changelog>
</package>
<package pkgid="d0c743a4612bcfd13e7bcb2bf625d76ebc4fc09320d1558c698f2ebe94d26477" name="usbmuxd" arch="src">
  <version epoch="0" ver="1.1.1" rel="5.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.1.1-5" date="1765368000">- fix CVE-2025-66004
- add tmpfiles</changelog>
</package>
<package pkgid="9580d21ab4eabc6402a8b607b275bc2fd411d26342a0bbfb64c708f986951657" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.2" rel="41.oe2203sp4"/>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-32" date="1717761600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-uuidd-fix-open-lock-state-issue.patch</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.37.2-33" date="1718712000">- Type:update
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-34" date="1719662400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-Fix-ul_path_read_buffer.patch
       backport-fsck.minix-fix-possible-overrun.patch
       backport-wall-fix-possible-memory-leak.patch
       backport-wall-make-sure-unsigned-variable-not-underflow.patch</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.37.2-35" date="1720008000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix sfdisk crash caused by wrong translate file</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.37.2-36" date="1720526400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       backport-login-su-pam_end-compliance.patch</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; -  2.37.2-37" date="1722859200">- Fixed incorrect macro usage in summary fields of devel and help subpackages</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-38" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
       backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
       backport-more-make-sure-we-have-data-on-stderr.patch
       backport-libblkid-apfs-validate-checksums.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-39" date="1734004800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
       backport-sys-utils-save_adjtime-fix-memory-leak.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-40" date="1741003200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync community patches
       [add] backport-libblkid-ext-add-checksum-support.patch
       backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
       backport-libblkid-fix-potential-memory-leaks.patch
       backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
       backport-sulogin-fix-POSIX-locale-use.patch
       backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
       backport-whereis-avoid-accessing-uninitialized-memory.patch
       backport-dmesg-fix-notime-use.patch</changelog>
  <changelog author="YunYi Yang &lt;yangyunyi2@huawei.com&gt; - 2.37.2-41" date="1743422400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add new cpu model name of arm Kunpeng</changelog>
</package>
<package pkgid="d78a8e15f46559035ba915eed1feea1f0ef1cfe4358a9812f594a48801529316" name="util-linux" arch="src">
  <version epoch="0" ver="2.37.2" rel="50.oe2203sp4"/>
  <changelog author="YunYi Yang &lt;yangyunyi2@huawei.com&gt; - 2.37.2-41" date="1743422400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Add new cpu model name of arm Kunpeng</changelog>
  <changelog author="zhangting &lt;dev03303@linx-info.com&gt; - 2.37.2-42" date="1744372800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix an issue that mkfs.bfs fix memory leak
	mkfs.bfs-fix-memory-leaks-and-weak-code.patch</changelog>
  <changelog author="zhangyao &lt;zhangyao108@huawei.com&gt; - 2.37.2-43" date="1744718400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:revert community patches
       [del] backport-libblkid-ext-add-checksum-support.patch
       backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch</changelog>
  <changelog author="markeryang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-44" date="1750075200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport community patches
       [add] backport-lslogins-remove-possible-memory-leaks-coverity-scan.patch
             backport-mkfs.bfs-fix-memory-leaks-and-weak-code.patch
             backport-cfdisk-fix-memory-leak-and-possible-NULL-dereference.patch
             backport-swapoff-clean-up-tag-resolution.patch
             backport-libblkid-befs-fix-underflow.patch</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.37.2-45" date="1756814400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:lsblk: use md as fallback TYPE when md/level empty</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 2.37.2-46" date="1758283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:lsblk: fix memory leak [coverity scan]
       lsblk: fix possible use-after-free</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 2.37.2-47" date="1761048000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport community patches</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.37.2-48" date="1765886400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport community patches
         fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Linux_zhang &lt;244695981@qq.com&gt; - 2.37.2-49" date="1769083200">- the *.gmo file is automatically updated
  PO file translation mapping correction</changelog>
  <changelog author="markeryang &lt;747675909@qq.com&gt; - 2.37.2-50" date="1772625600">- fix CVE-2026-3184</changelog>
</package>
<package pkgid="e355cbc92408d738d4ca74a3381c3fe0f1bc17bf07df99f3a9b72fab0cdacbb3" name="valgrind" arch="src">
  <version epoch="1" ver="3.16.0" rel="7.oe2203sp4"/>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:3.16.0-5" date="1706702400">- Add ppc64le support</changelog>
  <changelog author="yueyuankun &lt;yueyuankun@kylinos.cn&gt; - 1:3.16.0-6" date="1734004800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
       sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 1:3.16.0-7" date="1736856000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:x86_64: Adjust invalid ln operation</changelog>
</package>
<package pkgid="55a54ac95cbe028925b6ad14f6a98abd9b28463d602b9c48994184711b907f97" name="varnish" arch="src">
  <version epoch="0" ver="7.4.3" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.4.2-1" date="1708171200">- Update to 7.4.2 for fix CVE-2023-44487</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 7.4.3-1" date="1711368000">- Update to 7.4.3 for fix CVE-2024-30156</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 7.4.3-2" date="1742817600">- Fix CVE-2025-30346</changelog>
</package>
<package pkgid="378c7797b7e4a100c021afb6d37e2e1b890424189d2a097355886720d6a85b58" name="varnish" arch="src">
  <version epoch="0" ver="7.4.3" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.4.2-1" date="1708171200">- Update to 7.4.2 for fix CVE-2023-44487</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 7.4.3-1" date="1711368000">- Update to 7.4.3 for fix CVE-2024-30156</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 7.4.3-2" date="1742817600">- Fix CVE-2025-30346</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 7.4.3-3" date="1747656000">- Fix CVE-2025-47905</changelog>
</package>
<package pkgid="b91714e89389befaf9ca7be1e1deff44d77ae8ff56523a890de9340671df4495" name="varnish" arch="src">
  <version epoch="0" ver="7.4.3" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.0.1-9" date="1702382400">- Fix CVE-2022-45059</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 7.4.2-1" date="1708171200">- Update to 7.4.2 for fix CVE-2023-44487</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 7.4.3-1" date="1711368000">- Update to 7.4.3 for fix CVE-2024-30156</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 7.4.3-2" date="1742817600">- Fix CVE-2025-30346</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 7.4.3-3" date="1747656000">- Fix CVE-2025-47905</changelog>
  <changelog author="liweigang &lt;liweiganga@gmail.com&gt; - 7.4.3-4" date="1755259200">- Fix CVE-2025-8671</changelog>
</package>
<package pkgid="60f0c3dcfa71bc5020afd9261afdf7b79fb7921350f0b19ab62428f05d76a83c" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="24.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-15" date="1683979200">- Type:CVE
- ID:CVE-2023-2609 CVE-2023-2610
- SUG:NA
- DESC:CVE-2023-2609 CVE-2023-2610</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
</package>
<package pkgid="9c9ff57aa1cc7251d0cb7d40c7777287fe95e11807855dbae15056eb053122bc" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="25.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-16" date="1694088000">- Type:CVE
- ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
- SUG:NA
- DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-17" date="1694520000">- Type:CVE
- ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
- SUG:NA
- DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
</package>
<package pkgid="4aca6af602f18a24c862da6f1e7230d1c2619cbc6ad732530becfaf8c858605b" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="27.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-18" date="1696766400">- Type:CVE
- ID:CVE-2023-5344
- SUG:NA
- DESC:fix CVE-2023-5344</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
</package>
<package pkgid="bc607d8bbb3ca10640b2bbc1e358bc4de182161d449ab5108b454388bbfb947b" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="28.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-19" date="1697457600">- Type:CVE
- ID:CVE-2023-5441 CVE-2023-5535
- SUG:NA
- DESC:fix CVE-2023-5441 CVE-2023-5535</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-20" date="1698840000">- Type:CVE
- ID:CVE-2023-46246
- SUG:NA
- DESC:fix CVE-2023-46246</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-21" date="1699272000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix garbled characters display with keywords of filename</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
</package>
<package pkgid="ba78801118b48b655fde52834bc3ce0f984c5c8f762d31a06f4a873e23c838b5" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="31.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-22" date="1700654400">- Type:CVE
- ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
- SUG:NA
- DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-29" date="1731412800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix coredump when use vnew command</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
</package>
<package pkgid="fb467c2a641ee8eb7d466f17a4ab69b2c27e7c7481eef5d94a0b10762c13ab9e" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="32.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-23" date="1701172800">- Type:CVE
- ID:CVE-2023-48706
- SUG:NA
- DESC:fix CVE-2023-48706</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-29" date="1731412800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix coredump when use vnew command</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
</package>
<package pkgid="c0ce61598840df97f504d7b8aa6619c683984e646bb8c66e7eef13962a4ca6e5" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="33.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-24" date="1722945600">- Type:CVE
- ID:CVE-2024-41957 CVE-2024-41965
- SUG:NA
- DESC:fix CVE-2024-41957 CVE-2024-41965</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2:9.0-25" date="1723809600">- Type:CVE
- ID:CVE-2024-43374
- SUG:NA
- DESC:fix CVE-2024-43374</changelog>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-29" date="1731412800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix coredump when use vnew command</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
</package>
<package pkgid="3cc9c51dabb78ed7b44febc98a2b6f03c413efadf0f57e2b4df2ac94dae8f922" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="35.oe2203sp4"/>
  <changelog author="wangjiang &lt;wangjiang37@h-partners.com&gt; - 2:9.0-26" date="1724241600">- Type:enhacement
- ID:NA
- SUG:NA
- DESC:support newly introduced rpm tags</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-27" date="1724932800">- Type:CVE
- ID:CVE-2024-43802
- SUG:NA
- DESC:fix CVE-2024-43802</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-29" date="1731412800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix coredump when use vnew command</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-34" date="1743681600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix some tests failed</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-35" date="1753358400">- Type:CVE
- ID:CVE-2025-53905 CVE-2025-53906
- SUG:NA
- DESC:fix CVE-2025-53905 CVE-2025-53906</changelog>
</package>
<package pkgid="3b45784ea38b728b70d24d67cf41d7684d9770af85d4315891c891e7c5b674dc" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="37.oe2203sp4"/>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 2:9.0-28" date="1728388800">- Type:CVE
- ID:CVE-2024-47814
- SUG:NA
- DESC:fix CVE-2024-47814</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-29" date="1731412800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix coredump when use vnew command</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-34" date="1743681600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix some tests failed</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-35" date="1753358400">- Type:CVE
- ID:CVE-2025-53905 CVE-2025-53906
- SUG:NA
- DESC:fix CVE-2025-53905 CVE-2025-53906</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-36" date="1755777600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync changes to the tar#Read() function call</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-37" date="1770379200">- Type:CVE
- ID:CVE-2026-25749
- SUG:NA
- DESC:fix CVE-2026-25749</changelog>
</package>
<package pkgid="ebb42a8720c88db959009b4568b94d2db5687d643145db9db1395d6885a1aefa" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="39.oe2203sp4"/>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-30" date="1734091200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix tiny-Vim crashes with fuzzy buffer completion</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-34" date="1743681600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix some tests failed</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-35" date="1753358400">- Type:CVE
- ID:CVE-2025-53905 CVE-2025-53906
- SUG:NA
- DESC:fix CVE-2025-53905 CVE-2025-53906</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-36" date="1755777600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync changes to the tar#Read() function call</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-37" date="1770379200">- Type:CVE
- ID:CVE-2026-25749
- SUG:NA
- DESC:fix CVE-2026-25749</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-38" date="1770638400">- Type:bugfix   
- ID:NA 
- SUG:NA
- DESC:fix another case of buffer overflow with helpfile</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:9.0-39" date="1772020800">- fix CVE-2026-26269</changelog>
</package>
<package pkgid="74bd2d9b1756964643743d6f67c25d1cd2e7e5bcbee8ca2cf2392376a7322b92" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="40.oe2203sp4"/>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-31" date="1737374400">- Type:CVE
- ID:CVE-2025-22134 CVE-2025-24014
- SUG:NA
- DESC:CVE-2025-22134 CVE-2025-24014</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-34" date="1743681600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix some tests failed</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-35" date="1753358400">- Type:CVE
- ID:CVE-2025-53905 CVE-2025-53906
- SUG:NA
- DESC:fix CVE-2025-53905 CVE-2025-53906</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-36" date="1755777600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync changes to the tar#Read() function call</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-37" date="1770379200">- Type:CVE
- ID:CVE-2026-25749
- SUG:NA
- DESC:fix CVE-2026-25749</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-38" date="1770638400">- Type:bugfix   
- ID:NA 
- SUG:NA
- DESC:fix another case of buffer overflow with helpfile</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:9.0-39" date="1772020800">- fix CVE-2026-26269</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-40" date="1772625600">- fix CVE-2026-28417 CVE-2026-28418 CVE-2026-28419 CVE-2026-28420 CVE-2026-28421 CVE-2026-28422</changelog>
</package>
<package pkgid="c407e464b6b7292d678441bc00afbec45063af78552212fe5a81102b2a295d3a" name="vim" arch="src">
  <version epoch="2" ver="9.0" rel="41.oe2203sp4"/>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-32" date="1739880000">- Type:CVE
- ID:CVE-2025-1215 CVE-2025-26603
- SUG:NA
- DESC:fix CVE-2025-1215 CVE-2025-26603</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-33" date="1742299200">- Type:CVE
- ID:CVE-2025-29768
- SUG:NA
- DESC:fix CVE-2025-29768</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-34" date="1743681600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix some tests failed</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-35" date="1753358400">- Type:CVE
- ID:CVE-2025-53905 CVE-2025-53906
- SUG:NA
- DESC:fix CVE-2025-53905 CVE-2025-53906</changelog>
  <changelog author="wangjiang &lt;app@cameyan.com&gt; - 2:9.0-36" date="1755777600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync changes to the tar#Read() function call</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-37" date="1770379200">- Type:CVE
- ID:CVE-2026-25749
- SUG:NA
- DESC:fix CVE-2026-25749</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-38" date="1770638400">- Type:bugfix   
- ID:NA 
- SUG:NA
- DESC:fix another case of buffer overflow with helpfile</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:9.0-39" date="1772020800">- fix CVE-2026-26269</changelog>
  <changelog author="wjiang &lt;app@cameyan.com&gt; - 2:9.0-40" date="1772625600">- fix CVE-2026-28417 CVE-2026-28418 CVE-2026-28419 CVE-2026-28420 CVE-2026-28421 CVE-2026-28422</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:9.0-41" date="1774180800">- fix 2026-33412</changelog>
</package>
<package pkgid="780db6f9e941310fe64a6ab99c9bcddb33669b2954999197826cd9ca6c17b865" name="virtCCA_driver" arch="src">
  <version epoch="0" ver="0.1.3" rel="5.oe2203sp4"/>
  <changelog author="tujipei&lt;tujipei@huawei.com&gt; - 0.1.3-5" date="1721044800">- Type:bugfix
- DESC:Use weak-modules to decouple kernel modules from kernel versions</changelog>
</package>
<package pkgid="dc1cbb8e4fe6827a2661379456ce14e39c99dff27f48a0590047ea0d473de3bc" name="virtCCA_sdk" arch="src">
  <version epoch="0" ver="0.1.2" rel="1.oe2203sp4"/>
  <changelog author="lishengjie&lt;lishengjie12@huawei.com&gt; - 0.1.0-1" date="1716897600">- DESC:init virtCCA_sdk</changelog>
  <changelog author="lishengjie&lt;lishengjie12@huawei.com&gt; - 0.1.1-1" date="1717156800">- DESC:Add sealing key lib</changelog>
  <changelog author="lishengjie&lt;lishengjie12@huawei.com&gt; - 0.1.2-1" date="1719403200">- DESC:Merge read token interface</changelog>
</package>
<package pkgid="57aec4fdf3abead0105462c07085e7fb638fb4841206195e2d6748dc8164ab05" name="vllm" arch="src">
  <version epoch="0" ver="0.6.6.post1" rel="2.oe2203sp4"/>
  <changelog author="renwenjie&lt;renwenjie5@huawei.com&gt; - 0.6.6.post1-1" date="1740744000">- Package init</changelog>
  <changelog author="renwenjie&lt;renwenjie5@huawei.com&gt; - 0.6.6.post1-2" date="1743076800">- solve 'no module named vllm._version' problem and adapted for openeuler22.03</changelog>
</package>
<package pkgid="448ce182bfc84d8a4e8a266411132cd78a44b8a607acb82c0c0870add7c61edb" name="vmtop" arch="src">
  <version epoch="0" ver="1.1" rel="8.oe2203sp4"/>
  <changelog author="lutong &lt;lutong14@huawei.com&gt; - 1.1-8" date="1750334400">- bugfix:fixed display error caused by missing signal_exits</changelog>
</package>
<package pkgid="59d6df34dbcd9c8bae9febad186a2f261a81cb7184daf46e3d0143921e171d46" name="vorbis-tools" arch="src">
  <version epoch="1" ver="1.4.2" rel="4.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:1.4.2-4" date="1729771200">- Fix CVE-2023-43361</changelog>
</package>
<package pkgid="ca65511fb00ebd0761a2f54656c373177f27134b46c359a47bc2b62bd45947dc" name="vsftpd" arch="src">
  <version epoch="0" ver="3.0.3" rel="34.oe2203sp4"/>
  <changelog author="xingwei &lt;xwwalker@qq.com&gt; - 3.0.3-34" date="1770206400">- Type:CVE
- ID:CVE-2025-14242
- SUG:NA
- DESC: fix CVE-2025-14242</changelog>
</package>
<package pkgid="25f9c58fb3eb8456781f41c036dd069545df5e294d17e4baaad5ab4aee05146d" name="vte291" arch="src">
  <version epoch="0" ver="0.62.3" rel="2.oe2203sp4"/>
</package>
<package pkgid="27e9a4290d2deb5dc6e98ac3ccb0e8f343b3995e86b8f51de3eed78802a4f994" name="wavpack" arch="src">
  <version epoch="0" ver="5.3.0" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.3.0-3" date="1732881600">- fix CVE-2022-2476</changelog>
</package>
<package pkgid="51cd9039bf4074950037e4686e27ea4499170f9e7992cc19662c56fabe9f330c" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.36.3" rel="7.oe2203sp4"/>
  <changelog author="huajingyun &lt;huajingyun@loongson.cn&gt; 2.36.3-2" date="1668427200">- Add support loongarch</changelog>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.36.3-3" date="1669723200">- Add sw64 architecture</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 2.36.3-4" date="1685361600">- fix CVE-2023-28204 CVE-2023-32373 CVE-2023-32409</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.36.3-5" date="1717156800">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add build option PIE</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 2.36.3-6" date="1718107200">- Modfiy loongarch64 and sw_64 support use all arch</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.36.3-7" date="1724328000">- fix CVE-2024-4558 CVE-2024-40779 CVE-2024-40780</changelog>
</package>
<package pkgid="cec539c40f670fb2632b1efccf58d9aa2ad398a613f5220dcae1cde2719e115d" name="wget" arch="src">
  <version epoch="0" ver="1.21.2" rel="5.oe2203sp4"/>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 1.21.2-2" date="1666440000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix find_cell(): wget killed by SIGSEGV</changelog>
  <changelog author="xingwei &lt;xingwei14@h-parters.com&gt; - 1.21.2-3" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:src/main.c (main): Remove unused variable</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; -1.21.2-4" date="1718539200">- Type:CVES
- ID:NA
- SUG:NA
- DESC:backport CVE-2024-38428</changelog>
  <changelog author="xingwei &lt;xingwei14@h-parters.com&gt; - 1.21.2-5" date="1719489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Check warc_write_ok (fix use-after-free)</changelog>
</package>
<package pkgid="6c09597977dd2d92b638907cb0c177c0f659605d43e8fe5b0a0454a3dc9496ab" name="wget" arch="src">
  <version epoch="0" ver="1.21.2" rel="6.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-parters.com&gt; - 1.21.2-3" date="1687003200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:src/main.c (main): Remove unused variable</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; -1.21.2-4" date="1718539200">- Type:CVES
- ID:NA
- SUG:NA
- DESC:backport CVE-2024-38428</changelog>
  <changelog author="xingwei &lt;xingwei14@h-parters.com&gt; - 1.21.2-5" date="1719489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Check warc_write_ok (fix use-after-free)</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; -1.21.2-6" date="1732708800">- Type:CVE
- ID:CVE-2024-10524
- SUG:NA
- DESC: fix CVE-2024-10524 and also fix Print message issue</changelog>
</package>
<package pkgid="05cc825c310ade150296ae21941ae3a0c874493cddbcea43625f9658407b41f6" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
</package>
<package pkgid="90fd0a6b594f947b9016fcc1c16d173d4424b5630eb2fa599338c06bed1ff3d7" name="wireshark" arch="src">
  <version epoch="1" ver="3.6.14" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.11-4" date="1685448000">- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-1" date="1686830400">- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-2" date="1690459200">- Fix CVE-2023-3648</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
</package>
<package pkgid="15c11fc4fe43570a60fac84858f5b3c95c3f50d162736e94b8266f7530535882" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.10" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.7-2" date="1756900800">- Fix CVE-2025-9817</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-1" date="1760184000">- Update to 4.4.10 for fix CVE-2025-11626</changelog>
</package>
<package pkgid="6852b85a4474e334fe7b3031fe84a0eaa2aa086f110bb760dd4098fd70829b6f" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.10" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.7-2" date="1756900800">- Fix CVE-2025-9817</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-1" date="1760184000">- Update to 4.4.10 for fix CVE-2025-11626</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-2" date="1763985600">- Fix CVE-2025-13499</changelog>
</package>
<package pkgid="f19fb70987977da0a1370df21ec238419ec0e95899de9392171d13c3448d12d4" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.10" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.7-2" date="1756900800">- Fix CVE-2025-9817</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-1" date="1760184000">- Update to 4.4.10 for fix CVE-2025-11626</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-2" date="1763985600">- Fix CVE-2025-13499</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.10-3" date="1764849600">- fix CVE-2025-13946</changelog>
</package>
<package pkgid="c6918eec82fbcecda50334bfbb294aa28e26d362a9a930cd107d035575b110c4" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.14" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.7-2" date="1756900800">- Fix CVE-2025-9817</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-1" date="1760184000">- Update to 4.4.10 for fix CVE-2025-11626</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.10-2" date="1763985600">- Fix CVE-2025-13499</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.10-3" date="1764849600">- fix CVE-2025-13946</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.13-1" date="1768478400">- update to 4.4.13</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.14-1" date="1772107200">- update to 4.4.14</changelog>
</package>
<package pkgid="4b36a919b280bd84281fa19d47772f03110d02323fdaab91b3d9e762320d3229" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.7" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-3" date="1694001600">- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
</package>
<package pkgid="5f45cbbb6b5fa3b940d632550e440f4a605d14666baa8abcc6e2b6f0d60a2475" name="wireshark" arch="src">
  <version epoch="1" ver="4.4.7" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-4" date="1696680000">- Fix CVE-2023-5371</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-5" date="1700568000">- Fix CVE-2023-6175</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-6" date="1704369600">- Fix CVE-2024-0208,CVE-2024-0209</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-7" date="1711368000">- Fix CVE-2023-0666</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-8" date="1715774400">- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:3.6.14-9" date="1725019200">- Fix CVE-2024-8250</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:3.6.14-10" date="1728302400">- Fix CVE-2024-24476</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1:3.6.14-11" date="1728475200">- Fix CVE-2024-8645</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:4.4.7-1" date="1749124800">- update to 4.4.7
- Fix CVE-2025-5601 CVE-2024-11596</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:4.4.7-2" date="1756900800">- Fix CVE-2025-9817</changelog>
</package>
<package pkgid="89ff2f564fd334d1582861a36297c78fbbc043bc02ea356efe05355496c1f412" name="woodstox-core" arch="src">
  <version epoch="0" ver="5.0.3" rel="2.oe2203sp4"/>
  <changelog author="chenyaqiang &lt;chenyaqiang@huawei.com&gt; - 5.0.3-2" date="1731326400">- Fix CVE-2022-40152</changelog>
</package>
<package pkgid="496f76cbdf097b97e452094da0cd7865d3e709c93e50816a60e97037ce1027c2" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="32.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 1:2.6-31" date="1714046400">- Type:cves
- ID:CVE-2023-52160
- SUG:NA
- DESC:fix CVE-2023-52160</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:2.6-32" date="1723204800">- Type:cves
- ID:CVE-2024-5290
- SUG:NA
- DESC:fix CVE-2024-5290</changelog>
</package>
<package pkgid="c94bdb33c2a3330be98cef12eaaae222c3cf3824b1da557a2d247d913319ed29" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="33.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 1:2.6-31" date="1714046400">- Type:cves
- ID:CVE-2023-52160
- SUG:NA
- DESC:fix CVE-2023-52160</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1:2.6-32" date="1723204800">- Type:cves
- ID:CVE-2024-5290
- SUG:NA
- DESC:fix CVE-2024-5290</changelog>
  <changelog author="hanguanqiang &lt;hanguanqiang@kylinos.cn&gt; - 1:2.6-33" date="1766491200">- Type:cves
- ID:CVE-2025-24912
- SUG:NA       
- DESC:fix CVE-2025-24912</changelog>
</package>
<package pkgid="61234356a6f37331fbe61c8c3c81c3949b122f6cfcf9cbf7d944a3c005246149" name="xml-security" arch="src">
  <version epoch="0" ver="2.3.5" rel="1.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 0:2.3.5-1" date="1736251200">- Update to version 2.3.5</changelog>
</package>
<package pkgid="3c27ee8bc90f3c23cc451f38719e9761940354ad5e677411625df810788a0d84" name="xmlrpc-c" arch="src">
  <version epoch="0" ver="1.51.08" rel="3.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.51.08-3" date="1725969600">- Type:CVE
- CVE:CVE-2024-45490 CVE-2024-45491
- SUG:NA
- DESC:fix CVE-2024-45490 CVE-2024-45491</changelog>
</package>
<package pkgid="576e8fd439aa296e5f4ec9876142c9f3e9eb7303aee39f1377cfbcce17f30f3c" name="xmlunit" arch="src">
  <version epoch="0" ver="2.7.0" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.0-2" date="1754308800">- Fix CVE-2024-31573</changelog>
</package>
<package pkgid="d65faa277ed92f3698b3adb978e5c1635218fdd385d1d6bdeb4076f63bd1ebcd" name="xmpcore" arch="src">
  <version epoch="0" ver="6.1.10" rel="1.oe2203sp4"/>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 6.1.10-1" date="1711022400">- update to version 6.1.10</changelog>
</package>
<package pkgid="a80c9ce1f58b1781f8a01ec9c986dc0349a173e8b8046282d09dde7d36fcc406" name="xnio" arch="src">
  <version epoch="0" ver="3.4.0" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.4.0-11" date="1730894400">- Fix CVE-2023-5685</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.4.0-12" date="1767700800">- Fix CVE-2022-0084</changelog>
</package>
<package pkgid="76e4ba86771f54facd932922b8abcdd30c17c6631327a47f0809e7bf93d87e5b" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="33.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; -1.20.11-24" date="1702641600">- fix CVE-2023-6478 CVE-2023-6377</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-25" date="1705579200">- fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2023-6816,CVE-2024-0229</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.20.11-26" date="1706529600">- Modify sw_64 patch to use all arch</changelog>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-30" date="1713355200">- fix regression caused by the fix for CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-31" date="1714132800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix regression caused by the fix for CVE-2024-0229 
       fix use after free related to CVE-2024-21886</changelog>
  <changelog author="shuaijiakun &lt;shuaijiakun1288@phytium.com.cn&gt; -1.20.11-32" date="1717070400">- Type:feature
- CVE:NA
- SUG:NA
- DESC:fix display error for ps23xx when using ast and pe2201 bmc card.</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.20.11-33" date="1729771200">- Type:CVE
- CVE:CVE-2023-5574
- SUG:NA
- DESC:fix CVE-2023-5574</changelog>
</package>
<package pkgid="e765fb0836db6c8284c05536fe59ed5e2a579944f18d06bfaa2e14a18271b0b5" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="34.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; -1.20.11-25" date="1705579200">- fix CVE-2024-21885,CVE-2024-21886,CVE-2024-0408,CVE-2024-0409,CVE-2023-6816,CVE-2024-0229</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.20.11-26" date="1706529600">- Modify sw_64 patch to use all arch</changelog>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-30" date="1713355200">- fix regression caused by the fix for CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-31" date="1714132800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix regression caused by the fix for CVE-2024-0229 
       fix use after free related to CVE-2024-21886</changelog>
  <changelog author="shuaijiakun &lt;shuaijiakun1288@phytium.com.cn&gt; -1.20.11-32" date="1717070400">- Type:feature
- CVE:NA
- SUG:NA
- DESC:fix display error for ps23xx when using ast and pe2201 bmc card.</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.20.11-33" date="1729771200">- Type:CVE
- CVE:CVE-2023-5574
- SUG:NA
- DESC:fix CVE-2023-5574</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.20.11-34" date="1730721600">- Fix CVE-2024-9632</changelog>
</package>
<package pkgid="8ed70fe7b3dc92823c08baf305adf0b56e38b4e9fda749d827178ccea7d70fce" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="35.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.20.11-26" date="1706529600">- Modify sw_64 patch to use all arch</changelog>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-30" date="1713355200">- fix regression caused by the fix for CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-31" date="1714132800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix regression caused by the fix for CVE-2024-0229 
       fix use after free related to CVE-2024-21886</changelog>
  <changelog author="shuaijiakun &lt;shuaijiakun1288@phytium.com.cn&gt; -1.20.11-32" date="1717070400">- Type:feature
- CVE:NA
- SUG:NA
- DESC:fix display error for ps23xx when using ast and pe2201 bmc card.</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.20.11-33" date="1729771200">- Type:CVE
- CVE:CVE-2023-5574
- SUG:NA
- DESC:fix CVE-2023-5574</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.20.11-34" date="1730721600">- Fix CVE-2024-9632</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.20.11-35" date="1740657600">- fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
  CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
  CVE-2025-26600, CVE-2025-26601</changelog>
</package>
<package pkgid="059e54aed3a79725e895f1509d2fddf306fae65143f605ff128cf7c1a7a5ca53" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="36.oe2203sp4"/>
  <changelog author="niuwanli &lt;niuwanli@cysoftware.com.cn&gt; - 1.20.11-27" date="1707134400">- fix segfault if CreateGC failed in XaceHook</changelog>
  <changelog author="zhangliangpengkun&lt;zhangliangpengkun@xfusion.com&gt; - 1.20.11-28" date="1709121600">- fix changelog The CVE is should be CVE-2023-6816.</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-29" date="1712491200">- fix CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-30" date="1713355200">- fix regression caused by the fix for CVE-2024-31083</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; -1.20.11-31" date="1714132800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix regression caused by the fix for CVE-2024-0229 
       fix use after free related to CVE-2024-21886</changelog>
  <changelog author="shuaijiakun &lt;shuaijiakun1288@phytium.com.cn&gt; -1.20.11-32" date="1717070400">- Type:feature
- CVE:NA
- SUG:NA
- DESC:fix display error for ps23xx when using ast and pe2201 bmc card.</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.20.11-33" date="1729771200">- Type:CVE
- CVE:CVE-2023-5574
- SUG:NA
- DESC:fix CVE-2023-5574</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.20.11-34" date="1730721600">- Fix CVE-2024-9632</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.20.11-35" date="1740657600">- fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
  CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
  CVE-2025-26600, CVE-2025-26601</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.20.11-36" date="1745323200">- add missing patches regarding CVE-2025-26594, CVE-2025-26599, CVE-2025-26601</changelog>
</package>
<package pkgid="b60ed15cfb0f23297e06e01aca9ca2ad606aa87bd83b05d0a09b7f6c69f65343" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.11" rel="42.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1.20.11-33" date="1729771200">- Type:CVE
- CVE:CVE-2023-5574
- SUG:NA
- DESC:fix CVE-2023-5574</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.20.11-34" date="1730721600">- Fix CVE-2024-9632</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.20.11-35" date="1740657600">- fix CVE-2025-26594, CVE-2025-26595, CVE-2025-26596,
  CVE-2025-26597, CVE-2025-26598, CVE-2025-26599
  CVE-2025-26600, CVE-2025-26601</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.20.11-36" date="1745323200">- add missing patches regarding CVE-2025-26594, CVE-2025-26599, CVE-2025-26601</changelog>
  <changelog author="wangqingzheng &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-37" date="1751457600">- Fix CVE-2025-49178</changelog>
  <changelog author="wangqingzheng &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-38" date="1751544000">- Fix CVE-2025-49175</changelog>
  <changelog author="wangqingzheng &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-39" date="1751716800">- add backport-xfree86-fbdevhw-fix-pci-detection-on-recent-Linux.patch</changelog>
  <changelog author="wangqingzheng &lt;wangqingzheng@kylinos.cn&gt; - 1.20.11-40" date="1753099200">- Fix CVE-2025-49176</changelog>
  <changelog author="xuyan &lt;xuyan1481@phytium.com&gt; - 1.20.11-41" date="1753358400">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Fix possible Xorg crashes for ps23xx when using  ast and pe2201 bmc card.</changelog>
  <changelog author="lingsheng &lt;ultra_planet@qq.com&gt; - 1.20.11-42" date="1770120000">- fix CVE-2022-49737 CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231</changelog>
</package>
<package pkgid="3b2455a04bac3babdd31b5cba9b5a233cfacba0564b05173bcea39c1e4428b40" name="xorg-x11-server-Xwayland" arch="src">
  <version epoch="0" ver="22.1.2" rel="6.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-1" date="1655726400">- Package init</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 22.1.2-2" date="1656072000">- rename packagename</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-3" date="1714305600">- fix CVE-2024-31080 CVE-2024-31081</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-4" date="1714996800">- fix CVE-2023-6377 CVE-2023-6478 CVE-2023-6816 CVE-2024-0408 CVE-2024-0409</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 22.1.2-5" date="1715169600">- fix CVE-2024-0229 CVE-2024-31083</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 22.1.2-6" date="1718193600">- fix  CVE-2022-2320</changelog>
</package>
<package pkgid="f672a4a328c4565e0cb6fb661eea0ab75945cd4956a66ef9c7a50c38b873f8ba" name="xstream" arch="src">
  <version epoch="0" ver="1.4.20" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.20-1" date="1702382400">- Upgrade to 1.4.20 for fix CVE-2022-40151 and CVE-2022-41966</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.4.20-2" date="1731326400">- Fix CVE-2024-47072</changelog>
</package>
<package pkgid="17887e7e86c93d74e0a65290a9084b5564b04050de515007129c6c5d620f2e7d" name="xterm" arch="src">
  <version epoch="0" ver="363" rel="6.oe2203sp4"/>
  <changelog author="penghaitao &lt;htpengc@isoftstone.com&gt; - 363-5" date="1681387200">- fix bogus date in %changelog</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 363-6" date="1727611200">- fix CVE-2022-45063</changelog>
</package>
<package pkgid="e2b64b85a3fefae54ba93783be1a8ca0fd5ef90d92cab3939fbce5cf91961378" name="yajl" arch="src">
  <version epoch="0" ver="2.1.0" rel="21.oe2203sp4"/>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 2.1.0-21" date="1736856000">- fix CVE-2017-16516</changelog>
</package>
<package pkgid="f39c8906afb8b0594a5ef58427879d5f8069739eb1837efe80353996d609f0e6" name="yaml-cpp" arch="src">
  <version epoch="0" ver="0.6.3" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.6.3-2" date="1718366400">- Add the support to parsing a null value.</changelog>
  <changelog author="gaoyukun &lt;gaoyukun@kylinos.cn&gt; - 0.6.3-3" date="1762516800">- Type:cves
- CVE:CVE-2017-11692
- SUG:NA
- DESC:fix CVE-2017-11692</changelog>
</package>
<package pkgid="7c2d5b5505eed709aa923cf6c8e77483238a4019337ec5361bcffb6576bff630" name="yasm" arch="src">
  <version epoch="0" ver="1.3.0" rel="13.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-11" date="1691755200">- fix CVE-2023-37732</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-12" date="1692100800">- fix CVE-2023-31975</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.3.0-13" date="1747051200">- fix CVE-2021-33454, CVE-2021-33464, CVE-2023-29579</changelog>
</package>
<package pkgid="68fbf33eae594bf0c834acedd4d67afa00fa5b0e3a970f47c6c08d41ac1ef5f4" name="yasm" arch="src">
  <version epoch="0" ver="1.3.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-11" date="1691755200">- fix CVE-2023-37732</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.3.0-12" date="1692100800">- fix CVE-2023-31975</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.3.0-13" date="1747051200">- fix CVE-2021-33454, CVE-2021-33464, CVE-2023-29579</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.3.0-14" date="1748692800">- fix CVE-2024-22653</changelog>
</package>
<package pkgid="8675668d633a8e891f53c276017cf1f4f62958cef2b8bfd3bb57ffb83dbc7ddf" name="yelp" arch="src">
  <version epoch="2" ver="3.38.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2:3.38.3-2" date="1746878400">- fix CVE-2025-3155</changelog>
</package>
<package pkgid="db7dfd82f3b5c422a78b51b9e8be8e660ae470d46a66da1f2057e02b0452932f" name="yelp-xsl" arch="src">
  <version epoch="0" ver="3.38.3" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.38.3-2" date="1747396800">- fix CVE-2025-3155</changelog>
</package>
<package pkgid="89b069f05c170bb0c197a1e22ec111582777707870cc8773229bb2e1e937187e" name="zvbi" arch="src">
  <version epoch="0" ver="0.2.35" rel="9.oe2203sp4"/>
  <changelog author="lwg &lt;weigangli99@gmail.com&gt; - 0.2.35-8" date="1700827200">- fix uninstall error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.2.35-9" date="1742299200">- Fix CVE-2025-2173,CVE-2025-2174,CVE-2025-2176 and CVE-2025-2177</changelog>
</package>
<package pkgid="c0a8a0795aa32d7c87773021aa8f27586513ede26561ba978e43b0d884e852dd" name="zvbi" arch="src">
  <version epoch="0" ver="0.2.44" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.2.42-1" date="1693828800">- Update to 0.2.42</changelog>
  <changelog author="lwg &lt;weigangli99@gmail.com&gt; - 0.2.42-2" date="1700827200">- fix uninstall error</changelog>
  <changelog author="lvgenggeng &lt;lvgenggeng@uniontech.com&gt; 0.2.42-3" date="1707048000">- move license file to prefered dir</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.2.42-4" date="1742299200">- Fix CVE-2025-2173,CVE-2025-2174,CVE-2025-2176 and CVE-2025-2177</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.2.44-1" date="1742990400">- Update to 0.2.44 for fix CVE-2025-2175</changelog>
</package>
<package pkgid="31b41b125fe7b4b9755cd071e8a525f687f5b65994a4d55286785adade44cca8" name="zziplib" arch="src">
  <version epoch="0" ver="0.13.71" rel="6.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.13.71-4" date="1666785600">- Add sw64 architecture</changelog>
  <changelog author="licihua &lt;licihua@huawei.com&gt; - 0.13.71-5" date="1695816000">- fix CVE-2020-18770</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 0.13.71-6" date="1723204800">- fix CVE-2024-39134</changelog>
</package>
</otherdata>