# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: hanhuihui <hanhuihui5@huawei.com> - 4.14.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: hankangknag <hankangknag5@huawei.com> - 21.11-68
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - mlx5: device should be started to set the flow


author: chenyi <chenyi211@huawei.com> - 21.11-69
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: check Rx DMA address alignmnent


author: hankangknag <hankangknag5@huawei.com> - 21.11-70
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - net/af_xdp: parse UMEM map info from mempool
  - bpf: disable on 32-bit x86
  - net/af_xdp: remove unused local statistic
  - net/af_xdp: fix stats reset
  - net/af_xdp: count mbuf allocation failures
  - net/af_xdp: fix port ID in Rx mbuf
  - net/af_xdp: support AF_XDP device plugin pinned maps
  - net/af_xdp: fix multi-interface support for k8s
  - net/af_xdp: fix leak on XSK configuration failure
  - net/af_xdp: fix memzone leak on config failure
  - net/af_xdp: avoid error log for virtual interfaces
  - net/af_xdp: fix Rx and Tx queue state
  - net/af_xdp: fix missing UMEM feature
  - rework atomic intrinsics fetch operations
  - build: clarify configuration without IOVA field in mbuf
  - net/af_xdp: fix socket handler validation
  - net/af_xdp: support CNI Integration
  - net/af_xdp: parse NUMA node ID from sysfs
  - drivers: mark SW PMDs to support disabling IOVA as PA
  - net/af_xdp: make compatible with libbpf 0.8.0
  - net/af_xdp: add log on XDP program removal failures
  - net/af_xdp: avoid version-based check for program load
  - net/af_xdp: avoid version-based check for shared UMEM
  - net/af_xdp: make clear which libxdp version is required
  - net/af_xdp: move XDP library presence flag setting
  - net/af_xdp: allow using copy mode in XSK
  - net/af_xdp: fix shared UMEM fill queue reserve
  - net/af_xdp: fix custom program loading with multiple queues
  - net/af_xdp: reserve fill queue before socket create
  - net/af_xdp: ensure socket is deleted on Rx queue setup error
  - net/af_xdp: make compatible with libbpf >= 0.7.0
  - net/af_xdp: add missing trailing newline in logs
  - net/af_xdp: allow probing when multiprocess is disabled
  - ethdev: introduce generic dummy packet burst function
  - net/af_xdp: re-enable secondary process support
  - net/af_xdp: make UMEM configure more readable
  - net/af_xdp: use libxdp if available
  - net/af_xdp: fix build with -Wunused-function


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
  - SUG:NA
  - DESC: Batch fix cve through rebuild and sync release


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
    CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
    CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
    CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
    CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
    CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
    CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
    CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
    CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
    CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
    CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
    CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
    CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
    CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
    CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
    CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
    CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
    CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
    CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
    CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
    CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
    CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
    CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
    CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
    CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
    CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
    CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
    CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
    CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
    CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
    CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         nftables always flush main table on start


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-7
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
         related ko when stopping firewalld service


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix str2enum bug & data query refactor
  - add systemd service for anteater
  - remove 'sys-level' config param
  - add chinese descriptions
  - Update TCP Establish Model & Add Nic Loss Detector
  - Add disk throughput detector


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-10
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: shixuantong <shixuantong1@huawei.com> - 2.34-150
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:elf: Add TLS modid reuse test for bug 29039
         elf: Fix TLS modid reuse generation assignment
         elf: Check objname before calling fatal_error
         elf: Fix _dl_debug_vdprintf to work before self-relocation
         elf: ldconfig should skip temporary files created by package managers
         ldconfig: Fixes for skipping temporary files.


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: shixuantong <shixuantong1@huawei.com> - 2.34-162
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: avoid jumping over a needed declaration
         elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong1@huawei.com> - 2.34-163
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: Handle static PIE with non-zero load address
         elf: Introduce _dl_relocate_object_no_relro
         elf: Switch to main malloc after final ld.so self-relocation


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: seuzw <930zhaowei@163.com> - 2.4.51-13
changelog:
  - Type:cves
  - ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: liweigang <liweiganga@uniontech.com> - 1:5.15.0-19
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: lnstat: Fix deref of null in print_json() function
          iproute2: prevent memory leak
          libnetlink: validate nlmsg header length first
          tc: remove tcindex classifier
          ip: fix memory leak in 'ip maddr show'
          ila: fix potential snprintf buffer overflow
          bridge: fix potential snprintf overflow
          mnl_utils: sanitize incoming netlink payload size in callbacks


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-207.0.0.107
changelog:
  - !8599  Bluetooth: hci_core: Fix possible buffer overflow
  - !8949  CVE-2022-48652
  - !8602  netfilter: nf_tables: set dormant flag on hook register failure
  - !8867  ipv6: prevent NULL dereference in ip6_output()
  - !8779  smb: client: fix UAF in smb2_reconnect_server()
  - !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
  - !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - !8711  ubifs: Set page uptodate in the correct place
  - !8860  blk-iocost: do not WARN if iocg was already offlined
  - !8639  s390/qeth: Fix kernel panic after setting hsuid
  - !8946  usb: typec: ucsi: Limit read size on v1.2
  - !8969  Fix CVE-2024-36949
  - cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8216  ACPI: video: check for error while searching for backlight device parent
  - !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
  - !8838  blk-iocost: avoid out of bounds shift
  - !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdkfd: Rework kfd_locked handling
  - !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - ice: Fix crash by keep old cfg when update TCs more than queues
  - ice: ethtool: Prohibit improper channel config for DCB
  - !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - !6695  netfilter: nft_set_pipapo: do not free live element
  - usb: typec: ucsi: Limit read size on v1.2
  - !8891  net: fix out-of-bounds access in ops_init
  - !8871 add sdma-dae for openeuler 22.03 SP4
  - !8762  tipc: fix UAF in error path
  - !8742  octeontx2-af: avoid off-by-one read from userspace
  - !8734  mptcp: ensure snd_nxt is properly initialized on connect
  - !8634  batman-adv: Avoid infinite loop trying to resize local TT
  - !8736  net: hns3: fix kernel crash when devlink reload during initialization
  - !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - !3547  fs: mitigatin cacheline false sharing in struct file
  - !8887  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - drivers: misc: sdma-dae: enable sdma_dae for arm64
  - drivers: misc: sdma-dae: support page fault preprocess
  - gpiolib: cdev: fix uninitialised kfifo
  - !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8666  phonet/pep: fix racy skb_queue_empty() use
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - drivers: misc: sdma-dae: support interrupt init and handle
  - drivers: misc: sdma-dae: support sqe task send and execute
  - drivers: misc: sdma-dae: support channel management
  - drivers: misc: sdma-dae: support getting streamID
  - drivers: misc: sdma-dae: support initializ sdma driver
  - ipv6: prevent NULL dereference in ip6_output()
  - blk-iocost: do not WARN if iocg was already offlined
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8684  tcp: properly terminate timers for kernel sockets
  - !8629  erspan: make sure erspan_base_hdr is present in skb->head
  - blk-iocost: avoid out of bounds shift
  - !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8550  tipc: fix a possible memleak in tipc_buf_append
  - !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8808 v2  Add support for PCC Operation Region
  - !8623  fs/9p: only translate RWX permissions for plain 9P2000
  - !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - arm64: config: Enable ACPI_PCC
  - ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
  - ACPI: PCC: Fix unintentional integer overflow
  - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
  - ACPI: PCC: replace wait_for_completion()
  - ACPI: PCC: Release resources on address space setup failure path
  - ACPI: PCC: pcc_ctx can be static
  - ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
  - ACPICA: Add support for PCC Opregion special context data
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - smb: client: fix UAF in smb2_reconnect_server()
  - tipc: fix UAF in error path
  - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - octeontx2-af: avoid off-by-one read from userspace
  - net: hns3: fix kernel crash when devlink reload during initialization
  - mptcp: ensure snd_nxt is properly initialized on connect
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - ubifs: Set page uptodate in the correct place
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - tcp: properly terminate timers for kernel sockets
  - phonet/pep: fix racy skb_queue_empty() use
  - s390/qeth: Fix kernel panic after setting hsuid
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - batman-adv: Avoid infinite loop trying to resize local TT
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: nf_tables: set dormant flag on hook register failure
  - Bluetooth: hci_core: Fix possible buffer overflow
  - virtio-blk: fix implicit overflow on virtio_max_dma_size
  - tipc: fix a possible memleak in tipc_buf_append
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - ACPI: video: check for error while searching for backlight device parent
  - netfilter: nft_set_pipapo: do not free live element
  - fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
  - fs: mitigatin cacheline false sharing in struct file


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-208.0.0.108
changelog:
  - !9084 v5  xfs: atomic writes for xfs
  - block: fix kabi in struct queue_limits
  - xfs: make bunmapi observe forcealigin
  - xfs: Only free full extents for forcealign
  - xfs: Update xfs_is_falloc_aligned() mask for forcealign
  - xfs: fix set xflags fail when inode has extent hit
  - xfs: support atomic write ioctl
  - fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
  - fs: xfs: Validate atomic writes
  - fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
  - fs: iomap: Atomic write support
  - fs: Add FS_XFLAG_ATOMICWRITES flag
  - fs: xfs: iomap: Sub-extent zeroing
  - fs: iomap: Sub-extent zeroing
  - fs: xfs: Do not free EOF blocks for forcealign
  - fs: xfs: Make file data allocations observe the 'forcealign' flag
  - fs: xfs: Enable file data forcealign feature
  - fs: xfs: Introduce FORCEALIGN inode flag
  - nvme: Atomic write support
  - block: Add core atomic write support
  - fs: Initial atomic write support
  - block: get atomic write max sectors
  - !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
  - !9063 v3  block: support to dispatch bio asynchronously
  - !9066 change sdma-dae default mode to n
  - !8827 v2  iomap: fix sub-page not set dirty state
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
  - !9055  CVE-2024-36020
  - !9015  CVE-2024-36953
  - !9014  drm/vc4: don't check if plane->state->fb == state->fb
  - config: enable CONFIG_BLK_CGROUP_IOCOST by default
  - drivers: misc: sdma-dae: not compile sdma-dae by default
  - block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
  - block: support to dispatch bio asynchronously
  - !9050  CVE-2024-35796
  - roh/hns3: Add ROH client case in hclgevf_init_client_instance.
  - i40e: fix vf may be used uninitialized in this function warning
  - !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - net: ll_temac: platform_get_resource replaced by wrong function
  - !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
  - !8908  Refactor hbmdev a bit
  - !9001 roh/hns3: Fix IMP reset vlan unusable.
  - !8774  CVE-2024-36914
  - !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - !8719  CVE-2024-35887
  - !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
  - !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - !8921  hugetlbfs: fix hugetlbfs_statfs() locking
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
  - drm/vc4: don't check if plane->state->fb == state->fb
  - roh/hns3: Fix IMP reset vlan unusable.
  - !8965  cvm: enhance security for cvm host feature
  - !8982  fix CVE-2024-36905
  - !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - cvm: enhance security for cvm host feature
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - arm64: config: Open the hbmdev related config
  - soc: hisilicon: Don't poweroff if memblocks don't offlined
  - soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - iomap: Ensure sub-page dirty state is set during mmap writes
  - Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
  - drm/amd/display: Skip on writeback when it's not applicable
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
  - mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-209.0.0.109
changelog:
  - !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - !9112  Backport some optimizing patches for kunpeng920
  - !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
  - !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
  - ARM: 9278/1: kfence: only handle translation faults
  - arm64: mm: HVO: support BBM of vmemmap pgtable safely
  - arm64: mm: kfence: only handle translation faults
  - mm: HVO: introduce helper function to update and flush pgtable
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - !8753  memcg: fix input of try_to_free_mem_cgroup_pages
  - !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !9138 v2  CVE-2024-36971
  - !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
  - !9073 v2  Fix UAF problem of hpool
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
  - !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - !8700  wifi: cfg80211: check A-MSDU format more carefully
  - net: fix kabi breakage in struct dst_ops
  - net: fix __dst_negative_advice() race
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - arm64: syscall: unmask DAIF for tracing status
  - arm64: Snapshot thread flags
  - sched: Snapshot thread flags
  - entry: Snapshot thread flags
  - x86: Snapshot thread flags
  - thread_info: Add helpers to snapshot thread flags
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
  - sched/fair: Optimize test_idle_cores() for !SMT
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
  - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - !9074 [sync] PR-8963:  Fix CVE-2024-35915
  - !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
  - !9081 v2  arm64: mm: Replace global variable in pbha with static key
  - Bluetooth: L2CAP: Fix not validating setsockopt user input
  - arm64: mm: Replace global variable in pbha with static key
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_rx_work
  - nfc: nci: Fix kcov check in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - mm/dynamic_hugetlb: use rcu lock to protect hpool
  - mm/dynamic_hugetlb: simplify the refcount code
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - memcg: fix input of try_to_free_mem_cgroup_pages
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
  - wifi: cfg80211: check A-MSDU format more carefully
  - rpmsg: virtio: Free driver_override when rpmsg_remove()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-210.0.0.110
changelog:
  - !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9103  ksmbd: no response from compound read
  - !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
  - !9283 hns3 udma: support non share jfr mode in UM
  - !9277 ima: Fix violation digests extending issue in cvm
  - hns3 udma: kernel support non share jfr mode in UM mode
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9244 urma: cannot uninstall uburma driver
  - !9250  Fix token error issue when concurrent calls
  - !9241 v2  Bugfix backport for rcu
  - urma: cannot uninstall uburma driver
  - Fix token error issue when concurrent calls
  - !9180  wifi: wilc1000: fix RCU usage in connect path
  - !9212  drm/amd/display: Fix division by zero in setup_dsc_config
  - ima: Fix violation digests extending issue in cvm
  - !9239  Fix allmodconfig build frame size error
  - !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
  - srcu: Fix callbacks acceleration mishandling
  - entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
  - rcu: Defer RCU kthreads wakeup when CPU is dying
  - RDMA/hiroce3: Fix allmodconfig build frame size error
  - !7729  loop: use lo->lo_disk for kobject_uevent
  - !9211  memcg: attach memcg async reclaim worker to curcpu
  - !9168  UBIFS: fixes a series of issues that caused by power cut
  - !9000  media: tc358743: register v4l2 async device only after successful setup
  - !9087  fs/9p: fix uninitialized values during inode evict
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - memcg: attach memcg async reclaim worker to curcpu
  - sched: smart_grid: fix potential NULL pointer dereference
  - spi: fix kabi breakage in struct spi_controller
  - spi: fix use-after-free of the add_lock mutex
  - spi: Fix deadlock when adding SPI controllers on SPI buses
  - wifi: wilc1000: fix RCU usage in connect path
  - ubifs: dbg_orphan_check: Fix missed key type checking
  - ubifs: Fix unattached inode when powercut happens in creating
  - ubifs: Fix space leak when powercut happens in linking tmpfile
  - ubifs: Move ui->data initialization after initializing security
  - ubifs: Fix adding orphan entry twice for the same inode
  - ubifs: Remove insert_dead_orphan from replaying orphan process
  - ubifs: Don't add xattr inode into orphan area
  - ubifs: Fix unattached xattr inode if powercut happens after deleting
  - ubifs: Fix some kernel-doc comments
  - ubifs: Fix spelling mistakes
  - ksmbd: no response from compound read
  - fs/9p: fix uninitialized values during inode evict
  - media: tc358743: register v4l2 async device only after successful setup
  - loop: use lo->lo_disk for kobject_uevent


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-211.0.0.111
changelog:
  - !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
  - Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-212.0.0.112
changelog:
  - !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
  - sched: ARM64 enables SIS_PROP and disables SIS_UTIL"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-213.0.0.113
changelog:
  - !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9264  ring-buffer: Fix a race between readers and resize checks
  - !9305  CVE-2024-26661 following bugfix
  - !9246  ksmbd: no response from compound read
  - !9350  tracing: Fix permissions for the buffer_percent file
  - tracing: Fix permissions for the buffer_percent file
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - drm/amd/display: Fix && vs || typos
  - drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
  - Revert "drm/amd/display: Fix && vs || typos"
  - ring-buffer: Fix a race between readers and resize checks
  - ksmbd: no response from compound read


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-214.0.0.114
changelog:
  - !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
  - fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-216.0.0.115
changelog:
  - !9507  Enable SIS_UTIL for arm64 and optimize load_balance
  - !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
  - Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
  - config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - sched/numa: Fix numa imbalance in load_balance()
  - Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
  - Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
  - !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
  - !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
  - block: fix WARNING in init_blk_queue_async_dispatch
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-217.0.0.116
changelog:
  - !9160  xfs: don't use current->journal_info
  - !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - !9644  fix uaf when proc_cpuset_show
  - !9532  CVE-2024-37356
  - !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
  - cgroup: fix uaf when proc_cpuset_show
  - !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9559  CVE-2024-38597
  - !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
  - !9595  drm/arm/malidp: fix a possible null pointer dereference
  - !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
  - !9504  um: Add winch to winch_handlers before registering winch IRQ
  - drm/arm/malidp: fix a possible null pointer dereference
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled
  - !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
  - !9540  net/mlx5e: Avoid field-overflowing memcpy()
  - !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !9563  fs/ntfs3: Check 'folio' pointer for NULL
  - !9383  serial: max3100: Update uart_driver_registered on driver removal
  - btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !8744  ext4 bugfix from mainline
  - !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
  - !9453  jffs2: prevent xattr node from overflowing the eraseblock
  - !9202  dyndbg: fix old BUG_ON in >control parser
  - !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
  - !9190  clk: Fix clk_core_get NULL dereference
  - !9188  net: phy: fix phy_get_internal_delay accessing an empty array
  - !9462 v2  CVE-2024-27032
  - !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - !9425  ASoC: SOF: Fix DSP oops stack dump output contents
  - !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9297  CVE-2021-47599
  - !9401  Fix CVE-2024-31076
  - !9434  cvm: delete dead code and resolve macro definition holes
  - !9395  CVE-2024-38587
  - !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9199  init/main.c: Fix potential static_command_line memory overflow
  - !8683 v4  Fix CVE-2024-35879
  - !9339  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
  - !9442  net/mlx5: Discard command completions in internal error
  - !9290  net: bridge: xmit: make sure we have at least eth header len bytes
  - !9284  of: module: add buffer overflow check in of_modalias()
  - !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - !9558  CVE-2024-39362
  - !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - !9527  media: lgdt3306a: Add a check against null-pointer-def
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - fs/ntfs3: Check 'folio' pointer for NULL
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - i2c: acpi: Unbind mux adapters before delete
  - i2c: add fwnode APIs
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - net/mlx5e: Avoid field-overflowing memcpy()
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9511  blk-throttle: check for overflow in calculate_bytes_allowed
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - blk-throttle: check for overflow in calculate_bytes_allowed
  - blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
  - blk-throttle: factor out code to calculate ios/bytes_allowed
  - um: Add winch to winch_handlers before registering winch IRQ
  - netfilter: nf_tables: flush pending destroy work before exit_net release
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - net/mlx5: Add a timeout to acquire the command queue semaphore
  - f2fs: fix to avoid potential panic during recovery
  - f2fs: fix to check return value of f2fs_reserve_new_block()
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - jffs2: prevent xattr node from overflowing the eraseblock
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - net/mlx5: Discard command completions in internal error
  - cvm: delete dead code and resolve macro definition holes
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - ASoC: SOF: Fix DSP oops stack dump output contents
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - serial: max3100: Update uart_driver_registered on driver removal
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - btrfs: remove stale comment about the btrfs_show_devname
  - btrfs: update latest_dev when we create a sprout device
  - btrfs: use latest_dev in btrfs_show_devname
  - btrfs: convert latest_bdev type to btrfs_device and rename
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - of: module: add buffer overflow check in of_modalias()
  - dyndbg: fix old BUG_ON in >control parser
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
  - init/main.c: Fix potential static_command_line memory overflow
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - clk: Fix clk_core_get NULL dereference
  - net: phy: fix phy_get_internal_delay accessing an empty array
  - xfs: don't use current->journal_info
  - drm/phytium: Replace default efi fb0 with dc fb
  - ext4: fix warning in ext4_dio_write_end_io()
  - ext4: properly sync file size update after O_SYNC direct IO
  - iomap: update ki_pos a little later in iomap_dio_complete
  - driver core: Fix kabi broken
  - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  - driver core: Introduce device_link_wait_removal()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-218.0.0.117
changelog:
  - !9851  net/sched: act_skbmod: prevent kernel-infoleak
  - !9853  nilfs2: fix use-after-free of timer for log writer thread
  - !9831  mmc: davinci: Don't strip remove function when driver is builtin
  - !8096  Fix CVE-2024-35988
  - nilfs2: fix use-after-free of timer for log writer thread
  - net/sched: act_skbmod: prevent kernel-infoleak
  - mmc: davinci: Don't strip remove function when driver is builtin
  - !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - !9820  kdb: Fix buffer overflow during tab-complete
  - kdb: Fix buffer overflow during tab-complete
  - !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9783  CVE-2024-38598
  - !9772  btrfs: fix use-after-free after failure to create a snapshot
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
  - !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - !9363  fs/ntfs3: Use variable length array instead of fixed size
  - !9712  fix CVE-2024-38540
  - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - net: fix one NULL pointer dereference bug in net_rship module
  - md: fix resync softlockup when bitmap size is less than array size
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  - Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
  - !9373  ALSA: core: Fix NULL module pointer assignment at card init
  - !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
  - !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - !9768  iomap: Don't finish dio under irq when there exists pages
  - !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !9731 v2  Backport bpf bugfixes
  - btrfs: fix use-after-free after failure to create a snapshot
  - iomap: Don't finish dio under irq when there exists pages
  - !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
  - !9764  wifi: ar5523: enable proper endpoint verification
  - !9711  fix CVE-2024-38615
  - !9761  CVE-2024-26816
  - !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - wifi: ar5523: enable proper endpoint verification
  - !9716  ax25: Fix reference count leak issues of ax25_dev
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - x86, relocs: Ignore relocations in .notes section
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !9672  ax25: Fix reference count leak issue of net_device
  - !9735  net/9p: fix uninit-value in p9_client_rpc()
  - !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - net/9p: fix uninit-value in p9_client_rpc()
  - bpf: ensure main program has an extable
  - bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
  - bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
  - bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
  - bpf: Fix memory leaks in __check_func_call
  - !9440  fix CVE-2024-38621
  - !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
  - ax25: Fix reference count leak issues of ax25_dev
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  - cpufreq: exit() callback is optional
  - cpufreq: Rearrange locking in cpufreq_remove_dev()
  - cpufreq: Split cpufreq_offline()
  - cpufreq: Reorganize checks in cpufreq_offline()
  - !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - net/hinic3: Add pcie device ID adaption for DPU_NIC card
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9640  CVE-2024-38582
  - !9662  tls: fix missing memory barrier in tls_init
  - !9657 v2  CVE-2024-38586
  - !9686  greybus: lights: check return of get_channel_from_mode
  - !9675  crypto: bcm - Fix pointer arithmetic
  - greybus: lights: check return of get_channel_from_mode
  - crypto: bcm - Fix pointer arithmetic
  - ax25: Fix reference count leak issue of net_device
  - tls: fix missing memory barrier in tls_init
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - r8169: remove nr_frags argument from rtl_tx_slots_avail
  - r8169: improve rtl8169_start_xmit
  - r8169: improve rtl_tx
  - r8169: use READ_ONCE in rtl_tx_slots_avail
  - r8169: remove unneeded memory barrier in rtl_tx
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - wifi: carl9170: add a proper sanity check for endpoints
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - ALSA: core: Fix NULL module pointer assignment at card init
  - fs/ntfs3: Use variable length array instead of fixed size
  - riscv: Fix TASK_SIZE on 64-bit NOMMU
  - riscv: fix VMALLOC_START definition


author: Li Nan <linan122@huawei.com> - 5.10.0-219.0.0.118
changelog:
  - !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - !10031  ipv6: prevent possible NULL dereference in rt6_probe()
  - !10060  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - !9990  netpoll: Fix race condition in netpoll_owner_active
  - !10040  lib/generic-radix-tree.c: Don't overflow in peek()
  - !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
  - !9968  CVE-2024-40972
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9926  ocfs2: fix races between hole punching and AIO+DIO
  - !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9908  sock_map: avoid race between sock_map_close and sk_psock_put
  - !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9936  fix CVE-2024-40934
  - !9953  drm/komeda: check for error-valued pointer
  - lib/generic-radix-tree.c: Don't overflow in peek()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - netpoll: Fix race condition in netpoll_owner_active
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - !9871  cifs: Fix deadlock in cifs_writepages during reconnect
  - drm/komeda: check for error-valued pointer
  - !9897  ionic: fix use after netif_napi_del()
  - !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9905  mptcp: ensure snd_una is properly initialized on connect
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  - ocfs2: fix races between hole punching and AIO+DIO
  - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9884 roh/core: Support macvlan in roh.
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - !9825  smb: client: fix potential deadlock when releasing mids
  - !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - mptcp: ensure snd_una is properly initialized on connect
  - ionic: fix use after netif_napi_del()
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9368  CVE-2024-27416
  - !9879  fs: improve dump_mapping() robustness
  - !9872  CVE-2024-38570
  - !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - fs: improve dump_mapping() robustness
  - roh/core: Support macvlan in roh.
  - gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Rename sd_{ glock => kill }_wait
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - !9745  CVE-2024-39469
  - !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - smb: client: fix potential deadlock when releasing mids
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST


author: Li Nan <linan122@huawei.com> - 5.10.0-220.0.0.119
changelog:
  - !9035  keys: Fix overwrite of key expiration on instantiation
  - !9182  netfilter: nf_tables: restore set elements when delete set fails
  - !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
  - !10303  netfilter: nf_tables: do not compare internal table flags on updates
  - !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10280 v2  CVE-2022-48816
  - !9780  ksmbd: fix wrong DataOffset validation of create context
  - !10278  usb-storage: alauda: Check whether the media is initialized
  - netfilter: nf_tables: do not compare internal table flags on updates
  - !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - !10290 Backport 5.10.210 LTS patches from upstream
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
  - net: bcmgenet: Fix EEE implementation
  - drm/msm/dsi: Enable runtime PM
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
  - PM: runtime: add devm_pm_runtime_enable helper
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
  - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
  - scripts/decode_stacktrace.sh: optionally use LLVM utilities
  - scripts: decode_stacktrace: demangle Rust symbols
  - scripts/decode_stacktrace.sh: support old bash version
  - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
  - serial: 8250_exar: Set missing rs485_supported flag
  - serial: 8250_exar: Fill in rs485_supported
  - serial: Add rs485_supported to uart_port
  - mips: Fix max_mapnr being uninitialized on early stages
  - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
  - bus: moxtet: Add spi device table
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
  - tracing: Inform kmemleak of saved_cmdlines allocation
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - of: property: fix typo in io-channels
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit
  - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
  - nfp: flower: prevent re-adding mac index for bonded port
  - nfp: use correct macro for LengthSelect in BAR config
  - ALSA: hda/conexant: Add quirk for SWS JS201D
  - mmc: slot-gpio: Allow non-sleeping GPIO ro
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
  - serial: max310x: improve crystal stable clock detection
  - serial: max310x: set default value when reading clock ready bit
  - ring-buffer: Clean ring_buffer_poll_wait() error return
  - iio: accel: bma400: Fix a compilation problem
  - staging: iio: ad5933: fix type mismatch regression
  - tracing: Fix wasted memory in saved_cmdlines logic
  - misc: fastrpc: Mark all sessions as invalid in cb_remove
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
  - xen-netback: properly sync TX responses
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian
  - firewire: core: correct documentation of fw_csr_string() kernel API
  - lsm: fix the logic in security_inode_getsecctx()
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
  - modpost: trim leading spaces when processing source files list
  - usb: f_mass_storage: forbid async queue when shutdown happen
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
  - usb: ucsi_acpi: Fix command completion handling
  - HID: wacom: Do not register input devices until after hid_hw_start
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
  - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
  - i40e: Fix waiting for queues of all VSIs to be disabled
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
  - net: sysfs: Fix /sys/class/net/<iface> path for statistics
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
  - spi: ppc4xx: Drop write-only variable
  - of: unittest: Fix compile in the non-dynamic case
  - btrfs: send: return EOPNOTSUPP on unknown flags
  - btrfs: forbid deleting live subvol qgroup
  - btrfs: forbid creating subvol qgroups
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
  - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
  - USB: serial: cp210x: add ID for IMST iM871A-USB
  - USB: serial: option: add Fibocom FM101-GL variant
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
  - net/af_iucv: clean up a try_then_request_module()
  - netfilter: nft_ct: reject direction for ct id
  - netfilter: nft_compat: restrict match/target protocol to u16
  - netfilter: nft_compat: reject unused compat flag
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping
  - hwmon: (coretemp) Fix out-of-bounds memory access
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading
  - atm: idt77252: fix a memleak in open_card_ubr0
  - selftests: net: avoid just another constant wait
  - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
  - dmaengine: ti: k3-udma: Report short packet errors
  - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
  - bonding: remove print in bond_verify_device_path
  - HID: apple: Add 2021 magic keyboard FN key mapping
  - HID: apple: Add support for the 2021 Magic Keyboard
  - net: sysfs: Fix /sys/class/net/<iface> path
  - net: ipv4: fix a memleak in ip_setup_cork
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
  - ixgbe: Refactor overtemp event handling
  - ixgbe: Refactor returning internal error codes
  - ixgbe: Remove non-inclusive language
  - scsi: isci: Fix an error code problem in isci_io_request_build()
  - drm: using mul_u32_u32() requires linux/math64.h
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  - perf: Fix the nr_addr_filters fix
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
  - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - libsubcmd: Fix memory leak in uniq()
  - PCI/AER: Decode Requester ID when no error info found
  - fs/kernfs/dir: obey S_ISGID
  - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  - usb: hub: Replace hardcoded quirk value with BIT() macro
  - PCI: Only override AMD USB controller if required
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies
  - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
  - i3c: master: cdns: Update maximum prescaler value for i2c clock
  - um: net: Fix return type of uml_net_start_xmit()
  - um: Don't use vfprintf() for os_info()
  - um: Fix naming clash between UML and scheduler
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
  - drm/amdgpu: Let KFD sync with VM fences
  - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
  - drm/msm/dpu: Ratelimit framedone timeout msgs
  - media: ddbridge: fix an error code problem in ddb_probe
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
  - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
  - ALSA: hda: Intel: add HDA_ARL PCI ID support
  - PCI: add INTEL_HDA_ARL to pci_ids.h
  - media: rockchip: rga: fix swizzling for RGB formats
  - media: stk1160: Fixed high volume of stk1160_dbg messages
  - drm/mipi-dsi: Fix detach call without attach
  - drm/framebuffer: Fix use of uninitialized variable
  - drm/drm_file: fix use of uninitialized variable
  - f2fs: fix write pointers on zoned device after roll forward
  - drm/amd/display: Fix tiled display misalignment
  - fast_dput(): handle underflows gracefully
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
  - ALSA: hda: Refer to correct stream index at loops
  - i40e: Fix VF disable behavior to block all traffic
  - Bluetooth: L2CAP: Fix possible multiple reject send
  - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
  - md: Whenassemble the array, consult the superblock of the freshest device
  - block: prevent an integer overflow in bvec_try_merge_hw_page
  - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
  - ARM: dts: imx23/28: Fix the DMA controller node name
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
  - ARM: dts: imx27-apf27dev: Fix LED name
  - ARM: dts: imx25/27: Pass timing0
  - ARM: dts: imx25: Fix the iim compatible string
  - ionic: pass opcode to devcmd_wait
  - ARM: dts: imx1: Fix sram node
  - ARM: dts: imx27: Fix sram node
  - ARM: dts: imx: Use flash@0,0 pattern
  - ARM: dts: imx25/27-eukrea: Fix RTC node name
  - ARM: dts: rockchip: fix rk3036 hdmi ports node
  - bpf: Set uattr->batch.count as zero before batched update or deletion
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
  - scsi: libfc: Don't schedule abort twice
  - ARM: dts: imx7s: Fix nand-controller #size-cells
  - ARM: dts: imx7s: Fix lcdif compatible
  - ARM: dts: imx7d: Fix coresight funnel ports
  - scsi: arcmsr: Support new PCI device IDs 1883 and 1886
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  - selftests/bpf: Fix pyperf180 compilation failure with clang18
  - selftests/bpf: satisfy compiler by having explicit return in btf test
  - ext4: fix inconsistent between segment fstrim and full fstrim
  - ecryptfs: Reject casefold directory inodes
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
  - crypto: stm32/crc32 - fix parsing list of devices
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - ACPI: extlog: fix NULL pointer dereference check
  - PNP: ACPI: fix fortify warning
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
  - audit: Send netlink ACK before setting connection in auditd_set
  - regulator: core: Only increment use_count when enable_count changes
  - debugobjects: Stop accessing objects after releasing hash bucket lock
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
  - powerpc: Fix build error due to is_valid_bugaddr()
  - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
  - x86/entry/ia32: Ensure s32 is sign extended to s64
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
  - gpio: eic-sprd: Clear interrupt after set the interrupt type
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane
  - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
  - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
  - arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
  - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
  - drm/bridge: nxp-ptn3460: simplify some error checking
  - drm/tidss: Fix atomic_flush check
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
  - exec: Fix error handling in begin_new_exec()
  - rbd: don't move requests to the running list on errors
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
  - btrfs: don't warn if discard range is not aligned to sector
  - btrfs: tree-checker: fix inline ref size in error messages
  - btrfs: ref-verify: free ref cache before clearing mount opt
  - net: fec: fix the unhandled context fault from smmu
  - fjes: fix memleaks in fjes_hw_setup
  - selftests: netdevsim: fix the udp_tunnel_nic test
  - net: mvpp2: clear BM pool before initialization
  - netfilter: nf_tables: validate NFPROTO_* family
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
  - net/mlx5: DR, Use the right GVMI number for drop action
  - tcp: Add memory barrier to tcp_push()
  - afs: Hide silly-rename files from userspace
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - bnxt_en: Wait for FLR to complete during probe
  - mm: vmalloc: introduce array allocation functions
  - block: Remove special-casing of compound pages
  - nouveau/vmm: don't set addr on the fail path to avoid warning
  - rtc: Adjust failure return code for cmos_set_alarm()
  - mmc: mmc_spi: remove custom DMA mapped buffers
  - mmc: core: Use mrq.sbc in close-ended ffu
  - scripts/get_abi: fix source path leak
  - lsm: new security_file_ioctl_compat() hook
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
  - parisc/firmware: Fix F-extend for PDC addresses
  - PM: hibernate: Enforce ordering during image compression/decompression
  - crypto: api - Disallow identical driver names
  - ext4: allow for the last group to be marked as trimmed
  - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
  - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
  - iio: adc: ad7091r: Allow users to configure device events
  - iio: adc: ad7091r: Set alert bit in config register
  - serial: sc16is7xx: add check for unsupported SPI modes during probe
  - spi: introduce SPI_MODE_X_MASK macro
  - serial: sc16is7xx: set safe default SPI clock frequency
  - units: add the HZ macros
  - units: change from 'L' to 'UL'
  - PCI: mediatek: Clear interrupt status before dispatching handler
  - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
  - usb: cdns3: fix iso transfer error when mult is not zero
  - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
  - usb: cdns3: fix uvc failure work since sg support enabled
  - usb: cdns3: Fixes for sparse warnings
  - !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10224  scsi: ufs: Fix a deadlock in the error handler
  - SUNRPC: Do not dereference non-socket transports in sysfs
  - SUNRPC: lock against ->sock changing during sysfs read
  - !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
  - usb-storage: alauda: Check whether the media is initialized
  - !10232  fix CVE-2024-41007
  - !10202  net: dsa: seville: register the mdiobus under devres
  - !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - !9430  CVE-2022-48703
  - !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10189  fix CVE-2024-40915
  - !10187  fix CVE-2021-47205
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - RDMA/hns: Fix mbx timing out before CMD execution is completed
  - RDMA/hns: Fix insufficient extend DB for VFs.
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge
  - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR
  - RDMA/hns: Fix unmatch exception handling when init eq table fails
  - RDMA/hns: Check atomic wr length
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10210 hns3 udma: functions related to CQ bank IDs are supported.
  - !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
  - Bluetooth: hci_core: Fix leaking sent_cmd skb
  - !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport->dev
  - !9913  powerpc/pseries: Enforce hcall result buffer validity and size
  - !10217  CVE-2024-35931
  - !10061 Backport bugfixes for RDMA/hns from mainline linux
  - !10046  nfs: Ensure that the NFS client returns a correct writeback error code
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - !10222  bpf: Fix overrunning reservations in ringbuf
  - !10203  dma-mapping: benchmark: fix node id validation
  - !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
  - !10019  drm/exynos/vidi: fix memory leak in .get_modes()
  - !10178  ima: Fix use-after-free on a dentry's dname.name
  - scsi: ufs: Fix a deadlock in the error handler
  - bpf: Fix overrunning reservations in ringbuf
  - drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - hns3 udma: functions related to CQ bank IDs are supported.
  - !10135  ALSA: timer: Set lower bound of start tick time
  - !10104  ecryptfs: Fix buffer size for tag 66 packet
  - dma-mapping: benchmark: fix node id validation
  - net: dsa: seville: register the mdiobus under devres
  - !10138 [sync] PR-10095:  CVE-2024-40968
  - sched/fair: Take the scheduling domain into account in select_idle_core()
  - !10107  tracing: Build event generation tests only as modules
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - clk: sunxi-ng: Unregister clocks/resets when unbinding
  - !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !9836  fpga: manager: add owner module and take its refcount
  - net: openvswitch: fix race on port output
  - ima: Fix use-after-free on a dentry's dname.name
  - !10165  drop_monitor: replace spin_lock by raw_spin_lock
  - !10162  RDMA/mlx5: Add check for srq max_sge attribute
  - !10048  tipc: force a dst refcount before doing decryption
  - !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10150  mips: bmips: BCM6358: make sure CBR is correctly set
  - drop_monitor: replace spin_lock by raw_spin_lock
  - RDMA/mlx5: Add check for srq max_sge attribute
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - mips: bmips: BCM6358: make sure CBR is correctly set
  - MIPS: Octeon: Add PCIe link status check
  - !10041  Fix CVE-2024-36939
  - !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - ALSA: timer: Set lower bound of start tick time
  - !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - !10009  xfs: fix mount hung while sb recover fail
  - !10088  fix CVE-2024-40995
  - !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
  - !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
  - !9931  nvdimm: Backport some bugfixs
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - tracing: Build event generation tests only as modules
  - ecryptfs: Fix buffer size for tag 66 packet
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Add mutex_destroy()
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - Revert "RDMA/hns: Add mutex_destroy()"
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - tipc: force a dst refcount before doing decryption
  - nfs: Ensure write and flush consume writeback errors
  - NFS: Don't report ENOSPC write errors twice
  - NFS: Use of mapping_set_error() results in spurious errors
  - nfs: ensure correct writeback errors are returned on close()
  - nfs: nfs_file_write() should check for writeback errors
  - sunrpc: fix KABI broken in struct rpc_create_args
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - xfs: fix mount hung while sb recover fail
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: use add_disk() error handling
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - fpga: manager: add owner module and take its refcount
  - arm64: mm: Pass pbha-performance-only bit under chosen node
  - ksmbd: fix wrong DataOffset validation of create context
  - thermal: int340x_thermal: Consolidate priv->data_vault checks
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
  - netfilter: nf_tables: restore set elements when delete set fails
  - keys: Fix overwrite of key expiration on instantiation


author: Li Nan <linan122@huawei.com> - 5.10.0-221.0.0.120
changelog:
  - !10436  CVE-2024-39476
  - !10418  net: move to_gnet_bpf_attach_type() to filter.c
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
  - !10065  iommu: Return right value in iommu_sva_bind_device()
  - net: move to_gnet_bpf_attach_type() to filter.c
  - !10334  fix CVE-2024-36479 for olk-5.10
  - !10408  iommu/arm-smmu-v3: Fix the compile warning
  - !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - !10058  net: mvpp2: clear BM pool before initialization
  - !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - iommu/arm-smmu-v3: Fix the compile warning
  - !10339  net/sched: initialize noop_qdisc owner
  - !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10336 v2  mm: numa-affinity: support THP migration
  - !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
  - !10342  CVE-2024-39471
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  - drm/amdgpu: add error handle to avoid out-of-bounds
  - net/sched: initialize noop_qdisc owner
  - mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
  - mm: numa-affinity: delete the duplicate numa_migrate_prep
  - mm: numa-affinity: backport some migrate policy from AutoNuma
  - mm: numa-affinity: support THP migration
  - mm: thp: skip make PMD PROT_NONE if THP migration is not supported
  - mm: migrate: check mapcount for THP instead of refcount
  - mm: migrate: don't split THP for misplaced NUMA page
  - mm/migrate: fix NR_ISOLATED corruption on 64-bit
  - mm: migrate: account THP NUMA migration counters correctly
  - mm: thp: refactor NUMA fault handling
  - mm: memory: make numa_migrate_prep() non-static
  - mm: fix KABI broken in struct vm_fault
  - mm: memory: add orig_pmd to struct vm_fault
  - !10333  BMA: Fix DMA reset problem and change the version
  - fpga: bridge: add owner module and take its refcount
  - fpga: remove redundant checks for bridge ops
  - fpga: bridge: properly initialize bridge device before populating children
  - fpga: bridge: Use standard dev_release for class driver
  - fpga: bridge: Rename dev to parent for parent device
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - net: phy: add set_loopback interface to realtek phy driver
  - !10316  sched: Add cfs_preferred_nid_init hook
  - !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - !10073  serial: imx: Introduce timeout when waiting on transmitter empty
  - !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - sched: Add cfs_preferred_nid_init hook
  - !10295 sdma-dae: fix interrupt handle logic
  - !10253  fbdev: savage: Handle err return when savagefb_check_var failed
  - !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - !10304 Backport 5.10.211 LTS patches from upstream
  - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - block: ataflop: more blk-mq refactoring fixes
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
  - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
  - tls: rx: drop pointless else after goto
  - s390: use the correct count for __iowrite64_copy()
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
  - nouveau: fix function cast warnings
  - scsi: jazz_esp: Only build if SCSI core is builtin
  - bpf, scripts: Correct GPL license name
  - RDMA/srpt: fix function pointer cast warnings
  - arm64: dts: rockchip: set num-cs property for spi on px30
  - RDMA/bnxt_re: Return error for SRQ resize
  - mptcp: fix lockless access in subflow ULP diag
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered
  - usb: roles: fix NULL pointer issue when put module's reference
  - usb: cdns3: fix memory double free when handle zero packet
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
  - x86/alternative: Make custom return thunk unconditional
  - Revert "x86/alternative: Make custom return thunk unconditional"
  - x86/returnthunk: Allow different return thunks
  - x86/ftrace: Use alternative RET encoding
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
  - Revert "x86/ftrace: Use alternative RET encoding"
  - PCI/MSI: Prevent MSI hardware interrupt number truncation
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
  - s390/cio: fix invalid -EBUSY on ccw_device_start
  - erofs: fix lz4 inplace decompression
  - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
  - iwlwifi: mvm: write queue_sync_state only for sync
  - iwlwifi: mvm: do more useful queue sync accounting
  - platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
  - lan743x: fix for potential NULL pointer dereference with bare card
  - btrfs: do not pin logs too early during renames
  - btrfs: unify lookup return value when dir entry is missing
  - btrfs: introduce btrfs_lookup_match_dir
  - btrfs: tree-checker: check for overlapping extent items
  - task_stack, x86/cea: Force-inline stack helpers
  - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
  - ASoC: Intel: boards: get codec device with ACPI instead of bus search
  - ASoC: Intel: boards: harden codec property handling
  - mtd: spinand: macronix: Add support for MX35LFxGE4AD
  - cifs: add a warning when the in-flight count goes negative
  - powerpc/watchpoints: Annotate atomic context in more places
  - powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
  - block: ataflop: fix breakage introduced at blk-mq refactoring
  - seccomp: Invalidate seccomp mode to catch death failures
  - x86/uaccess: Implement macros for CMPXCHG on user addresses
  - hsr: Avoid double remove of a node.
  - hvc/xen: prevent concurrent accesses to the shared ring
  - media: av7110: prevent underflow in write_ts_to_decoder()
  - ASoC: fsl_micfil: register platform component before registering cpu dai
  - ARM: dts: imx: Set default tuning step for imx6sx usdhc
  - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs.
  - firewire: core: send bus reset promptly on gap count error
  - scsi: lpfc: Use unsigned type for num_sge
  - hwmon: (coretemp) Enlarge per package core count limit
  - efi: Don't add memblocks for soft-reserved memory
  - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
  - ext4: correct the hole length returned by ext4_map_blocks()
  - nvmet-fc: abort command when there is no binding
  - nvmet-fc: release reference on target port
  - nvmet-fcloop: swap the list_add_tail arguments
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
  - spi: sh-msiof: avoid integer overflow in constants
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
  - nvmet-tcp: fix nvme tcp ida memory leak
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
  - ahci: asm1166: correct count of reported ports
  - wifi: cfg80211: fix missing interfaces when dumping
  - dmaengine: fsl-qdma: increase size of 'irq_name'
  - dmaengine: shdma: increase size of 'dev_id'
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - zonefs: Improve error handling
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - smb: client: fix parsing of SMB3.1.1 POSIX create context
  - smb: client: fix potential OOBs in smb2_parse_contexts()
  - net/sched: Retire dsmark qdisc
  - net/sched: Retire ATM qdisc
  - net/sched: Retire CBQ qdisc
  - drivers: misc: sdma-dae: fix interrupt handle logic
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - netrom: Fix a memory leak in nr_heartbeat_expiry()
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - iommu: Return right value in iommu_sva_bind_device()
  - net: mvpp2: clear BM pool before initialization
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"


author: Li Nan <linan122@huawei.com> - 5.10.0-222.0.0.121
changelog:
  - !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10764  CVE-2024-41027
  - !10666 v2  ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10624  ata: libata-core: Fix double free on error
  - !10652  nvme: avoid double free special payload
  - NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10785  fix CVE-2024-42155
  - s390/pkey: Wipe copies of protected- and secure-keys
  - Revert "s390/pkey: Wipe copies of protected- and secure-keys"
  - !10742  irqchip/mbigen: Fix mbigen node address layout
  - !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
  - Fix userfaultfd_api to return EINVAL as expected
  - mm/userfaultfd: fail uffd-wp registration if not supported
  - !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
  - !10759  Fix CVE-2024-42160
  - !10530  ftruncate: pass a signed offset
  - !10679  ibmvnic: Add tx check to prevent skb leak
  - !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - !10489  backport mainline patches
  - !10717  CVE-2024-42101
  - !10713  CVE-2024-41079
  - media: mediatek: vcodec: Only free buffer VA that is not NULL
  - irqchip/mbigen: Fix mbigen node address layout
  - !10727  net/iucv: Avoid explicit cpumask var allocation on stack
  - !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - !10715  gve: Account for stopped queues when reading NIC stats
  - !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - net/dpaa2: Avoid explicit cpumask var allocation on stack
  - !10621  fix CVE-2024-42129
  - !9682  drm: vc4: Fix possible null pointer dereference
  - !10427  net: stmmac: move the EST lock to struct stmmac_priv
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
  - !10589 v2  ax25: Fix refcount imbalance on inbound connections
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  - gve: Account for stopped queues when reading NIC stats
  - nvmet: always initialize cqe.result
  - !10683  ocfs2: fix DIO failure due to insufficient transaction credits
  - !10566  gpio: davinci: Validate the obtained number of IRQs
  - !10670  net: can: j1939: Initialize unused data in j1939_send_one()
  - !10661  fix CVE-2024-41062
  - !10519  xfs: add bounds checking to xlog_recover_process_data
  - !10650  xfs: don't walk off the end of a directory data block
  - mm: prevent derefencing NULL ptr in pfn_section_valid()
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - !10630  sched/deadline: Fix task_struct reference leak
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - ibmvnic: Add tx check to prevent skb leak
  - !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - net: can: j1939: Initialize unused data in j1939_send_one()
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
  - !10636  RDMA/restrack: Fix potential invalid address access
  - !10648  net: dsa: mv88e6xxx: Correct check for empty list
  - !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - Bluetooth: L2CAP: Fix deadlock
  - bluetooth/l2cap: sync sock recv cb and release
  - !10503  fix CVE-2024-42155
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - nvme: avoid double free special payload
  - xfs: don't walk off the end of a directory data block
  - net: dsa: mv88e6xxx: Correct check for empty list
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10557  CVE-2024-42105
  - RDMA/restrack: Fix potential invalid address access
  - sched/deadline: Fix task_struct reference leak
  - !10600  ppp: reject claimed-as-LCP but actually malformed packets
  - !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10603  IB/core: Implement a limit on UMAD receive List
  - ata: libata-core: Fix double free on error
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - locking/mutex: Introduce devm_mutex_init()
  - !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10536  CVE-2024-42082
  - !10594  fix CVE-2024-41046
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10569  ila: block BH in ila_output()
  - !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - IB/core: Implement a limit on UMAD receive List
  - ppp: reject claimed-as-LCP but actually malformed packets
  - !10586  filelock: Fix fcntl/close race recovery compat path
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - net: ethernet: lantiq_etop: fix double free in detach
  - net: lantiq_etop: add blank line after declaration
  - !10541  tap: add missing verification for short frame
  - !10540  tun: add missing verification for short frame
  - !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
  - !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - ax25: Fix refcount imbalance on inbound connections
  - filelock: Fix fcntl/close race recovery compat path
  - !10548  powerpc/eeh: avoid possible crash when edev->pdev changes
  - !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10420  stm class: Fix a double free in stm_register_device()
  - !10475  ALSA: emux: improve patch ioctl data validation
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - ila: block BH in ila_output()
  - gpio: davinci: Validate the obtained number of IRQs
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - nilfs2: fix inode number range checks
  - skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10465  null_blk: fix validation of block size
  - powerpc/eeh: avoid possible crash when edev->pdev changes
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - tap: add missing verification for short frame
  - tun: add missing verification for short frame
  - xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
  - xdp: Remove WARN() from __xdp_reg_mem_model()
  - xdp: Allow registering memory model without rxq reference
  - xdp: Move the rxq_info.mem clearing to unreg_mem_model()
  - !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
  - !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - !10454  fs/ntfs3: Validate ff offset
  - ipv6: prevent possible NULL deref in fib6_nh_init()
  - ftruncate: pass a signed offset
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10383  filelock: fix potential use-after-free in posix_lock_inode
  - xfs: add bounds checking to xlog_recover_process_data
  - !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10417 Backport 5.10.212 LTS patches from upstream
  - !10487  fix CVE-2024-42086
  - !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
  - s390/pkey: Wipe copies of protected- and secure-keys
  - !10425  kunit: Fix kthread reference
  - !10424  kunit: Fix kthread reference
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - irqdomain: Fixed unbalanced fwnode get and put
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - !10361  PCI/ROM: Fix PCI ROM header check bug
  - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
  - gpio: fix resource unwinding order in error path
  - gpiolib: Fix the error path order in gpiochip_add_data_with_key()
  - gpio: 74x164: Enable output pins after registers are reset
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
  - mptcp: fix possible deadlock in subflow diag
  - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
  - mmc: sdhci-xenon: fix PHY init clock stability
  - mmc: sdhci-xenon: add timeout for PHY init complete
  - mmc: core: Fix eMMC initialization with 1-bit bus connection
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
  - wifi: nl80211: reject iftype change with mesh ID change
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - afs: Fix endless loop in directory parsing
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
  - Bluetooth: Enforce validation on max value of connection interval
  - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - mtd: spinand: gigadevice: Fix the get ecc status issue
  - mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
  - crypto: virtio/akcipher - Fix stack overflow on memcpy
  - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
  - !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - !10404  Fix CVE-2024-41069
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - ALSA: emux: improve patch ioctl data validation
  - !10352  fix CVE-2024-40976
  - !10406  usb: gadget: ncm: Fix handling of zero block length packets
  - !10271  HID: core: remove unnecessary WARN_ON() in implement()
  - !10431  s390/qeth: fix deadlock during failing recovery
  - !10440  net/sched: Fix UAF when resolving a clash
  - !10328  net/smc: enable smcrv1 when RNIC supports rocev2
  - !10449  net: ena: Add validation for completion descriptors consistency
  - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - null_blk: fix validation of block size
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - fs/ntfs3: Validate ff offset
  - net: ena: Add validation for completion descriptors consistency
  - net/sched: Fix UAF when resolving a clash
  - s390/qeth: fix deadlock during failing recovery
  - net: stmmac: move the EST lock to struct stmmac_priv
  - kunit: Fix kthread reference
  - kunit: Fix kthread reference
  - stm class: Fix a double free in stm_register_device()
  - usb: gadget: ncm: Fix handling of zero block length packets
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Fix references to freed memory
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - filelock: fix potential use-after-free in posix_lock_inode
  - PCI/ROM: Fix PCI ROM header check bug
  - drm/lima: mask irqs in timeout path before hard reset
  - drm/lima: add mask irq callback to gp and pp
  - net/smc: enable smcrv1 when RNIC supports rocev2
  - HID: core: remove unnecessary WARN_ON() in implement()
  - drm: vc4: Fix possible null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-223.0.0.122
changelog:
  - !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - !10878  orangefs: fix out-of-bounds fsid access
  - !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
  - !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
  - !10523 [OLK-5.10] drivers: add GDR support
  - !10885  crypto: aead,cipher - zeroize key buffer after use
  - !10888  s390/pkey: Wipe copies of clear-key structures on failure
  - !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - drivers: Fix kabi check failure
  - drivers: Add GDR(GPU Direct RDMA) support
  - !10842  netfilter: nf_tables: prefer nft_chain_validate
  - !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10873  USB: serial: mos7840: fix crash on resume
  - !10887 v3  sched/fair: Prefer physical cores when migrating tasks
  - s390/pkey: Wipe copies of clear-key structures on failure
  - sched/fair: Prefer physical cores when migrating tasks
  - crypto: aead,cipher - zeroize key buffer after use
  - orangefs: fix out-of-bounds fsid access
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - drm/i915/gt: Fix potential UAF by revoke of fence registers
  - USB: serial: mos7840: fix crash on resume
  - !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
  - !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10817  media: dvb-frontends: tda10048: Fix integer overflow
  - !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - !10801  fix CVE-2024-42095
  - !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - !10704  x86: stop playing stack games in profile_pc()
  - ext4: flexibly control whether to enable dioread_nolock by default
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10836  wifi: mt76: replace skb_put with skb_put_zero
  - !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - netfilter: nf_tables: prefer nft_chain_validate
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - wifi: mt76: replace skb_put with skb_put_zero
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10810  tcp_metrics: validate source addr length
  - !10766 Backport 5.10.213 LTS patches from upstream
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - !10752  btrfs: qgroup: fix quota root leak after quota disable failure
  - media: dvb-frontends: tda10048: Fix integer overflow
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10781  nilfs2: fix kernel bug on rename operation of broken directory
  - tcp_metrics: validate source addr length
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10733  filelock: Remove locks reliably when fcntl/close race is detected
  - !10765 mbigen: add kvm dependency
  - !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
  - !10681  crypto: ecdh - explicitly zeroize private_key
  - !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  - serial: 8250_omap: Implementation of Errata i2310
  - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - mbigen: add kvm dependency
  - !10778  Fix CVE-2021-47582
  - !10784  s390/pkey: Wipe sensitive data on failure
  - serial: max310x: implement I2C support
  - serial: max310x: make accessing revision id interface-agnostic
  - Drivers: hv: vmbus: Drop error message when 'No request id available'
  - serial: max310x: Unprepare and disable clock in error path
  - getrusage: use sig->stats_lock rather than lock_task_sighand()
  - getrusage: use __for_each_thread()
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - getrusage: add the "signal_struct *sig" local variable
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  - hv_netvsc: use netif_is_bond_master() instead of open code
  - hv_netvsc: Make netvsc/VF binding check both MAC and serial number
  - hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  - hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  - hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
  - Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
  - ext4: convert to exclusive lock while inserting delalloc extents
  - ext4: refactor ext4_da_map_blocks()
  - ext4: make ext4_es_insert_extent() return void
  - lsm: fix default return value of the socket_getpeersec_*() hooks
  - lsm: make security_socket_getpeersec_stream() sockptr_t safe
  - bpf: net: Change sk_getsockopt() to take the sockptr_t argument
  - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
  - serial: max310x: prevent infinite while() loop in port startup
  - serial: max310x: use a separate regmap for each port
  - serial: max310x: use regmap methods for SPI batch operations
  - serial: max310x: Make use of device properties
  - serial: max310x: fail probe if clock crystal is unstable
  - serial: max310x: Try to get crystal clock rate from property
  - serial: max310x: Use devm_clk_get_optional() to get the input clock
  - xhci: handle isoc Babble and Buffer Overrun events properly
  - xhci: process isoc TD properly when there was a transaction error mid TD.
  - xhci: prevent double-fetch of transfer and transfer event TRBs
  - xhci: remove extra loop in interrupt context
  - um: allow not setting extra rpaths in the linux binary
  - selftests: mm: fix map_hugetlb failure on 64K page size systems
  - selftests/mm: switch to bash from sh
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count
  - netrom: Fix a data-race around sysctl_netrom_routing_control
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family
  - geneve: make sure to pull inner header in geneve_rx()
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
  - net: lan78xx: fix runtime PM count underflow on link stop
  - lan78xx: Fix race conditions in suspend/resume handling
  - lan78xx: Fix partial packet errors on suspend/resume
  - lan78xx: Add missing return code checks
  - lan78xx: Fix white space and style issues
  - vhost: Add smp_rmb() in vhost_enable_notify()
  - vhost: Add smp_rmb() in vhost_vq_avail_empty()
  - s390/pkey: Wipe sensitive data on failure
  - nilfs2: fix kernel bug on rename operation of broken directory
  - usb: core: Don't hold the device lock while sleeping in do_proc_control()
  - USB: core: Make do_proc_control() and do_proc_bulk() killable
  - leds: an30259a: Use devm_mutex_init() for mutex initialization
  - btrfs: qgroup: fix quota root leak after quota disable failure
  - filelock: Remove locks reliably when fcntl/close race is detected
  - x86: stop playing stack games in profile_pc()
  - crypto: ecdh - explicitly zeroize private_key
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.


author: Li Nan <linan122@huawei.com> - 5.10.0-224.0.0.123
changelog:
  - !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
  - !11007  mm: avoid overflows in dirty throttling logic
  - !10979  CVE-2024-42304
  - !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - mm: avoid overflows in dirty throttling logic
  - !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
  - !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
  - !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - !10963  sched: fix numa_group uninitialized in show_numa_stats()
  - !10614  can: mcp251xfd: fix infinite loop when xmit fails
  - !10951  Fix CVE-2024-36880
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - sched: fix numa_group uninitialized in show_numa_stats()
  - !10931  drm/lima: fix shared irq handling on driver remove
  - !10947  net: nexthop: Initialize all fields in dumped nexthops
  - !10945 v4  Some clean up and bugfix for hisi_hbmdev
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - Bluetooth: qca: fix firmware check error path
  - Bluetooth: qca: add missing firmware sanity checks
  - net: nexthop: Initialize all fields in dumped nexthops
  - soc/hisilicon: Remove the memdev kobj
  - soc/hisilicon: Clean the hbmcache state show sysfs
  - soc: hisilicon: Setting the demand_offline in sysfs interface
  - Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
  - Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
  - !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
  - drm/lima: fix shared irq handling on driver remove
  - !10745  jfs: xattr: fix buffer overflow for invalid xattr
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - !10912  Fix CVE-2024-40966
  - !10689 sdma: fix input validate problems
  - !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - tty: vt device use only n_tty ldisc
  - tty: add the option to have a tty reject a new ldisc
  - !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - !10813 ima: dont disable digest_list if the file is not processed
  - !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - perf/x86/intel: Add a distinct name for Granite Rapids
  - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
  - perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters
  - perf/x86/uncore: Cleanup unused unit structure
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
  - perf/x86/uncore: Support per PMU cpumask
  - perf/x86/uncore: Save the unit control address of all units
  - ima: dont disable digest_list if the file is not processed
  - drivers: misc: sdma-dae: fix input validate problems
  - jfs: xattr: fix buffer overflow for invalid xattr
  - can: mcp251xfd: fix infinite loop when xmit fails
  - powercap: intel_rapl_tpmi: Fix System Domain probing
  - powercap: intel_rapl_tpmi: Fix a register bug
  - powercap: intel_rapl: Fix locking in TPMI RAPL
  - powercap: intel_rapl: Fix a NULL pointer dereference
  - powercap: intel_rapl: Fix a sparse warning in TPMI interface


author: Li Nan <linan122@huawei.com> - 5.10.0-225.0.0.124
changelog:
  - !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
  - !11123  fix CVE-2024-42288
  - !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11151  protect the fetch of ->fd[fd
  - !10113  Fixed two memory leak issues of the Perf tool
  - !11092  mISDN: Fix a use after free in hfcmulti_tx()
  - btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11071 【olk 5.10】net: hns3: add some feature patches
  - !11085  f2fs: fix to don't dirty inode for readonly filesystem
  - !11138 v2  drm/amd/display: Check for NULL pointer
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
  - !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
  - !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11070 IP notify code optimization
  - !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
  - !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - !11115  net/iucv: fix use after free in iucv_sock_close()
  - drm/amd/display: Check for NULL pointer
  - !11054  m68k: Fix spinlock race in kernel thread creation
  - !11055  phonet: fix rtm_phonet_notify() skb allocation
  - !11126  drm/amd/display: Check pipe offset before setting vblank
  - network_mgmt: Security check and modification.
  - Fix the issue that the debugfs query inconsistency.
  - UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
  - ubl: correct comments and delete unused EXPORT_SYMBOL
  - unic: fix issue that return value is not processed
  - unic: deleted redundant code and added default processing
  - drm/amd/display: Check pipe offset before setting vblank
  - scsi: qla2xxx: Fix for possible memory corruption
  - !11091  net/mlx5: Always drain health in shutdown callback
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - net/iucv: fix use after free in iucv_sock_close()
  - exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11027  landlock: Don't lose track of restrictions on cred_transfer
  - mISDN: Fix a use after free in hfcmulti_tx()
  - net/mlx5: Always drain health in shutdown callback
  - f2fs: fix to don't dirty inode for readonly filesystem
  - x86/head/64: Re-enable stack protection
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
  - kbuild: dummy-tools: adjust to stricter stackprotector check
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  - Bluetooth: btintel: Fixe build regression
  - virtio: reenable config if freezing device failed
  - drivers/nvme: Add quirks for device 126f:2262
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  - usb: typec: tcpci: add generic tcpci fallback compatible
  - tools: iio: replace seekdir() in iio_generic_buffer
  - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
  - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  - Input: allocate keycode for Display refresh rate toggle
  - RDMA/cm: add timeout to cm_destroy_id wait
  - libperf evlist: Avoid out-of-bounds access
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix nanosec stat overflow
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: add a hint for block bitmap corrupt state in mb_groups
  - media: sta2x11: fix irq handler cast
  - isofs: handle CDs with bad root inode but good Joliet root directory
  - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  - ionic: set adminq irq affinity
  - arm64: dts: rockchip: fix rk3399 hdmi ports node
  - arm64: dts: rockchip: fix rk3328 hdmi ports node
  - panic: Flush kernel log buffer at the end
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  - mptcp: don't account accept() of non-MPC client as fallback to TCP
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  - x86/bugs: Fix the SRSO mitigation on Zen3/4
  - riscv: Fix spurious errors from __get/put_kernel_nofault
  - s390/entry: align system call table on 8 bytes
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning
  - scsi: mylex: Fix sysfs buffer lengths
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  - arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
  - net: ravb: Always process TX descriptor ring
  - Revert "usb: phy: generic: Get the vbus supply"
  - scsi: qla2xxx: Update manufacturer detail
  - scsi: qla2xxx: Update manufacturer details
  - i40e: fix i40e_count_filters() to count only active/new filters
  - octeontx2-pf: check negative error code in otx2_open()
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  - selftests: reuseaddr_conflict: add missing new line at the end of the output
  - net: stmmac: fix rx queue priority assignment
  - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - io_uring: ensure '0' is returned on file registration success
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - Bluetooth: hci_event: set the conn encrypted before conn establishes
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  - dm integrity: fix out-of-range warning
  - Octeontx2-af: fix pause frame configuration in GMP mode
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  - usb: typec: ucsi: Ack unsupported commands
  - usb: dwc2: gadget: LPM flow fix
  - usb: dwc2: host: Fix ISOC flow in DDMA mode
  - usb: dwc2: host: Fix hibernation flow
  - usb: dwc2: host: Fix remote wakeup from hibernation
  - USB: core: Add hub_get() and hub_put() routines
  - staging: vc04_services: fix information leak in create_component()
  - staging: vc04_services: changen strncpy() to strscpy_pad()
  - usb: cdc-wdm: close race between read and workqueue
  - mmc: core: Avoid negative index with array access
  - mmc: core: Initialize mmc_blk_ioc_data
  - hexagon: vmlinux.lds.S: handle attributes section
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  - init: open /initrd.image with O_LARGEFILE
  - mm/migrate: set swap entry values of THP tail pages properly.
  - mm/memory-failure: fix an incorrect use of tail pages
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  - efivarfs: Request at most 512 bytes for variable names
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack
  - printk: Update @console_may_schedule in console_trylock_spinning()
  - tee: optee: Fix kernel panic caused by incorrect error handling
  - mei: me: add arrow lake point H DID
  - mei: me: add arrow lake point S DID
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  - usb: port: Don't try to peer unused USB ports based on location
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  - netfilter: nf_tables: reject constant set with timeout
  - comedi: comedi_test: Prevent timers rescheduling during deletion
  - scripts: kernel-doc: Fix syntax error due to undeclared args variable
  - x86/pm: Work around false positive kmemleak report in msr_build_context()
  - x86/stackprotector/32: Make the canary into a regular percpu variable
  - vxge: remove unnecessary cast in kfree()
  - drm/amd/display: Fix noise issue on HDMI AV mute
  - drm/amd/display: Return the correct HDCP error code
  - ahci: asm1064: asm1166: don't limit reported ports
  - ahci: asm1064: correct count of reported ports
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list
  - net: hns3: tracing: fix hclgevf trace event strings
  - cpufreq: dt: always allocate zeroed cpumask
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - memtest: use {READ,WRITE}_ONCE in memory scanning
  - drm/vc4: hdmi: do not return negative values from .get_modes()
  - drm/imx/ipuv3: do not return negative values from .get_modes()
  - drm/exynos: do not return negative values from .get_modes()
  - drm/panel: do not return negative error codes from drm_panel_get_modes()
  - ring-buffer: Fix full_waiters_pending in poll
  - ring-buffer: Fix resetting of shortest_full
  - ring-buffer: Do not set shortest_full when full target is hit
  - ring-buffer: Fix waking up ring buffer readers
  - PCI: dwc: endpoint: Fix advertised resizable BAR size
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  - PCI/AER: Block runtime suspend when handling errors
  - speakup: Fix 8bit characters from direct synth
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  - usb: gadget: tegra-xudc: Use dev_err_probe()
  - phy: tegra: xusb: Add API to retrieve the port number of phy
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  - nvmem: meson-efuse: fix function pointer type mismatch
  - hwmon: (amc6821) add of_match table
  - drm/etnaviv: Restore some id values
  - mmc: core: Fix switch on gp3 partition
  - dm-raid: fix lockdep waring in "pers->hot_add_disk"
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  - serial: Lock console when calling into driver before registration
  - printk/console: Split out code that enables default console
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  - fuse: don't unhash root
  - fuse: fix root lookup with nonzero generation
  - mmc: tmio: avoid concurrent runs of mmc_request_done()
  - PM: sleep: wakeirq: fix wake irq warning in system suspend
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  - USB: serial: option: add MeiG Smart SLM320 product
  - USB: serial: cp210x: add ID for MGP Instruments PDS100
  - USB: serial: add device ID for VeriFone adapter
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  - powerpc/fsl: Fix mfpmr build errors with newer binutils
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - PM: suspend: Set mem_sleep_current during kernel command line setup
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  - parisc: Fix csum_ipv6_magic on 64-bit systems
  - parisc: Fix csum_ipv6_magic on 32-bit systems
  - parisc: Fix ip_fast_csum
  - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  - mtd: rawnand: meson: fix scrambling mode value in command macro
  - ubi: correct the calculation of fastmap size
  - ext4: correct best extent lstart adjustment logic
  - selftests/mqueue: Set timeout to 180 seconds
  - crypto: qat - resolve race condition during AER recovery
  - crypto: qat - fix double free during reset
  - sparc: vDSO: fix return value of __setup handler
  - sparc64: NMI watchdog: fix return value of __setup handler
  - serial: max310x: fix NULL pointer dereference in I2C instantiation
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  - x86/bugs: Use sysfs_emit()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !11045  bpf: Fix a segment issue when downgrading gso_size
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: fixed vf get max channels bug
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - phonet: fix rtm_phonet_notify() skb allocation
  - m68k: Fix spinlock race in kernel thread creation
  - !11036 v2  Some bugfix for HNS RoCE
  - !10999  media: venus: fix use after free in vdec_close
  - !11013  media: mediatek: vcodec: Handle invalid decoder vsi
  - !10971  ext4: fix infinite loop when replaying fast_commit
  - !11022  udf: Avoid using corrupted block bitmap buffer
  - bpf: Fix a segment issue when downgrading gso_size
  - !11012  hfsplus: fix uninit-value in copy_name
  - !10993  ipvs: properly dereference pe in ip_vs_add_service
  - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - RDMA/hns: Fix integer overflow in calc_loading_percent()
  - RDMA/hns: Fix creating sysfs before allocating resources
  - RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
  - RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
  - RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  - RDMA/hns: Fix HW UAF when destroy context timeout
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix a potential Sleep-in-Atomic-Context
  - RDMA/hns: Fix long waiting cmd event when reset
  - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
  - RDMA/hns: Use one CQ bank per context
  - !10976  CVE-2024-42126
  - !10990  drm/amd/display: Add NULL pointer check for kzalloc
  - !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11006  kvm: s390: Reject memory region operations for ucontrol VMs
  - !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - !10991  s390/sclp: Fix sclp_init() cleanup on failure
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - landlock: Don't lose track of restrictions on cred_transfer
  - !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - udf: Avoid using corrupted block bitmap buffer
  - net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11010 roh/rdma: Support rdma_cm and cnp configure
  - !10995  CVE-2024-42290
  - !10965  perf: Optimize perf_pmu_migrate_context()
  - [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
  - media: mediatek: vcodec: Handle invalid decoder vsi
  - hfsplus: fix uninit-value in copy_name
  - [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
  - [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
  - [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
  - kvm: s390: Reject memory region operations for ucontrol VMs
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - media: venus: fix use after free in vdec_close
  - irqchip/imx-irqsteer: Handle runtime power management correctly
  - ipvs: properly dereference pe in ip_vs_add_service
  - s390/sclp: Fix sclp_init() cleanup on failure
  - drm/amd/display: Add NULL pointer check for kzalloc
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
  - ext4: fix infinite loop when replaying fast_commit
  - perf: Optimize perf_pmu_migrate_context()
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - UNIC: bugfix for mguid's memory not be free after netdev init fail
  - UNIC: Solve the problem of redundant print in ub mode
  - ipv6: sr: fix missing sk_buff release in seg6_input_core
  - perf stat: Fix memory leakage when trying perf on an offline CPU
  - perf parse-events: Fix one memory leakage issue


author: Li Nan <linan122@huawei.com> - 5.10.0-226.0.0.125
changelog:
  - !11372  xdp: fix invalid wait context of page_pool_destroy()
  - !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
  - !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - !11358  kcm: Serialise kcm_sendmsg() for the same socket.
  - !11327  CPU inspect bugfix
  - !11340  soc: hisilicon: Support memory repair driver
  - !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - !11324  drm/amd/display: Add null checker before passing variables
  - !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
  - !11284  fix CVE-2024-43905
  - !11343  netfilter: ctnetlink: use helper function to calculate expect ID
  - !11330  jbd2: avoid mount failed when commit block is partial submitted
  - !11190  fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - !11201  ibmvnic: don't release napi in __ibmvnic_open()
  - !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
  - !10748 v2  CVE-2024-41016
  - !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11313  nvme-fabrics: use reserved tag for reg read/write command
  - !11310  drm/radeon: check bo_va->bo is non-NULL before using it
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - xdp: fix invalid wait context of page_pool_destroy()
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - kcm: Serialise kcm_sendmsg() for the same socket.
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - ext4: sanity check for NULL pointer after ext4_force_shutdown
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - config: enable CONFIG_HISI_MEM_RAS by default
  - docs: ABI: add ABI document for driver hisi_mem_ras
  - soc: hisilicon: Support memory repair driver on Kunpeng SoC
  - !11337 v3  Some features and fixs for hbmdev and hbm cache
  - ACPI/HMAT: Add missing locality information for hot-added device
  - hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
  - hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
  - soc:hisilicon: Use _ON and _OFF in hbmcache
  - jbd2: avoid mount failed when commit block is partial submitted
  - cpuinspect: fix [stop/start]_inspect_threads return type
  - cpuinspect: make inspector unregister reliable
  - drm/amd/display: Add null checker before passing variables
  - nvme-fabrics: use reserved tag for reg read/write command
  - hns3 udma: remove UBL dependency.
  - hns3 udma: add verify udata and in/out addr.
  - hns3 udma: fix bugs of code review.
  - hns3 udma: fixed some bugs.
  - drm/radeon: check bo_va->bo is non-NULL before using it
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - !11058  drm/amdgpu: change vm->task_info handling
  - !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
  - !11246 [olk 5.10] hns3驱动一些bugfix patch
  - !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
  - !11273  serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - net: hns3: fixed reset failure issues caused by the incorrect reset type
  - net: hns3: fix missing features due to dev->features configuration too early
  - net: hns3: fix a deadlock problem when config TC during resetting
  - net: hns3: add sync command to sync io-pgtable
  - net: hns3: default enable tx bounce buffer when smmu enabled
  - net: hns3: don't add the len of vlan head if skb_vlan_pop failed
  - net: hns3: void array out of bound when loop tnl_num
  - !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11271 roh/core: Avoid null pointer access and optimize code.
  - UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
  - UNIC: Using UBL-related macros to isolate UB header files
  - roh/core: Avoid null pointer access and optimize code.
  - wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11267  net: bridge: mcast: wait for previous gc cycles when removing port
  - serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: use correct release function during uninitialization
  - net: hns3: delete redundant enabling actions for Layer 2 fowarding
  - net: hns3: use the user's cfg after reset
  - net: hns3: fix delete tc fail issue
  - net: bridge: mcast: wait for previous gc cycles when removing port
  - !11241  CVE-2024-43892
  - !11217  scsi: qla2xxx: validate nvme_local_port correctly
  - !11181  block: initialize integrity buffer to zero before writing it to media
  - !11111  sysctl: always initialize i_uid/i_gid
  - !11194  Fix mainline patchs
  - !11230  Bluetooth: MGMT: Add error handling to pair_device()
  - !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11171  tracing: Fix overflow in get_free_elt()
  - !11169  CVE-2024-42267
  - memcg: protect concurrent access to mem_cgroup_idr
  - !11174  md: restore 'noio_flag' for the last mddev_resume()
  - Bluetooth: MGMT: Add error handling to pair_device()
  - apparmor: Fix null pointer deref when receiving skb during sock creation
  - !11182  CVE-2024-42287
  - scsi: qla2xxx: validate nvme_local_port correctly
  - !11159  usb: vhci-hcd: Do not drop references before new references are gained
  - !11184 【OLK 5.10】spi: spidev some bugfix
  - drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - !11147  powerpc/pseries: Fix scv instruction crash with kexec
  - jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11187  Bugfix patches for hns RoCE
  - ibmvnic: don't release napi in __ibmvnic_open()
  - perf/x86/amd/core: Fix overflow reset on hotplug
  - perf/x86/amd/core: Always clear status for idx
  - spi: spidev: fix a recursive locking error
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - spi: spidev: fix a race condition when accessing spidev->spi
  - RDMA/hns: Fix list_*_careful() not being used in pairs
  - RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
  - RDMA/hns: Fix possible RAS when DCA is not attached
  - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
  - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
  - scsi: qla2xxx: Complete command early within lock
  - block: initialize integrity buffer to zero before writing it to media
  - md: restore 'noio_flag' for the last mddev_resume()
  - tracing: Fix overflow in get_free_elt()
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
  - usb: vhci-hcd: Do not drop references before new references are gained
  - powerpc/pseries: Fix scv instruction crash with kexec
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - sysctl: always initialize i_uid/i_gid
  - drm/amdgpu: change vm->task_info handling
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry()


author: Li Nan <linan122@huawei.com> - 5.10.0-227.0.0.126
changelog:
  - !11282  CVE-2024-44935
  - !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - !11437 sdma-dae:fix code review problems
  - ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - !11015  nvme-pci: add missing condition check for existence of mapped data
  - !11432 v2  mm/block: add bdi sysfs knobs
  - !11316  block: fix pin count management when merging same-page segments
  - drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - drivers:misc:sdma-dae: fix icsl code check problems
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - mm: fix arithmetic for bdi min_ratio
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: document /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add bdi_set_min_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add bdi_set_max_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add bdi_set_min_bytes() function
  - mm: split off __bdi_set_min_ratio() function
  - mm: add bdi_get_min_bytes() function
  - mm: document /sys/class/bdi/<bdi>/max_bytes knob
  - mm: add knob /sys/class/bdi/<bdi>/max_bytes
  - mm: add bdi_set_max_bytes() function
  - mm: split off __bdi_set_max_ratio() function
  - mm: add bdi_get_max_bytes() function
  - mm: use part per 1000000 for bdi ratios
  - mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
  - mm: document /sys/class/bdi/<bdi>/strict_limit knob
  - mm: add knob /sys/class/bdi/<bdi>/strict_limit
  - mm: add bdi_set_strict_limit() function
  - !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - !11207  kprobe support %pd/%pD type
  - !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !11391  fix CVE-2023-45896
  - !11405  dma: fix call order in dmam_free_coherent
  - !11237  CVE-2024-43907
  - !11409  btrfs: do not start relocation until in progress drops are done
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !10904 Incorporate some bonding patches as follows(OLK_5.10):
  - !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
  - !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - btrfs: do not start relocation until in progress drops are done
  - !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
  - !11403  btrfs: do not WARN_ON() if we have PageError set
  - dma: fix call order in dmam_free_coherent
  - !11394  dmaengine: idxd: Prevent use after free on completion memory
  - btrfs: do not WARN_ON() if we have PageError set
  - fuse: Initialize beyond-EOF page contents before setting uptodate
  - dmaengine: idxd: Prevent use after free on completion memory
  - fs/ntfs3: Add more attributes checks in mi_enum_attr()
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - block: fix pin count management when merging same-page segments
  - sctp: Fix null-ptr-deref in reuseport_add_sock().
  - sctp: move hlist_node and hashent out of sctp_ep_common
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - RDMA/hns: Fix concurrency issue between bond work and bond event
  - RDMA/hns: Fix UAF in clear bond printing
  - RDMA/hns: Encapsulate upper event and lowerstate event handlers
  - RDMA/hns: Register notifier block of bonding events in bond_grp
  - selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
  - Documentation: tracing: add new type '%pd' and '%pD' for kprobe
  - tracing/probes: support '%pD' type for print struct file's name
  - tracing/probes: support '%pd' type for print struct dentry's name
  - nvme-pci: add missing condition check for existence of mapped data


author: Li Nan <linan122@huawei.com> - 5.10.0-228.0.0.127
changelog:
  - !11504 sdma-dae support debugfs and fast mode
  - !10195  xfs: Fix agf_longest update error
  - !11505  Misc minor bugfix for HNS RoCE
  - RDMA/hns: Fix endian issues
  - RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
  - RDMA/hns: Fix "Should it be static?" warnings
  - RDMA/hns: Fix dereference of noderef expression
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - drivers:misc:sdma-dae: add fast mode
  - !11479 【OLK 5.10】some bugfixes for hns3 driver
  - driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
  - driver:misc:sdma-dae: add debugfs of sdma-dae
  - !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11478  coresight: etm4x: Fix CPU idle PM support for ETE
  - net: hns3: fix concurrent setting vlan filter issue
  - net: hns3: fix snprintf() is printing too much problem
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  - net: hns3:support enable or disable pfc strom prevent
  - !11491  Fix CVE-2022-48887
  - net: hns3: fix wrong use of semaphore up
  - !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - !11462  mptcp: pm: avoid possible UaF when selecting endp
  - !11470 OLK-5.10 Rever gpiolib bugfix
  - drm/vmwgfx: Remove rcu locks from user resources
  - drm/vmwgfx: Remove vmw_user_bo_noref_release
  - drm/vmwgfx: Introduce ttm reference object find function
  - RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11487  bna: ensure the copied buf is NUL terminated
  - bna: ensure the copied buf is NUL terminated
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - coresight: etm4x: add CPU hotplug support for probing
  - !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
  - !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
  - !11466 OLK-5.10 Rever spi bugfix
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - net: hns3: don't auto enable misc vector
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
  - Revert "spi: Add verification for the max_frequency provided by the firmware"
  - !11104  soc: qcom: pdr: protect locator_addr with the main mutex
  - !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
  - !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - mptcp: pm: avoid possible UaF when selecting endp
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - perf parse-event bugfix merge
  - perf test: Add parse-events test for aliases with hyphens
  - perf test: Add pmu-events test for aliases with hyphens
  - perf parse-events: Support event alias in form foo-bar-baz
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - xfs: Fix agf_longest update error
  - Fix x86 provides error symbol


author: Li Nan <linan122@huawei.com> - 5.10.0-229.0.0.128
changelog:
  - !11565 ip_notify:Clean up redundant import files
  - network_mgmt: Clean up redundant import files for ip_notify.c.
  - !11521  ipv6: prevent UAF in ip6_send_skb()
  - !11517  ipv6: fix possible UAF in ip6_finish_output2()
  - !11514  fix CVE-2024-44988
  - !11526 IP notify code optimization
  - !11552  mm/hugetlb: fix pgtable lock on pmd sharing
  - network_mgmt: Add ip_notify timer print.
  - !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11553  mm: fix failure to unmap pte on highmem systems
  - !11488  wifi: nl80211: don't free NULL coalescing rule
  - mm: fix failure to unmap pte on highmem systems
  - mm/hugetlb: fix pgtable lock on pmd sharing
  - ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11456 Backport 5.10.216 LTS patches from upstream
  - !11484  drm/qxl: Add check for drm_cvt_mode
  - !11457  usb: gadget: core: Check for unset descriptor
  - !11475  Fix CVE-2023-52916
  - !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
  - ipv6: prevent UAF in ip6_send_skb()
  - ipv6: fix possible UAF in ip6_finish_output2()
  - net: dsa: mv88e6xxx: Fix out-of-bound access
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points
  - net: dsa: mv88e6xxx: read FID when handling ATU violations
  - x86/mtrr: Check if fixed MTRRs exist before saving them
  - !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - wifi: nl80211: don't free NULL coalescing rule
  - drm/qxl: Add check for drm_cvt_mode
  - media: aspeed: Fix memory overwrite if timing is 1600x900
  - media: aspeed: Fix no complete irq for non-64-aligned width
  - usb: gadget: core: Check for unset descriptor
  - udp: preserve the connected status if only UDP cmsg
  - dma: xilinx_dpdma: Fix locking
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: owl: fix register access functions
  - mtd: diskonchip: work around ubsan link failure
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - PM / devfreq: Fix buffer overflow in trans_stat_show
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
  - tracing: Show size of requested perf buffer
  - Revert "crypto: api - Disallow identical driver names"
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - ipvs: Fix checksumming on GSO of SCTP packets
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - NFC: trf7970a: disable all regulators on removal
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - vxlan: drop packets from invalid src-address
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
  - arm64: dts: mediatek: mt7622: add support for coherent DMA
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - nilfs2: fix OOB in nilfs_set_de_type
  - nouveau: fix instmem race condition around ptr stores
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Print an info line before disabling unused clocks
  - clk: remove extra empty line
  - clk: Mark 'all_lists' as const
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - selftests/ftrace: Limit length in subsystem-enable tests
  - btrfs: record delayed inode root in transaction
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - mailbox: imx: fix suspend failue
  - iommu/vt-d: Allocate local memory for page request queue
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - nouveau: fix function cast warning
  - media: cec: core: remove length check of Timer Status


author: Li Nan <linan122@huawei.com> - 5.10.0-230.0.0.129
changelog:
  - !11771  tools: move alignment-related macros to new <linux/align.h>
  - !11729  scsi: qedi: Fix crash while reading debugfs attribute
  - tools: move alignment-related macros to new <linux/align.h>
  - !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - !11707  btrfs: fix qgroup reserve leaks in cow_file_range
  - !11723 v2  Squashfs: sanity check symbolic link size
  - !11708  CVE-2024-46751
  - !11728  lib: objagg: Fix general protection fault
  - !11727  jfs: fix null ptr deref in dtInsertEntry
  - !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - !11690  sch/netem: fix use after free in netem_dequeue
  - !11693  Fix CVE-2024-39501
  - !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11701  userfaultfd: fix checks for huge PMDs
  - !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
  - scsi: qedi: Fix crash while reading debugfs attribute
  - lib: objagg: Fix general protection fault
  - jfs: fix null ptr deref in dtInsertEntry
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - Squashfs: sanity check symbolic link size
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
  - btrfs: fix qgroup reserve leaks in cow_file_range
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - userfaultfd: fix checks for huge PMDs
  - x86/mm: Fix pti_clone_pgtable() alignment assumption
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
  - !8831 Add support for Hygon model 7h processors
  - !11665  drm/amd/pm: fix the Out-of-bounds read warning
  - sch/netem: fix use after free in netem_dequeue
  - !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - !11649  fix CVE-2024-46714
  - drm/amd/pm: fix the Out-of-bounds read warning
  - !11632  fix CVE-2024-46723
  - !11555 v2  Fix CVE-2024-45025
  - !11588  drm/amd/display: Skip finding free audio for unknown engine_id
  - !11586  jfs: don't walk off the end of ealist
  - !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
  - !11637  netfilter: tproxy: bail out if IP has been disabled on the device
  - !11562  Backport bugfix from mainline
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
  - !11612  Input: uinput - reject requests with unreasonable number of slots
  - drm/amdgpu: fix ucode out-of-bounds read
  - !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  - drivers/perf: hisi_pcie: Record hardware counts correctly
  - docs: fix 'make htmldocs' warning in perf
  - docs: perf: Fix build warning of hisi-pcie-pmu.rst
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi: Add TLP filter support
  - Documentation: perf: Indent filter options list of hisi-pcie-pmu
  - docs: perf: Fix PMU instance name of hisi-pcie-pmu
  - docs: perf: Add description for HiSilicon PCIe PMU driver
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11606  Fix iBMA bug and change version
  - mmc: mmc_test: Fix NULL dereference on allocation failure
  - Input: uinput - reject requests with unreasonable number of slots
  - !11592  CVE-2024-36915
  - !10933  drm/amd/display: Check index msg_id before read or write
  - !10936  ata: libata-core: Fix null pointer dereference on error
  - !11604 hns3 udma: add resource allocation and change name of struct
  - BMA: Fix edma driver initialization problem and change the version number.
  - !11593  gtp: pull network headers in gtp_dev_xmit()
  - hns3 udma: add prefix hns3 for udma.
  - !11583  nfs: always check dreq->error after a commit
  - !11584  vfs: Don't evict inode under the inode lru traversing context
  - !11577  tcp: fix one compile error in __inet_hash_connect()
  - !11578  net: fix one compile error in net_rship_refresh_timeout()
  - gtp: pull network headers in gtp_dev_xmit()
  - nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
  - net: add copy_safe_from_sockptr() helper
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - !11574  nilfs2: add missing check for inode numbers on directory entries
  - jfs: don't walk off the end of ealist
  - vfs: Don't evict inode under the inode lru traversing context
  - nfs: always check dreq->error after a commit
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - net: fix one compile error in net_rship_refresh_timeout()
  - tcp: fix one compile error in __inet_hash_connect()
  - nilfs2: add missing check for inode numbers on directory entries
  - !11570  NFSD: Fix ia_size underflow
  - NFSD: Fix ia_size underflow
  - mm/compaction: correctly return failure with bogus compound_order in strict mode
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
  - mm: migrate: fix THP's mapcount on isolation
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  - enable CONFIG_BPF_LSM option by default to use safegurad
  - ata: libata-core: Fix null pointer dereference on error
  - drm/amd/display: Check index msg_id before read or write
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - Fix error kernel provides


author: Li Nan <linan122@huawei.com> - 5.10.0-231.0.0.130
changelog:
  - !11964  drm/amd/pm: Fix negative array index read
  - !12073  kprobes: Fix deadlock issue with kmemleak
  - !12062  CVE-2024-46857
  - kprobes: Fix deadlock issue with kmemleak
  - !12050  um: line: always fill *error_out in setup_one_line()
  - !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
  - !12020  drm/amd/display: Check gpio_id before used as array index
  - !12024  ASoC: meson: axg-card: fix 'use-after-free'
  - !12034  ksmbd: discard write access to the directory open
  - !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !11942  sbitmap: backport bugfix patches
  - net/mlx5: Fix bridge mode operations when there are no VFs
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
  - !11998  drm/amd/display: Add array index check for hdcp ddc access
  - !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
  - um: line: always fill *error_out in setup_one_line()
  - !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !12015  perf/x86/intel: Limit the period on Haswell
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !12028  Fix CVE-2024-44958 for olk-5.10
  - !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
  - !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
  - ksmbd: discard write access to the directory open
  - serial: sc16is7xx: fix invalid FIFO access with special register set
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - sched: Revert fix unbalance sched_smt_present dec/inc
  - ASoC: meson: axg-card: fix 'use-after-free'
  - drm/amd/display: Check gpio_id before used as array index
  - !11999  nvmet-tcp: fix kernel crash if commands allocation fails
  - perf/x86/intel: Limit the period on Haswell
  - !12006 v3  add steal_task for cgroup
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - sched/core: Add mutex lock to protect steal_task
  - sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
  - sched/fair: Set the maximum number of steal attempts
  - sched/fair: Count the number of tasks marked as steal_task on cfs_rq
  - sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
  - sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
  - sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
  - Revert "sched: add mutex lock to protect qos_level"
  - !11907  ksmbd: unset the binding mark of a reused connection
  - drm/amd/display: Assign linear_pitch_alignment even for VM
  - nvmet-tcp: fix kernel crash if commands allocation fails
  - drm/amd/display: Add array index check for hdcp ddc access
  - !11976  CVE-2024-46814
  - !11941  usb: typec: ucsi: Fix null pointer dereference in trace
  - !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - drm/amd/display: Check msg_id before processing transcation
  - drm/amd/pm: Fix negative array index read
  - Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
  - !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - !11916  ethtool: check device is present when getting link settings
  - !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - !11928  Some bug fix patches for OLK-5.10 hns RoCE
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - blk-mq: Fix potential io hung for shared sbitmap per tagset
  - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  - sbitmap: fix lockup while swapping
  - sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
  - sbitmap: fix possible io hung due to lost wakeup
  - block: Fix lockdep warning in blk_mq_mark_tag_wait
  - blk-mq: fix potential io hang by wrong 'wake_batch'
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang
  - blk-mq: fix tag_get wait task can't be awakened
  - usb: typec: ucsi: Fix null pointer dereference in trace
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - RDMA/hns: Fix restricted __le16 degrades to integer issue
  - RDMA/hns: Optimize hem allocation performance
  - btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11925  nilfs2: protect references to superblock parameters exposed in sysfs
  - !11914  sched: fix a deadlock in task_net_group()
  - !11843  CVE-2024-46771
  - RDMA/hns: Fix ah error counter in sw stat not increasing
  - Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
  - RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
  - RDMA/hns: Use one CQ bank per context for HIP09
  - RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - ethtool: check device is present when getting link settings
  - !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
  - !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
  - !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
  - !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - sched: fix a deadlock in task_net_group()
  - !11867  pktgen: use cpus_read_lock() in pg_net_init()
  - !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - ksmbd: unset the binding mark of a reused connection
  - !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11903  scsi: aacraid: Fix double-free on probe failure
  - !11875  btrfs: handle errors from btrfs_dec_ref() properly
  - scsi: aacraid: Fix double-free on probe failure
  - !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - bcache: fix variable length array abuse in btree_iter
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !11881  PCI: Add missing bridge lock to pci_bus_lock()
  - !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
  - !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - !11866 v2  drm/amd/display: Ensure index calculation will not overflow
  - !11791  nilfs2: fix missing cleanup on rollforward recovery error
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - PCI: Add missing bridge lock to pci_bus_lock()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - !11767 [sync] PR-11733:  Input: MT - limit max slots
  - !11847  bpf: verifier: prevent userspace memory access
  - !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - pktgen: use cpus_read_lock() in pg_net_init()
  - drm/amd/display: Ensure index calculation will not overflow
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11494  ext4: Fix race in buffer_head read fault injection
  - !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - !11673  netem: fix return value if duplicate enqueue fails
  - !11810  apparmor: fix possible NULL pointer dereference
  - !11805  drm/amdgpu: Fix out-of-bounds write warning
  - !11678  udf: Avoid excessive partition lengths
  - !11680  binder: fix UAF caused by offsets overwrite
  - !11784  perf/x86: Serialize set_attr_rdpmc()
  - !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - bpf: verifier: prevent userspace memory access
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
  - !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - apparmor: fix possible NULL pointer dereference
  - drm/amdgpu: Fix out-of-bounds write warning
  - modify for ICSL.
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - nilfs2: fix missing cleanup on rollforward recovery error
  - perf/x86: Serialize set_attr_rdpmc()
  - !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
  - !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - !11752  driver: iio: add missing checks on iio_info's callback access
  - !11773  A group of optimization and bug fix for numa-affinity
  - mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
  - mm: numa-affinity: adapt for task_numa_placement
  - mm: numa-affinity: adapt for should_numa_migrate_memory
  - mm: numa-affinity: add helper numa_affinity_sampling_enabled()
  - mm: thp: support to control numa migration
  - Input: MT - limit max slots
  - driver: iio: add missing checks on iio_info's callback access
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - binder: fix UAF caused by offsets overwrite
  - udf: Avoid excessive partition lengths
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - netem: fix return value if duplicate enqueue fails
  - ext4: Fix race in buffer_head read fault injection


author: Li Nan <linan122@huawei.com> - 5.10.0-232.0.0.131
changelog:
  - !12102  Fix CVE-2024-46826
  - !12219 v7  xfs: some fix for forcealign
  - !12121  CVE-2024-43855
  - !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
  - xfs: correct the truncate blocksize of forcealign
  - xfs: refactor the truncating order
  - iomap: pass blocksize to iomap_truncate_page()
  - math64: add rem_u64() to just return the remainder
  - xfs: only bunmap align in datafork for forcealign
  - xfs: forcealign not compatible with reflink and realtime device
  - xfs: simplify extent allocation alignment
  - xfs: don't attempting non-aligned fallbacks alloc for forcealign
  - xfs: Don't revert allocated offset for forcealign
  - xfs: align args->minlen for forced allocation alignment
  - xfs: always tail align maxlen allocations
  - xfs: only allow minlen allocations when near ENOSPC
  - !12136 Backport some SAS patches to OLK-5.10
  - !12215  net/hinic3: fix version showed in ethtool
  - !12166  crypto: stm32/cryp - call finalize with bh disabled
  - !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
  - net/hinic3: fix version showed in ethtool
  - !12142  nfc: pn533: Add poll mod list filling check
  - !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
  - atm: idt77252: prevent use after free in dequeue_rx()
  - !12172  fou: remove warn in gue_gro_receive on unsupported protocol
  - !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - ima: Avoid blocking in RCU read-side critical section
  - Revert "ima: Avoid blocking in RCU read-side critical section"
  - !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12133  ALSA: line6: Fix racy access to midibuf
  - fou: remove warn in gue_gro_receive on unsupported protocol
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - crypto: stm32/cryp - call finalize with bh disabled
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
  - !12126  ice: Add netif_device_attach/detach into PF reset flow
  - !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12135 Backport 5.10.217 LTS patches from upstream
  - regulator: core: fix debugfs creation regression
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - mei: me: add lunar lake point M DID
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio:imu: adis16475: Fix sync mode setting
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: composite: fix OS descriptors w_value logic
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - kcov: Remove kcov include from sched.h and move it to its users.
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - net:usb:qmi_wwan: support Rolling modules
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - 9p: explicitly deny setlease attempts
  - fs/9p: translate O_TRUNC into OTRUNC
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Fix added raw MSR output
  - ata: sata_gemini: Check clk_enable() result
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - net: gro: add flush check in udp_gro_receive_segment
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: Fix 7/8 spaces indentation in Kconfig
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - nfc: pn533: Add poll mod list filling check
  - arm64/mpam: Be compatible with MPAM architecture v1.x
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - scsi: libsas: Set port when ex_phy is added or deleted
  - scsi: libsas: Move sas_add_parent_port() to sas_expander.c
  - scsi: libsas: Add helper for port add ex_phy
  - ALSA: line6: Fix racy access to midibuf
  - sched: sch_cake: fix bulk flow accounting logic for host fairness
  - ice: Add netif_device_attach/detach into PF reset flow
  - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
  - !12043  s390/sclp: Prevent release of buffer in I/O
  - md: ensure child flush IO does not affect origin bio->bi_status
  - md: Remove flush handling
  - !8834 Add support for Hygon model 10h processors
  - !12105  sched/fair: Fix the condition in overload_clear
  - !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - !12003  perf cpumap: Wrapper for CPU map indices
  - !12096  CVE-2024-46858
  - !12095  net: dpaa: Pad packets to ETH_ZLEN
  - !12094  netfilter: nft_socket: fix sk refcount leaks
  - !12089  USB: usbtmc: prevent kernel-usb-infoleak
  - sched/fair: Fix the condition in overload_clear
  - sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - mptcp: pm: Fix uaf in __timer_delete_sync
  - mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
  - mptcp: export lookup_anno_list_by_saddr
  - net: dpaa: Pad packets to ETH_ZLEN
  - netfilter: nft_socket: fix sk refcount leaks
  - !12088  tracing: Have tracing_max_latency inc the trace array ref count
  - USB: usbtmc: prevent kernel-usb-infoleak
  - tracing: Have tracing_max_latency inc the trace array ref count
  - !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - !12084  drm/i915/gt: Cleanup partial engine discovery failures
  - !12048  Add generic xdp xsk multi-buffer recv for ipvlan
  - !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
  - !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - drm/i915/gt: Cleanup partial engine discovery failures
  - !11558  mm/ksm: fix possible UAF of stable_node
  - !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - xsk: Add generic xdp multi-buffer recv support
  - ipvlan: support use xdp native mode
  - s390/dasd: fix error recovery leading to data corruption on ESE devices
  - s390/sclp: Prevent release of buffer in I/O
  - perf cpumap: Wrapper for CPU map indices
  - UNIC: The ublhdr structure and UBL_HLEN macro are modified
  - UNIC: Invoke the hns3_unic_set_default_cc in advance
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - x86/amd_nb: Get DF ID for Hygon family 18h model 7h
  - mm/ksm: fix possible UAF of stable_node


author: Li Nan <linan122@huawei.com> - 5.10.0-233.0.0.132
changelog:
  - !12315 perf pmu: resolve CPU map for "cpu" PMUs
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - !12072 sdma-dae: fix possible mremap error
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - Revert "perf cpumap: Add is_subset function"
  - Revert "perf cpumap: Add intersect function"
  - Revert "perf pmu: Add CPU map for "cpu" PMUs"
  - Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
  - !12298  CVE-2024-46822
  - drivers:misc:sdma-dae: add vma_ops to avoid mremap error
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header
  - !12261  drm/lima: fix a memleak in lima_heap_alloc
  - !12262  media: go7007: fix a memleak in go7007_load_encoder
  - !12257  octeontx2-af: Use separate handlers for interrupts
  - !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - !12244 v2  net/mlx5e: Fix netif state handling
  - !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
  - media: go7007: fix a memleak in go7007_load_encoder
  - drm/lima: fix a memleak in lima_heap_alloc
  - octeontx2-af: Use separate handlers for interrupts
  - !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12164 Backport 5.10.218 LTS patches from upstream
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12155  bonding: Fix CVE-2024-44990
  - !12153  bonding: fix xfrm real_dev null pointer dereference
  - !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
  - xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !12115  md/raid1: don't free conf on raid0_run failure
  - !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - net/mlx5e: Fix netif state handling
  - !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
  - !12182  netns: Make get_net_ns() handle zero refcount net
  - !12179  net/sched: Fix CVE-2024-36244
  - !12176  ipv6: sr: fix invalid unregister error path
  - !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
  - !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - !12213  scsi: qla2xxx: During vport delete send async logout explicitly
  - !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - !12227  nbd: Fix signal handling
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12208  Some bugfixs for ubi/fs
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - !11910  ext4: dax: Fix inconsistent isize during writing
  - !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - locks: fix TOCTOU race when granting write lease
  - ubi: block: fix null-pointer-dereference in ubiblock_create()
  - ubi: block: Remove in vain semicolon
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - netns: Make get_net_ns() handle zero refcount net
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
  - ipv6: sr: fix invalid unregister error path
  - docs: kernel_include.py: Cope with docutils 0.21
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - bonding: fix null pointer deref in bond_ipsec_offload_ok
  - bonding: fix bond_ipsec_offload_ok return type
  - bonding: fix xfrm real_dev null pointer dereference
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - md/raid1: don't free conf on raid0_run failure
  - blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - ext4: dax: keep orphan list before truncate overflow allocated blocks
  - ext4: dax: fix overflowing extents beyond inode size when partially writing
  - gpio: prevent potential speculation leaks in gpio_device_get_desc()


author: Li Nan <linan122@huawei.com> - 5.10.0-234.0.0.133
changelog:
  - !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12248  nilfs2: fix state management in error path of log writing function
  - !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
  - !12640  sock_map: Add a cond_resched() in sock_hash_free()
  - !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - !12639  net: do not delay dst_entries_add() in dst_release()
  - !12621  apparmor: fix policy_unpack_test on big endian systems
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
  - !12611  drm/amd/display: Check null pointer before dereferencing se
  - !12596  scsi: fnic: Move flush_work initialization out of if block
  - !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12615  writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !12620  PCI: mt7621: Add sentinel to quirks table
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - sock_map: Add a cond_resched() in sock_hash_free()
  - net: do not delay dst_entries_add() in dst_release()
  - !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - apparmor: fix policy_unpack_test on big endian systems
  - !12571 v2  Randomized Kmalloc 5.10 Backport V2
  - PCI: mt7621: Add sentinel to quirks table
  - !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
  - !12605  fix CVE-2024-46802
  - !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !8925  ext4: avoid deadlock in fs reclaim with page writeback
  - drm/amd/display: Check null pointer before dereferencing se
  - !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
  - !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12460  NFSD: Limit the number of concurrent async COPY operations
  - !12560  fix CVE-2024-49900
  - !12569  fix CVE-2024-47667
  - drm/amd/display: fix mixed declarations warning
  - drm/amd/display: added NULL check at start of dc_validate_stream
  - !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - scsi: fnic: Move flush_work initialization out of if block
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - Randomized slab caches for kmalloc()
  - mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
  - !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - !12424  jfs: check if leafidx greater than num leaves per dmap tree
  - !12425  jfs: Fix uaf in dbFreeBits
  - !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  - !12542  media: pci: cx23885: check cx23885_vdev_init() return
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - !12369  x86/ioapic: Handle allocation failures gracefully
  - media: pci: cx23885: check cx23885_vdev_init() return
  - kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - !12511  jfs: Fix array-index-out-of-bounds in diFree
  - !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
  - !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
  - !12252  KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - !12382  fix CVE-2024-46675
  - !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - !12467  fix CVE-2024-42301
  - !12310  fix CVE-2024-40965
  - !12484  CVE-2024-38667
  - !12480  CVE-2024-36286
  - !12454  soundwire: cadence: fix invalid PDI offset
  - jfs: Fix array-index-out-of-bounds in diFree
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12411  CVE-2024-43894
  - riscv: prevent pt_regs corruption for secondary idle threads
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
  - !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - parport: Proper fix for array out-of-bounds access
  - dev/parport: fix the array out-of-bounds risk
  - drm/amd/display: Initialize get_bytes_per_element's default to 1
  - NFSD: Limit the number of concurrent async COPY operations
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - soundwire: cadence: fix invalid PDI offset
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
  - !12395  tracing/timerlat: Fix a race during cpuhp processing
  - !12406  fix CVE-2024-43841
  - jfs: Fix uaf in dbFreeBits
  - jfs: check if leafidx greater than num leaves per dmap tree
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - drm/client: fix null pointer dereference in drm_client_modeset_probe
  - wifi: virt_wifi: don't use strlen() in const context
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - tracing/timerlat: Fix a race during cpuhp processing
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - !12349  neighbour: fix data-races around n->output
  - !12294  nfsd: return -EINVAL when namelen is 0
  - x86/ioapic: Handle allocation failures gracefully
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
  - !12344  of: module: prevent NULL pointer dereference in vsnprintf()
  - !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - !12334  drm/nouveau: prime: fix refcount underflow
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - neighbour: fix data-races around n->output
  - !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
  - !12332 hns3 udma: delete irrl and trrl table
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - hns3 udma: delete irrl and trrl table.
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - drm/nouveau: prime: fix refcount underflow
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  - nfsd: call cache_put if xdr_reserve_space returns NULL
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
  - i2c: imx-lpi2c: use bulk clk API
  - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
  - clk: Add a devm variant of clk_rate_exclusive_get()
  - soc: qcom: cmd-db: Map shared memory as WC, not WB
  - nfsd: return -EINVAL when namelen is 0
  - blk-mq: fix blk_mq_hw_ctx active request accounting
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - nilfs2: fix state management in error path of log writing function
  - mptcp: pm: only decrement add_addr_accepted for MPJ req
  - ext4: avoid deadlock in fs reclaim with page writeback


author: Li Nan <linan122@huawei.com> - 5.10.0-235.0.0.134
changelog:
  - !13009  CVE-2024-49950
  - !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
  - !13003  CVE-2024-50064
  - !13051  ext4: fix CVE-2024-47701
  - !12680  smb: client: fix UAF in async decryption
  - !13039  static_call: Handle module init failure correctly in static_call_del_module()
  - !13017  f2fs: fix to wait dio completion
  - !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - !13015  drm/amd/display: Check stream before comparing them
  - !13019  l2tp: prevent possible tunnel refcount underflow
  - !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - !12992  igb: Do not bring the device up after non-fatal error
  - !12994  drm/amd/display: Check BIOS images before it is used
  - !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
  - !12901  ext4: fix double brelse() the buffer of the extents path
  - !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
  - !12958  ext4: update orig_path in ext4_find_extent()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - !12449  scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - l2tp: prevent possible tunnel refcount underflow
  - f2fs: fix to wait dio completion
  - !12884  CVE-2024-50016
  - !12844  ACPI: sysfs: validate return type of _STR method
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - drm/amd/display: Check stream before comparing them
  - !12998  f2fs: get rid of online repaire on corrupted directory
  - !12911  fsnotify: fix CVE-2024-47660
  - !12908  io_uring: fix CVE-2024-50060
  - !12879  drm/stm: Avoid use-after-free issues with crtc and plane
  - !12915  CVE-2022-48961
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - !12944  fix CVE-2024-47723
  - !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12954  memcg_write_event_control(): fix a user-triggerable oops
  - !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - !12870  Fix CVE-2024-47703
  - !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
  - zram: don't free statically defined names
  - zram: free secondary algorithms names
  - [Backport]scsi: libsas: Fix disk not being scanned in after being removed
  - [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
  - f2fs: get rid of online repaire on corrupted directory
  - [Backport]scsi: libsas: Introduce struct smp_disc_resp
  - !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
  - !12686  security/keys: fix slab-out-of-bounds in key_task_permission
  - drm/amd/display: Check BIOS images before it is used
  - igb: Do not bring the device up after non-fatal error
  - !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
  - !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - !12875  tipc: guard against string buffer overrun
  - ext4: update orig_path in ext4_find_extent()
  - memcg_write_event_control(): fix a user-triggerable oops
  - !12781  uprobes: fix kernel info leak via "[uprobes
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
  - jfs: Fix sanity check in dbMount
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  - !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gpiolib: fix memory leak in gpiochip_setup_dev()
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12790  slip: make slhc_remember() more robust against malicious packets
  - !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
  - !12737  r8169: add tally counter fields added with RTL8125
  - !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - !12778  riscv: Sync efi page table's kernel mappings before switching
  - !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
  - net: mdio: use device_set_node() to setup both fwnode and of
  - fsnotify: clear PARENT_WATCHED flags lazily
  - fsnotify: remove unused declaration
  - fsnotify: Fix comment typo
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - UNIC: Eliminate compile warnings
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - tipc: guard against string buffer overrun
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - !12525  powercap: intel_rapl: Fix off by one in get_rpi()
  - !12818  media: venus: fix use after free bug in venus_remove due to race condition
  - !12825  drm/amd/display: Check null pointers before using them
  - !12798  uprobe: avoid out-of-bounds memory access of fetching args
  - ACPI: sysfs: validate return type of _STR method
  - !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12754  CVE-2024-50063
  - !12488  gtp: fix a potential NULL pointer dereference
  - !12762  smack: tcp: ipv4, fix incorrect labeling
  - drm/amd/display: Check null pointers before using them
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - media: venus: fix use after free bug in venus_remove due to race condition
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - uprobe: avoid out-of-bounds memory access of fetching args
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - slip: make slhc_remember() more robust against malicious packets
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - riscv: Sync efi page table's kernel mappings before switching
  - hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - !12551  cifs: Fix buffer overflow when parsing NFS reparse points
  - !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12723  ppp: fix ppp_async_encode() illegal access
  - smack: tcp: ipv4, fix incorrect labeling
  - !12733  CVE-2024-50059
  - !12373  fix CVE-2024-49954
  - !12705  fix CVE-2024-49924
  - !12517  fix CVE-2024-47742
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - selftests/bpf: Add test for lsm tail call
  - bpf: Prevent tail call between progs attached to different hooks
  - !12665 v2  CVE-2024-49955
  - !12685  block: fix potential invalid pointer dereference in blk_add_partition
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12697  mm: memcg: don't periodically flush stats when memcg is disabled
  - !12694  crypto: xor - fix template benchmarking
  - !12701  vhost_vdpa: assign irq bypass producer token correctly
  - r8169: add tally counter fields added with RTL8125
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - ppp: fix ppp_async_encode() illegal access
  - !12678  CVE-2024-47673
  - !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - vhost_vdpa: assign irq bypass producer token correctly
  - !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - !12667  randomize_kstack: Improve entropy diffusion
  - !12668  selinux: fix potential counting error in avc_add_xperms_decision()
  - !12499  nbd: fix race between timeout and normal completion
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - !12610  blk_iocost: fix more out of bound shifts
  - crypto: xor - fix template benchmarking
  - crypto: xor - Fix typo of optimization
  - !12633  ALSA: asihpi: Fix potential OOB array access
  - !12354 Backport important bugfix from the kernel-5.10.y
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - block: fix potential invalid pointer dereference in blk_add_partition
  - smb: client: fix UAF in async decryption
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  - iwlwifi: mvm: move iwl_mvm_stop_device() out of line
  - IB/core: Fix ib_cache_setup_one error flow cleanup
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - randomize_kstack: Improve entropy diffusion
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  - ALSA: asihpi: Fix potential OOB array access
  - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - blk_iocost: fix more out of bound shifts
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - powercap: intel_rapl: Fix off by one in get_rpi()
  - firmware_loader: Block path traversal
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - scsi: fix kabi broken
  - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - scsi: mpt3sas: Remove scsi_dma_map() error messages


author: Li Nan <linan122@huawei.com> - 5.10.0-236.0.0.135
changelog:
  - !13186  virtio_pmem: Check device status before requesting flush
  - !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13146  arm64: probes: Remove broken LDR (literal) uprobe support
  - !13167  CVE-2024-50133
  - !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
  - !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - virtio_pmem: Check device status before requesting flush
  - arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - cgroup: add cgroup_root_ext to keep kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !13144 v2  tracing: Consider the NULL character when validating the event length
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - tracing: Consider the NULL character when validating the event length
  - !13125 v7  mm: support poison recover for more
  - mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
  - arm64: send sig fault for user task when apei_claim_sea fails
  - arm64: mm: Add copy mc support for all migrate_page
  - mm: support poison recovery from do_cow_fault()
  - mm: support poison recovery from copy_present_page()
  - mm: hwpoison: support recovery from HugePage copy-on-write faults
  - make copy_[user]_highpage_mc have return value
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !12974  ext4: fix timer use-after-free on failed mount
  - !12976  : ext4: no need to continue when the number of entries is 1
  - !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - !12970  exfat: fix memory leak in exfat_load_bitmap()
  - !12972  ext4: fix access to uninitialised lock in fc replay path
  - !13094  RDMA/hns: Fix DCA mmap area PUAF
  - !12973  vfs: fix race between evice_inodes() and find_inode()&iput()
  - PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
  - !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13101  thunderbolt: Mark XDomain as unplugged when router is removed
  - !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - !13103  CVE-2024-49878
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - thunderbolt: Mark XDomain as unplugged when router is removed
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - RDMA/hns: Fix DCA mmap area PUAF
  - !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13067  Fix UAF of rpc_task
  - bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - !12996 【OLK-5.10】Support SMT control on arm64
  - network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - !13054  net: add more sanity checks to qdisc_pkt_len_init()
  - !13048 sdma-dae: add ida validation
  - !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - NFSv4: release seqid when open failed for nfs4.0
  - drivers:misc:sdma-dae: add channel ida validation
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - net: add more sanity checks to qdisc_pkt_len_init()
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - arch_topology: Support basic SMT control for the driver
  - cpu/SMT: Store the current/max number of threads
  - cpu/SMT: Move SMT prototypes into cpu_smt.h
  - ext4: no need to continue when the number of entries is 1
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix timer use-after-free on failed mount
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ext4: fix access to uninitialised lock in fc replay path
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - exfat: fix memory leak in exfat_load_bitmap()
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]


author: Li Nan <linan122@huawei.com> - 5.10.0-237.0.0.136
changelog:
  - !13310  fs/ntfs3: Additional check in ni_clear()
  - !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
  - !13344  mm,hwpoison: check mm when killing accessing process
  - mm,hwpoison: check mm when killing accessing process
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - !13318 Fix objtool error for AMX instruction decoding
  - !13196  fs/ntfs3: Additional check in ntfs_file_release
  - !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
  - !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
  - !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
  - !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
  - !13276  mailbox: bcm2835: Fix timeout during suspend mode
  - !13294 sdma-dae: change authority of debugfs
  - x86/insn: Add AMX instructions to the x86 instruction decoder
  - !13277  CVE-2023-52920
  - fs/ntfs3: Additional check in ni_clear()
  - !13227  fs/ntfs3: Add rough attr alloc_size check
  - !13225  fs/ntfs3: Check if more than chunk-size bytes are written
  - !13226  fs/ntfs3: Fix possible deadlock in mi_read
  - !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
  - !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13194  fix CVE-2024-50115
  - bpf, arm64: Fix address emission with tag-based KASAN enabled
  - driver:misc:sdma:change authority of sdma device
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - !13178  bpf: Use raw_spinlock_t in ringbuf
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking
  - bpf: mostly decouple jump history management from is_state_visited()
  - bpf: encapsulate precision backtracking bookkeeping
  - bpf: decouple prune and jump points
  - mailbox: bcm2835: Fix timeout during suspend mode
  - !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - platform/x86/intel/ifs: Initialize union ifs_status to zero
  - platform/x86/intel/ifs: release cpus_read_lock()
  - platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - !13221  aoe: fix the potential use-after-free problem in more places
  - !13239  scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13255  RDMA/hns: Fix the valid QP bank set to improve performance
  - RDMA/hns: Fix the valid QP bank set to improve performance
  - !12858 intel: backport GNR and SRF intel_idle fix for 5.10
  - !12154 v2  netfilter: flowtable: initialise extack before use
  - !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
  - !13212 v7  arm64: support page mapping percpu first chunk allocator
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - aoe: fix the potential use-after-free problem in more places
  - !13080  serial: core: Fix atomicity violation in uart_tiocmget
  - !13073  selinux: clarify return code in filename_trans_read_helper_compat()
  - !13128  drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
  - arm64: support page mapping percpu first chunk allocator
  - vmalloc: choose a better start address in vm_area_register_early()
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - serial: core: Fix atomicity violation in uart_tiocmget
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
  - intel_idle: Add a new flag to initialize the AMX state
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - netfilter: flowtable: initialise extack before use
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support


author: Li Nan <linan122@huawei.com> - 5.10.0-238.0.0.137
changelog:
  - !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13458  io_uring: fix CVE-2024-53052
  - !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
  - !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
  - !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
  - !13829  fix CVE-2024-50192
  - !13414  sched/topology: Prevent race condition in sched_domain topology
  - !13411  udf: fix uninit-value use in udf_get_fileshortad
  - !13800  media: av7110: fix a spectre vulnerability
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  - !13823 [HNS3]Add the reliability check of guid_tbl_space
  - !13448 bugfix of nfs
  - !13403 some bugfix of ksmbd smb2_open()
  - HNS3: Add the reliability check of guid_tbl_space.
  - !13418  btrfs: reinitialize delayed ref list after deleting it from the list
  - !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - !13419  media: s5p-jpeg: prevent buffer overflows
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13793  nilfs2: fix potential deadlock with newly created symlinks
  - !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - !13797  drm/amd/display: Initialize denominators' default to 1
  - !13792  CVE-2024-43817
  - media: av7110: fix a spectre vulnerability
  - drm/amd/display: Initialize denominators' default to 1
  - !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
  - !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nilfs2: fix potential deadlock with newly created symlinks
  - !13319  unicode: Don't special case ignorable code points
  - net: tighten bad gso csum offset check in virtio_net_hdr
  - udp: fix receiving fraglist GSO packets
  - net: drop bad gso csum_start and offset in virtio_net_hdr
  - gso: fix dodgy bit handling for GSO_UDP_L4
  - !13379  fbdev: sisfb: Fix strbuf array overflow
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - io_uring: use kiocb_{start,end}_write() helpers
  - fs: create kiocb_{start,end}_write() helpers
  - io_uring: rename kiocb_end_write() local helper
  - !13441  RDMA/cxgb4: Added NULL check for lookup_atid
  - !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - !13356  NFSD: Initialize struct nfsd4_copy earlier
  - NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - RDMA/cxgb4: Added NULL check for lookup_atid
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - netfilter: br_netfilter: fix panic with metadata_dst skb
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - media: s5p-jpeg: prevent buffer overflows
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - sched/topology: Prevent race condition in sched_domain topology
  - udf: fix uninit-value use in udf_get_fileshortad
  - ksmbd: fix return value of smb2_open()
  - !13303 v2  fix CVE-2024-50141
  - !13387  usb: musb: sunxi: Fix accessing an released usb phy
  - ksmbd: fix possible refcount leak in smb2_open()
  - !13392  CVE-2024-47745
  - !13371  CVE-2024-46713
  - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  - ntfs3: Add bounds checking to mi_enum_attr()
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - remap_file_pages: Use vma_lookup() instead of find_vma()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - usb: musb: sunxi: Fix accessing an released usb phy
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - fbdev: sisfb: Fix strbuf array overflow
  - !13323 [sync] PR-13302:  CVE-2024-50195
  - perf: Fix kabi problem by put mutex in front of perf_buffer
  - perf/aux: Fix AUX buffer serialization
  - NFSD: Initialize struct nfsd4_copy earlier
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - unicode: Don't special case ignorable code points
  - ACPI: PRM: Clean up guid type in struct prm_handler_info
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
  - RDMA/hns: Modify debugfs name
  - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*


author: Li Nan <linan122@huawei.com> - 5.10.0-239.0.0.138
changelog:
  - !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !10939  filelock: Correct the file lock owner in fcntl_setlk64
  - !11339  Fix xfs fsmap error
  - !11338  xfs: fix log recovery when unknown rocompat bits are set
  - !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
  - hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
  - !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
  - !14014  *** CVE-2024-53063 ***
  - !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - !13337  fix CVE-2024-50135
  - !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
  - !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - !13936  wifi: rtw88: always wait for both firmware loading attempts
  - !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - !13934  net/sched: accept TCA_STAB only for root qdisc
  - !13933  net: ethernet: lantiq_etop: fix memory disclosure
  - !13932  net: Fix an unsafe loop on the list
  - !13931  net: stmmac: Fix zero-division error when disabling tc cbs
  - !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
  - ipvlan: fix UAF after skb has been consume by xdp generic
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  - media: dvbdev: prevent the risk of out of memory access
  - !13839  afs: Fix lock recursion
  - !13860 [2024.12.2]bugfix rdma to OLK-5.10
  - !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - !13921  wifi: ath10k: Fix memory leak in management tx
  - !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13967  bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13966  blk-mq/scsi: tracking device queue depth via sbitmap
  - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13964 v3  arm64: mm: Stop use spinlock during pbha early init
  - scsi: core: Increase max device queue_depth to 4096
  - sbitmap: fix kabi broken in struct scsi_device
  - sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
  - sbitmap: fix kabi broken by adding struct sbitmap_extend
  - scsi: core: Fix scsi_device_max_queue_depth()
  - scsi: blk-mq: Fix build warning when making htmldocs
  - scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
  - scsi: core: Replace sdev->device_busy with sbitmap
  - scsi: core: Make sure sdev->queue_depth is <= max(shost->can_queue, 1024)
  - scsi: core: Add scsi_device_busy() wrapper
  - scsi: megaraid_sas: Replace sdev_busy with local counter
  - scsi: blk-mq: Return budget token from .get_budget callback
  - scsi: blk-mq: Add callbacks for storing & retrieving budget token
  - scsi: sbitmap: Add sbitmap_calculate_shift() helper
  - scsi: sbitmap: Export sbitmap_weight
  - scsi: sbitmap: Move allocation hint into sbitmap
  - scsi: sbitmap: Add helpers for updating allocation hint
  - scsi: sbitmap: Maintain allocation round_robin in sbitmap
  - sbitmap: optimise sbitmap_deferred_clear()
  - scsi: sbitmap: Remove sbitmap_clear_bit_unlock
  - arm64: mm: Stop use spinlock during pbha early init
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !13802  pinctrl: ocelot: fix system hang on level based interrupts
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - wifi: rtw88: always wait for both firmware loading attempts
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - net/sched: accept TCA_STAB only for root qdisc
  - net: ethernet: lantiq_etop: fix memory disclosure
  - net: Fix an unsafe loop on the list
  - net: stmmac: Fix zero-division error when disabling tc cbs
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - wifi: ath11k: fix array out-of-bound access in SoC stats
  - wifi: ath10k: Fix memory leak in management tx
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13890  ipmi: Use regspacings passed as a module parameter
  - !13898  drm/amd/display: Check link_index before accessing dc->links[
  - !13905  NFSD: Never decrement pending_async_copies on error
  - NFSD: Never decrement pending_async_copies on error
  - !13887  CVE-2024-49891
  - !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
  - !13881  RDMA/bnxt_re: Add a check for memory allocation
  - drm/amd/display: Check link_index before accessing dc->links[]
  - !13878  Fix problems of mounting nfs
  - ipmi: Use regspacings passed as a module parameter
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
  - !13854  CVE-2024-53059
  - !13853  sctp: properly validate chunk size in sctp_sf_ootb()
  - RDMA/bnxt_re: Add a check for memory allocation
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - wifi: iwlegacy: Clear stale interrupts before resuming device
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - RDMA/hns: Fix cpu stuck caused by printings during reset
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - mac80211: always have ieee80211_sta_restart()
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
  - mac80211: Add support to trigger sta disconnect on hardware restart
  - mac80211: do drv_reconfig_complete() before restarting all
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - afs: Fix lock recursion
  - pinctrl: ocelot: fix system hang on level based interrupts
  - nvme-pci: fix race condition between reset and nvme_dev_disable()
  - nvme-pci: refactor the tagset handling in nvme_reset_work
  - nvme-pci: split nvme_dev_add
  - xfs: Fix missing interval for missing_owner in xfs fsmap
  - drivers: update Yunsilicon driver to version 2406_rc16.2
  - xfs: fix an agbno overflow in __xfs_getfsmap_datadev
  - xfs: fix interval filtering in multi-step fsmap queries
  - xfs: fix log recovery when unknown rocompat bits are set
  - filelock: Correct the file lock owner in fcntl_setlk64


author: Li Nan <linan122@huawei.com> - 5.10.0-240.0.0.139
changelog:
  - !14129  bus: integrator-lm: fix OF node leak in probe()
  - !14132 v2  ACPI: APEI: handle synchronous errors in task work
  - !14046  smb: client: Fix use-after-free of network namespace.
  - ACPI: APEI: handle synchronous exceptions in task work
  - mm: memory-failure: move return value documentation to function declaration
  - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
  - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
  - !13903  Script execution control
  - !14119  bpf: sync_linked_regs() must preserve subreg_def
  - bus: integrator-lm: fix OF node leak in probe()
  - !14124  media: cx24116: prevent overflows on SNR calculus
  - !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
  - media: cx24116: prevent overflows on SNR calculus
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - bpf: sync_linked_regs() must preserve subreg_def
  - !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
  - !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - !14086  ocfs2: uncache inode which has failed entering the group
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13401 IMA: Fix hungtask issue of digestlist importing
  - !14033  fix CVE-2024-50278
  - !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14092  USB: serial: io_edgeport: fix use after free in debug printk
  - !14064  vp_vdpa: fix id_table array not null terminated error
  - !14073  HID: core: zero-initialize the report buffer
  - !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - !14062  CVE-2024-53054
  - !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - !14054  net: sched: fix use-after-free in taprio_change()
  - !14006  filemap: Fix bounds checking in filemap_read()
  - !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - !14009  drm/vc4: Stop the active perfmon before being destroyed
  - !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - USB: serial: io_edgeport: fix use after free in debug printk
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - ocfs2: uncache inode which has failed entering the group
  - !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - HID: core: zero-initialize the report buffer
  - vp_vdpa: fix id_table array not null terminated error
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  - Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
  - !13327 cpufreq: Add SEEP governor for hardware-managed P-states
  - !13995  drm/radeon: Fix encoder->possible_clones
  - !13948  fix CVE-2024-49906
  - cpufreq: Add SEEP governor for hardware-managed P-states
  - !13988  CVE-2024-49861
  - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
  - ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14043 v2  CVE-2024-40927
  - !14041 sdma-dae: bugfix of channel operation
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - net: sched: fix use-after-free in taprio_change()
  - smb: client: Fix use-after-free of network namespace.
  - Support for auto_act_window and energy_perf in cppc_cpufreq
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - xhci: Handle TD clearing for multiple streams case
  - xhci: Fix failure to give back some cached cancelled URBs.
  - xhci: introduce a new move_dequeue_past_td() function to replace old code.
  - xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
  - xhci: fix giving back URB with incorrect status regression in 5.12
  - xhci: split handling halted endpoints into two steps
  - xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
  - drivers:misc:sdma-dae: bugfix of channel operation
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - ACPI: CPPC: Add three register ABIs
  - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - drm/vc4: Stop the active perfmon before being destroyed
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - filemap: Fix bounds checking in filemap_read()
  - drm/radeon: Fix encoder->possible_clones
  - bpf: Fix kabi breakage in enum bpf_type_flag
  - selftests/bpf: Rename ARG_PTR_TO_LONG test description
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix helper writes to read-only maps
  - bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - bpf: Allow helpers to accept pointers with a fixed size
  - bpf: Add MEM_UNINIT as a bpf_type_flag
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - fix kabi breakage due to exec is_check
  - IMA support script execution check
  - exec: Add a new AT_CHECK flag to execveat(2)
  - uselib: remove use of __FMODE_EXEC
  - exec: Check __FMODE_EXEC instead of in_execve for LSMs
  - execve: open the executable file before doing anything else
  - platform/x86/intel/pmt: telemetry: Export API to read telemetry
  - platform/x86/intel/pmt: Add header to struct intel_pmt_entry
  - platform/x86/intel/tpmi: Add additional TPMI header fields
  - platform/x86/intel/tpmi: Align comments in kernel-doc
  - platform/x86/intel/tpmi: Check major version change for TPMI Information
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
  - platform/x86/intel/tpmi: Change vsec offset to u64
  - platform/x86/intel/tpmi: Move TPMI ID definition
  - platform/x86/intel/tpmi: Modify external interface to get read/write state
  - platform/x86/intel/tpmi: Don't create devices for disabled features
  - platform/x86/intel/vsec: Remove nuisance message
  - platform/x86/intel/vsec: Add base address field
  - platform/x86/intel/vsec: Add intel_vsec_register
  - platform/x86/intel/vsec: Assign auxdev parent by argument
  - platform/x86/intel/vsec: remove platform_info from vsec device structure
  - platform/x86/intel/vsec: Move structures to header
  - platform/x86/intel/vsec: Remove unnecessary return
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - IMA: Fix hungtask issue of digestlist importing


author: Li Nan <linan122@huawei.com> - 5.10.0-241.0.0.140
changelog:
  - !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
  - !14145 Intel: backport ISST driver update and bugfix from 6.11
  - !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14193  nfs: fix the loss of superblock's initialized flags
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - nfs: fix the loss of superblock's initialized flags
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14180  xfs: allow inode inactivation during a ro mount log recovery
  - !14149  CVE-2024-53142
  - xfs: allow inode inactivation during a ro mount log recovery
  - !14123  mm: only enforce minimum stack gap size if it's sensible
  - !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
  - !14148 v2  xfs: revert fix patchs about attr inactive
  - initramfs: avoid filename buffer overrun
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
  - platform/x86: ISST: Fix return value on last invalid resource
  - platform/x86: ISST: Use only TPMI interface when present
  - platform/x86: ISST: Avoid some SkyLake server models
  - platform/x86: ISST: Add model specific loading for common module
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
  - !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
  - !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
  - mm: only enforce minimum stack gap size if it's sensible
  - config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
  - platform/x86/intel-uncore-freq: Don't present root domain on error
  - platform/x86/intel-uncore-freq: Increase minor number support
  - platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
  - platform/x86: ISST: Support SST-BF and SST-TF per level
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION
  - platform/x86: ISST: Add dev_fmt
  - platform/x86: ISST: Support partitioned systems
  - platform/x86: ISST: Shorten the assignments for power_domain_info
  - platform/x86: ISST: Use local variable for auxdev->dev
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems
  - platform/x86: ISST: Process read/write blocked feature status
  - EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
  - x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
  - EDAC/amd64: Rework hw_info_{get,put}
  - EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
  - EDAC/amd64: Issue probing messages only on properly detected hardware
  - EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
  - EDAC/amd64: Rename debug_display_dimm_sizes()
  - EDAC/amd64: Remove early_channel_count()
  - EDAC/amd64: Remove PCI Function 0
  - EDAC/amd64: Remove PCI Function 6
  - EDAC/amd64: Remove scrub rate control for Family 17h and later
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
  - x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
  - x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
  - x86/microcode/AMD: Rip out static buffers
  - x86/microcode/AMD: Fix mixed steppings support
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions
  - x86/microcode/AMD: Rename a couple of functions
  - crypto: ccp - Add support for PCI device 0x156E
  - crypto: ccp - Add support for PCI device 0x17E0
  - crypto: ccp - Add support for ringing a platform doorbell
  - crypto: ccp - Enable platform access interface on client PSP parts
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
  - crypto: ccp - Add support for an interface for platform features
  - crypto: ccp - Move some PSP mailbox bit definitions into common header
  - crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
  - crypto: ccp - Add support for new CCP/PSP device ID
  - i2c: designware: Fix improper usage of readl
  - i2c: designware: Add AMD PSP I2C bus support
  - genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
  - iommu/amd: Set iommu->int_enabled consistently when interrupts are set up
  - iommu/amd: Remove useless irq affinity notifier
  - x86/msi: Fix msi message data shadow struct
  - perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
  - perf script ibs: Support new IBS bits in raw trace dump
  - perf tool ibs: Sync AMD IBS header file
  - perf report: Add support to print a textual representation of IBS raw sample data
  - perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
  - perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
  - perf evlist: Use the right prefix for 'struct evlist' raw samples methods
  - perf report: Add tools/arch/x86/include/asm/amd-ibs.h
  - perf header: Record non-CPU PMU capabilities
  - perf inject: Keep some features sections from input file
  - libperf: Add preadn()
  - perf header: Add ability to keep feature sections
  - perf header: Store PMU caps in an array of strings
  - perf header: Pass "cpu" pmu name while printing caps
  - perf header: Support HYBRID_CPU_PMU_CAPS feature
  - perf header: Support HYBRID_TOPOLOGY feature
  - perf pmu: Add hybrid helper functions
  - perf pmu: Save detected hybrid pmus to a global pmu list
  - perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
  - perf pmu: Parse pmu caps sysfs only once
  - perf record ibs: Warn about sampling period skew
  - perf evsel: Make evsel__env() always return a valid env
  - perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
  - perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
  - perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
  - perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
  - perf record: Support new sample type for data page size
  - perf/x86/amd/core: Avoid register reset when CPU is dead
  - perf/x86/amd: Do not WARN() on every IRQ
  - iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
  - iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
  - iommu/amd: Fix union of bitfields in intcapxt support
  - iommu/amd: Use msi_msg shadow structs
  - iommu/intel: Use msi_msg shadow structs
  - x86/msi: Provide msi message shadow structs
  - genirq/msi: Allow shadow declarations of msi_msg:: $member
  - x86/apic: Always provide irq_compose_msi_msg() method for vector domain
  - x86/apic: Cleanup destination mode
  - x86/apic: Get rid of apic:: Dest_logical
  - x86/apic: Replace pointless apic:: Dest_logical usage
  - x86/apic: Cleanup delivery mode defines
  - x86/msi: Only use high bits of MSI address for DMAR unit


author: Li Nan <linan122@huawei.com> - 5.10.0-242.0.0.141
changelog:
  - !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14109  RDMA/hns: backport some bugfix from maillist linux
  - !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp


author: Li Nan <linan122@huawei.com> - 5.10.0-243.0.0.142
changelog:
  - !14246  soc: hisilicon: hbmdev: Only support built-in
  - !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - soc: hisilicon: hbmdev: Only support built-in
  - !14060  etmem : fix page_ref count leak and head missing useing problem
  - !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - etmem : fix page_ref count leak and head missing useing problem


author: Li Nan <linan122@huawei.com> - 5.10.0-244.0.0.143
changelog:
  - !14314  x86/sgx: Fix deadlock in SGX NUMA node search
  - !14315  media: v4l2-tpg: prevent the risk of a division by zero
  - !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14289 v2  erofs: add ondemand mode support
  - !14269  iomap: fix zero padding data issue in concurrent append writes
  - !14235  xfs: fix attr inactive issue
  - !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14330  mm/khugepaged: fix ->anon_vma race
  - !14305  RDMA/hns: Some patches are integrated into OLK-5.10
  - !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm/khugepaged: fix ->anon_vma race
  - !13006  Fix CVE-2024-50086
  - !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
  - !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
  - media: v4l2-tpg: prevent the risk of a division by zero
  - x86/sgx: Fix deadlock in SGX NUMA node search
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - RDMA/hns: Don't query *except on hip10*
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix bonding failure due to wrong reset_state
  - config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
  - IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14208 Fix perf coredump and refcnt inccoret
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: modify fscache_hash_cookie() to enhance security
  - cachefiles: prefault in user pages to aovid ABBA deadlock
  - fscache/cachefiles: add a memory barrier for page_write
  - fscache/cachefiles: add a memory barrier for waking and waiting
  - fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
  - wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
  - s390: provide arch_test_bit_acquire() for architecture s390
  - wait_on_bit: add an acquire memory barrier
  - erofs: unify anonymous inodes for blob
  - erofs: remove unused device mapping in meta routine
  - fscache: fix assertion failure in cachefiles_put_object()
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - fscache: fix op leak due to abort init after parent ready
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
  - cachefiles: Change the mark inactive sequence in erofs ondemand mode
  - cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - cachefiles: disallow to complete open requests with uninitialised ondemand_id
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - fscache: Add the unhash_cookie mechanism to fscache_drop_object()
  - cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
  - cachefiles: Fix cookie reference count leakage error
  - cachefiles: Restrict monitor calls to read_page
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - fscache: set the default value of object_max_active to 256
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: make on-demand read killable
  - cachefiles: never get a new anon fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: flush ondemand_object_worker during clean object
  - fscache: limit fscache_object_max_active to avoid blocking
  - cachefiles: flush all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: add consistency check for copen/cread
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
  - fscache: Fix trace UAF in fscache_cookie_put()
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - cachefiles: use mainline xattr in ondemand mode
  - fscache: rename new_location to new_version
  - erofs: switch to use new location
  - erofs: remove erofs_fscache_netfs
  - cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
  - cachefiles: use key_hash as csum for new location
  - cachefiles: skip volum csum cachefiles_cook_key() for new location
  - cachefiles: skip acc in cachefiles_cook_key() for new location
  - cachefiles: use volume key directly in cachefiles_cook_key() for new location
  - cachefiles: factor out helper to generate csum from cachefiles_cook_key()
  - cachefiles: factor out helper to generate acc from cachefiles_cook_key()
  - fscache: generate new key_hash for new location
  - fscache: add new helper to determine cachefile location
  - fscache: add a waiting mechanism when duplicate cookies are detected
  - erofs: maintain cookies of share domain in self-contained list
  - fscache: fix kernel BUG at __fscache_read_or_alloc_page
  - erofs: fix handling kern_mount() failure
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - erofs: check the uniqueness of fsid in shared domain in advance
  - fscache: fix assertion failure in fscache_put_object()
  - fscache: fix reference count leakage during abort init
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - erofs: relinquish volume with mutex held
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - erofs: fix page unlock advance during readahead
  - openeuler_defconfig: enable erofs ondemand for x86 and arm64
  - anolis: cachefiles: fix potential NULL in error path
  - anolis: cachefiles: add missing lock protection when polling
  - anolis: cachefiles: reset object->private to NULL when it's freed
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - anolis: cachefiles: resend an open request if the read request's object is closed
  - anolis: cachefiles: extract ondemand info field from cachefiles_object
  - anolis: cachefiles: introduce object ondemand state
  - anolis: fscache: export fscache_object_wq
  - anolis: cachefiles: optimize on-demand IO path with buffer IO
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag
  - erofs: fix use-after-free of fsid and domain_id string
  - erofs: protect s_inodes with s_inode_list_lock for fscache
  - erofs: introduce 'domain_id' mount option
  - erofs: Support sharing cookies in the same domain
  - erofs: introduce a pseudo mnt to manage shared cookies
  - erofs: introduce fscache-based domain
  - erofs: code clean up for fscache
  - anolis: erofs: implement fscache-based data readahead
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper
  - anolis: cachefiles: maintain a file descriptor to the backing file
  - erofs: leave compressed inodes unsupported in fscache mode for now
  - anolis: erofs: fix the name of erofs_fscache_super_index_def
  - erofs: use kill_anon_super() to kill super in fscache mode
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: make on-demand request distribution fairer
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix error return code in cachefiles_ondemand_copen()
  - anolis: cachefiles: fix volume key setup for cachefiles_open
  - anolis: cachefiles: replace BUG_ON() with WARN_ON()
  - cachefiles: narrow the scope of flushed requests when releasing fd
  - anolis: cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: fix misbehavior of unsupported chunk format check
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: introduce erofs_sb_has_xxx() helpers
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - erofs: don't use erofs_map_blocks() any more
  - [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
  - [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
  - [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
  - [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - [Backport]scsi: hisi_sas: Add firmware information check
  - [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - iomap: fix zero padding data issue in concurrent append writes
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - perf addr_location: Add init/exit/copy functions
  - perf maps: Use a pointer for kmaps
  - ksmbd: fix user-after-free from session log off
  - ksmbd: fix race condition between session lookup and expire


author: Li Nan <linan122@huawei.com> - 5.10.0-245.0.0.144
changelog:
  - !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14679  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14572  PCI: Fix use-after-free of slot->bus on hot remove
  - !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14777  tracing: Prevent bad count for tracing_cpumask_write
  - !14496  ovl: Filter invalid inodes with missing lookup function
  - !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14606  scsi: qla2xxx: Fix use after free on unload
  - !14579  io_uring: check for overflows in io_pin_pages
  - !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14734  Fix iBMA bug and change version
  - !14713  Fix CVE-2024-56705
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14601  nvme-pci: fix freeing of the HMB descriptor table
  - !14575  etmem: fix use-after-free of mm in the scan release process
  - !14381  virtiofs: use pages instead of pointer for kernel direct IO
  - !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - !14651  backport mainline bugfix patch
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14629  net/mlx5: Fix error path in multi-packet WQE transmit
  - !14627  crypto: hisilicon/qm - inject error before stopping queue
  - !14626  drm/amd/display: Check null pointers before using dc->clk_mgr
  - !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14700  CVE-2024-53158
  - !14457  cgroup: Fix potential overflow issue when checking max_depth
  - !14620  drm: zynqmp_kms: Unplug DRM device before removal
  - !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
  - media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: remove #ifdef HAS_NO_HMEM
  - !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14535  RDMA/mlx5: Move events notifier registration to be after device registration
  - !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14636  CVE-2024-56604_OLK-5.10
  - !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14523  The bugfix for LPM trie
  - !14650  memcg: fix soft lockup in the OOM process
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14436  crypto: bcm - add error check in the ahash_hmac_init function
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - memcg: fix soft lockup in the OOM process
  - !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - !14467  io_uring/tctx: work around xa_store() allocation error issue
  - !14503  net: phy: dp83869: fix memory corruption when enabling fiber
  - !14515  hfsplus: don't query the device logical block size multiple times
  - !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14388  CVE-2024-53173
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - crypto: hisilicon/qm - inject error before stopping queue
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - drm: zynqmp_kms: Unplug DRM device before removal
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: qla2xxx: Fix use after free on unload
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - nvme-pci: fix freeing of the HMB descriptor table
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - io_uring: check for overflows in io_pin_pages
  - etmem: fix use-after-free of mm in the scan release process
  - PCI: Fix use-after-free of slot->bus on hot remove
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14366  EDAC/bluefield: Fix potential integer overflow
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14380  io_uring: check if iowq is killed before queuing
  - !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - hfsplus: don't query the device logical block size multiple times
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14371 [OLK-5.10] update AMD Zen5 Turin feature
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - ovl: Filter invalid inodes with missing lookup function
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - io_uring/tctx: work around xa_store() allocation error issue
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - cgroup: Fix potential overflow issue when checking max_depth
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14409  bpf: fix OOB devmap writes when deleting elements
  - !14419  HID: wacom: fix when get product name maybe null pointer
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14268  Revert "unicode: Don't special case ignorable code points"
  - !14397  backport some patches from upstream about HCCS low power
  - !14392  arm64: stacktrace: Handle 'lr' in interrupt context
  - !14317  exfat: fix out-of-bounds access of directory entries
  - !14402  gpio: grgpio: Add NULL check in grgpio_probe
  - !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14363  CVE-2024-53217
  - HID: wacom: fix when get product name maybe null pointer
  - !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - !14407  NFSD: Prevent a potential integer overflow
  - !14378  ftrace: Fix regression with module command in stack_trace_filter
  - bpf: fix OOB devmap writes when deleting elements
  - !14375  fix CVE-2024-53197
  - NFSD: Prevent a potential integer overflow
  - gpio: grgpio: Add NULL check in grgpio_probe
  - soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
  - soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
  - soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
  - soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
  - soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
  - soc: hisilicon: kunpeng_hccs: Fix a PCC typo
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - arm64: stacktrace: Handle 'lr' in interrupt context
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - virtiofs: use pages instead of pointer for kernel direct IO
  - io_uring: check if iowq is killed before queuing
  - ftrace: Fix regression with module command in stack_trace_filter
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - EDAC/bluefield: Fix potential integer overflow
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - exfat: fix out-of-bounds access of directory entries
  - Revert "unicode: Don't special case ignorable code points"
  - gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans


author: Li Nan <linan122@huawei.com> - 5.10.0-246.0.0.145
changelog:
  - !14844  merge mainline patch into OLK-5.10
  - !14838 v2  fs: Filter specific inodes to prevent UAF issues
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - mm: kfence: fix using kfence_metadata without initialization in show_object()
  - x86/mm: Do not shuffle CPU entry areas without KASLR
  - fs: Filter specific inodes to prevent UAF issues
  - !14599  CVE-2024-56701
  - !14560  CVE-2024-56567
  - !14801  CVE-2024-53237
  - !14793  jfs: fix shift-out-of-bounds in dbSplit
  - !14815  OLK-5.10
  - !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14822  ALSA: 6fire: Release resources at card release
  - !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
  - ALSA: 6fire: Release resources at card release
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - driver core: Introduce device_find_any_child() helper
  - Bluetooth: fix use-after-free in device_for_each_child()
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - jfs: fix shift-out-of-bounds in dbSplit
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - ad7780: fix division by zero in ad7780_write_raw()


author: Li Nan <linan122@huawei.com> - 5.10.0-247.0.0.146
changelog:
  - !14414 sdma-dae: add print in exceptional branch
  - !14870  quota: flush quota_release_work upon quota writeback
  - !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14866  NFS: Fix up nfs_ctx_key_to_expire()
  - !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - quota: flush quota_release_work upon quota writeback
  - !14663  xsk: Add generic xdp multi-buffer send support
  - NFS: Fix up nfs_ctx_key_to_expire()
  - !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14857  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - xsk: Add generic xdp multi-buffer send support
  - drivers:misc:sdma-dae: add print in exceptional branch


author: Li Nan <linan122@huawei.com> - 5.10.0-248.0.0.147
changelog:
  - !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14875  *** jffs2: Prevent rtime decompress memory corruption ***
  - !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
  - !14937 v2  Two CVE fixes for ksmbd
  - !14966  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14943  fix CVE-2024-57892
  - !14954  zram: fix NULL pointer in comp_algorithm_show()
  - !14948 Mainline patch to olk-5.10 v3
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
  - !14947  mm/slub: Reduce memory consumption in extreme scenarios
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !14917  merge CVE patches into OLK-5.10
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - net: wangxun: change netdev uc addr num maxmium
  - net: wangxun: fix resolving ipv6 pakets extension header errors
  - net: wangxun: fix tx csum by soft except tcp udp sctp
  - drm/i915: Fix potential context UAFs
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - um: net: Do not use drvdata in release
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - 9p/xen: fix release of IRQ
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - fbdev/sh7760fb: Alloc DMA memory from hardware device
  - ionic: Fix netdev notifier unregister on failure
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-248.0.0.148
changelog:
  - kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel


author: Li Nan <linan122@huawei.com> - 5.10.0-249.0.0.152
changelog:
  - !15061  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
  - !15059  RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - !15051  iio: light: vcnl4035: fix information leak in triggered buffer
  - !9883 AMD QoS new features BMEC and SMBA
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14956  nbd: don't allow reconnect after disconnect
  - !15046  pinmux: Use sequential access to access desc->pinmux data
  - !15015  spi: mpc52xx: Add cancel_work_sync before module remove
  - !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
  - [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - pinmux: Use sequential access to access desc->pinmux data
  - !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15014 v2  nilfs2: prevent use of deleted inode
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15010  nvme-rdma: unquiesce admin_q before destroy it
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - nilfs2: prevent use of deleted inode
  - nvme-rdma: unquiesce admin_q before destroy it
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - tools headers cpufeatures: Sync with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Add per-rmid arch private storage for overflow and chunks
  - x86/resctrl: Group struct rdt_hw_domain cleanup
  - x86/resctrl: Add domain online callback for resctrl work
  - x86/resctrl: Merge mon_capable and mon_enabled
  - x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
  - x86/resctrl: Split struct rdt_domain
  - x86/resctrl: Add interface to write mbm_local_bytes_config
  - x86/resctrl: Add interface to write mbm_total_bytes_config
  - x86/resctrl: Add interface to read mbm_local_bytes_config
  - x86/resctrl: Add interface to read mbm_total_bytes_config
  - x86/resctrl: Support monitor configuration
  - x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
  - x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
  - x86/resctrl: Move MSR defines into msr-index.h
  - x86/resctrl: Include new features in command line options
  - x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
  - x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
  - x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
  - x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
  - x86/resctrl: Split struct rdt_resource
  - x86/resctrl: Fix kernel-doc in internal.h
  - x86/resctrl: Correct MBM total and local values
  - nbd: don't allow reconnect after disconnect
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-250.0.0.154
changelog:
  - !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
  - !15085  ila: call nf_unregister_net_hooks() sooner
  - !15100  ila: serialize calls to nf_register_net_hooks()
  - !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
  - !15096  net: inet: do not leave a dangling sk pointer in inet_create()
  - !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - !15086  net: Fix CVE-2024-50125
  - !15117 v3  net: Fix CVE-2024-56658
  - !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - !15124 v2  fix CVE-2024-53056 for olk-5.10
  - !15129  comedi: Flush partial mappings in error case
  - !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - comedi: Flush partial mappings in error case
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - mm: resolve faulty mmap_region() error path behaviour
  - mm: unconditionally close VMAs on error
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
  - !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - ila: serialize calls to nf_register_net_hooks()
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - Bluetooth: call sock_hold earlier in sco_conn_del
  - ila: call nf_unregister_net_hooks() sooner
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error


author: Li Nan <linan122@huawei.com> - 5.10.0-251.0.0.155
changelog:
  - !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
  - !15137  net/mlx5: Fix variable not being completed when function returns
  - !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - !15134  usb: typec: altmode should keep reference to parent
  - !15198  CVE-2024-57857
  - !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15199  power: supply: gpio-charger: Fix set charge current limits
  - power: supply: gpio-charger: Fix set charge current limits
  - RDMA/siw: Remove direct link to net_device
  - RDMA/siw: Fabricate a GID on tun and loopback devices
  - RDMA/siw: Use helper function to set sys_image_guid
  - RDMA/siw: Enable siw on tunnel devices
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15186  CVE-2024-57795
  - !15177  iio: imu: kmx61: fix information leak in triggered buffer
  - RDMA/rxe: Remove the direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - iio: imu: kmx61: fix information leak in triggered buffer
  - !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !15139  apparmor: fix 'Do simple duplicate message elimination'
  - !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
  - !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - !15077  kasan: fix incorrect return type of quarantine_put()
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - apparmor: fix 'Do simple duplicate message elimination'
  - net/mlx5: Fix variable not being completed when function returns
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - usb: typec: altmode should keep reference to parent
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - kasan: fix incorrect return type of quarantine_put()
  - mm: Enhanced copy capabilities for Hygon processor


author: Li Nan <linan122@huawei.com> - 5.10.0-252.0.0.156
changelog:
  - !15293 ras: ACPI: HED: Always initialize before evged
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - ras: ACPI: HED: Always initialize before evged
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC, i10nm: make skx_common.o a separate module
  - !15246  UBI/UBIFS mainline patch backport
  - !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
  - ubi: Add a check for ubi_num
  - ubifs: skip dumping tnc tree when zroot is null
  - !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU


author: Li Nan <linan122@huawei.com> - 5.10.0-253.0.0.157
changelog:
  - !15447  Some bug fix patches for RDMA/hns to olk-5.10
  - !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - RDMA/hns: Fix default congestion control algorithm not set for kernel QP
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15422  ocfs2: handle a symlink read error correctly
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - RDMA/hns: Fix ifnullfree static warning
  - RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
  - RDMA/hns: Fix unmatched kmalloc and kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
  - net: hns3: add command queue trace for hns3
  - net: hns3: Revert "net: hns3: add command queue trace for hns3"
  - ocfs2: handle a symlink read error correctly
  - net: hns3: add mac tunnel number query
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15413  CVE-2025-21756
  - !15413  CVE-2025-21756
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - net: hns3: fix oops when unload drivers paralleling
  - !15382  srcu: Tighten cleanup_srcu_struct() GP checks
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15387  crypto: qat - add param check for DH
  - !15389  orangefs: fix a oob in orangefs_debug_write
  - !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - !15241 KVM: arm64: pvsched bugfix and module param
  - orangefs: fix a oob in orangefs_debug_write
  - crypto: qat - add param check for DH
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15217 Add device HID for Hygon GPIO controller
  - !15217 Add device HID for Hygon GPIO controller
  - srcu: Tighten cleanup_srcu_struct() GP checks
  - !15232  smb: client: Fix netns refcount imbalance
  - !15232  smb: client: Fix netns refcount imbalance
  - !15348  Mainline Patch
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
  - !15307  net: sfc: add missing xdp queue reinitialization
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - net: sfc: add missing xdp queue reinitialization
  - netfilter: nf_set_pipapo: fix initial map fill
  - sw64: pci: add new files to help support ACPI-based PCI initialization
  - sw64: acpi: disable INTC initialization via ACPI MADT table
  - sw64: pci: bypass legacy PCI initialization when ACPI enabled
  - sw64: acpi: use early param to control whether ACPI is enabled
  - sw64: acpi: disable all ACPI features by default
  - pci: let pcibios_root_bridge_prepare() access bridge->windows
  - sw64: fix kernel crash caused by unaligned access exception
  - sw64: iommu: adjust iova map space
  - sw64: msi: split the msi file
  - sw64: use generic dma_direct_ops
  - sw64: fix cpu reduction bug in cpuautoplug
  - sw64: use generated macro in vrt_sigreturn.S
  - sw64: do not allow assembler reorder in __copy_user()
  - sw64: expand vmemmap
  - sw64: iommu: fix dma_supported of dma_ops
  - sw64: add support for TIF_NOTIFY_SIGNAL
  - sw64: fix stack trace error
  - sw64: register suspend entry for cpu 0 only
  - sw64: do not discard exit text at link time
  - sw64: fix syscall restart
  - sw64: usb: redefine some macros
  - sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
  - sw64: fix syscall sigreturn and rt_sigreturn
  - sw64: optimize hmcall rdusp() and wrusp()
  - sw64: rewrite syscall invocation in C
  - sw64: expand struct pt_regs
  - sw64: kvm: delete kvm_sw64_ops structure
  - sw64: add imemb at the end of fixup_hmcall()
  - sw64: c3b: get MCLK rate dynamically according to specification
  - sw64: fix default short clock rate
  - sw64: use call and br in kernel entry
  - sw64: modify do_[rt_]sigreturn
  - sw64: modify fixup_exception()
  - sw64: rewrite struct pt_regs
  - sw64: simplify pt_regs related code
  - sw64: fix pt_regs related code
  - sw64: avoid using wrusp()
  - sw64: use sp in pt_regs
  - sw64: kvm: move bind vcpu init code into kvm_core3.c
  - sw64: add arch/sw_64/Kbuild
  - sw64: Kconfig: clean up out-of-date deep sleep options
  - sw64: Kconfig: rename BUILTIN_DTB option
  - sw64: optimize C4 compilation
  - sw64: kprobe: allow kprobe in atomic sequence on C4
  - sw64: lib: optimize lib functions for C4
  - sw64: optimize __fpstate_save on C4
  - sw64: add new match interface for C4
  - sw64: add C4 FPE_INTDIV support
  - sw64: update default FPCR value
  - sw64: defconfig: add junzhang_defconfig for C4 serials
  - sw64: add basic support for C4 ISA
  - sw64: use PAGE_OFFSET as ktext address head
  - sw64: dts: add an empty dts to support SW8A temporarily
  - sw64: kconfig: add SW8A platform support
  - sw64: kvm: rebuild Core3 and Core4 virtualization
  - sw64: kvm: add support for Core4 memory virtualization
  - sw64: kvm: add config guard for C3B implementation
  - sw64: kvm: add C4 vcpu support
  - sw64: iommu: add new iommu v2 support
  - sw64: pci: add C4 PCI_MSI support
  - sw64: pci: add C4 PCI support
  - sw64: irq: add basic C4 irq support
  - sw64: timer: add C4 timer support
  - sw64: unify io operations interface for C3B and C4
  - sw64: add SW8A io addresses
  - sw64: mm: add C4 hugetlb support
  - sw64: mm: add C4 MMU support
  - sw64: topology: add C4 topology info
  - sw64: add C4 CSRs
  - sw64: add C4 barriers support
  - sw64: add C4 xchg operations support
  - sw64: add C4 bit operations support
  - sw64: add C4 atomic operations support
  - sw64: redesign __cpu_to_rcid initialization
  - sw64: topology: modify topology defines
  - sw64: rename some fields of struct vcpucb
  - sw64: mm: use static ZERO_PAGE
  - sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
  - sw64: mm: add more helpers to pgtable.h
  - sw64: mm: fix _PFN_MASK
  - sw64: mm: add _PAGE_CONT helpers
  - sw64: pci: rename PCI_DEVICE_ID_CHIP3
  - sw64: mm: rename _PAGE_PHU and _PAGE_PSE
  - sw64: remove unused file
  - sw64: remove out-of-date LOCK_FIXUP
  - sw64: fix compile error when CONFIG_PM is not set
  - sw64: kconfig: fix config error when PCI_MSI is not set
  - sw64: cpufreq: fix clockevents update method
  - sw64: fix excessive timer interrupts
  - sw64: simplify PMC interfaces
  - sw64: remove sw64_platform_ops
  - sw64: remove chip directory
  - sw64: reorganize pci setup related code
  - sw64: reorganize chip setup code
  - sw64: reorganize msi related code
  - sw64: reorganize basic irq handling code
  - sw64: reorganize pci related quirks
  - sw64: reorganize usb quirks related code
  - sw64: reorganize i2c related code
  - sw64: reorganize timer related code
  - sw64: reorganize cpu frequency related code
  - i2c: designware: add parameter MODEL_SUNWAY
  - sw64: fix compile warnings
  - sw64: cleanup hugetlb code
  - sw64: drop fpga and simulator support
  - sw64: fix indent of inline assembly
  - sw64: fix header include guards
  - sw64: add missing fallthrough
  - sw64: add missing break
  - sw64: Kconfig: remove out-of-date rwsem options
  - sw64: fix frequency in cpufreq_frequency_table
  - sw64: fix incorrect hmcalls in the virtual machine
  - sw64: remove arch overridden RLIM_INFINITY
  - sw64: do not set __ARCH_SI_TRAPNO
  - sw64: remove C3A support
  - sw64: fix s4 sleep bug
  - sw64: reorganize dependency of devmap helpers
  - i2c: sunway: do some cleanup for old i2c driver
  - i2c: designware: add sunway system I2C support
  - sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
  - sw64: modify lock instruction
  - sw64: update openeuler_defconfig
  - sw64: add save_stack_trace_regs()
  - sw64: tools: fix selftests/sigaltstack for sw64
  - sw64: determine external clock according to specification
  - sw64: fix uretprobe implementation
  - sw64: fix some cpu autoplug bugs
  - sw64: kvm: add support for cpu offline and online in guest
  - fbdev: sw64 use __raw I/O memory api
  - sw64: correct the definition of MAX_DMA_ADDRESS
  - sw64: remove S3 flag
  - sw64: rename ptrace macros
  - sw64: fix audit_syscall_exit()
  - sw64: fix some include format
  - sw64: update cpufreq's info when cpu frequency changed
  - sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
  - sw64: selftests/ftrace: add sw64 support for kprobe args tests
  - sw64: hibernation: update ktp to vcpucb after restoring it
  - sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
  - sw64: kvm: fix memory hotplug support for guest
  - sw64: hugetlbfs: add arch_hugetlb_valid_size
  - sw64: kvm: fix some build errors for KVM module
  - sw64: perf: add libbfd-buildid and disassembler-four-args support
  - sw64: fix a compile error for headers_install
  - sw64: fix shared_cpu_map of tcache's cacheinfo
  - sw64: kvm: fix an error with non-8MB aligned guest RAM size
  - sw64: selftests/vm: fix virtual address range mapping test
  - sw64: fix KBUILD_DEFCONFIG
  - sw64: send a fake signal to all blocking tasks
  - sw64: clean up useless cpu_idle wrap
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - pinctrl: Add device HID for Hygon GPIO controller
  - block: fix kabi broken due to removing bip_slab
  - block: fix kabi broken
  - block: fix rq-qos breakage from skipping rq_qos_done_bio()
  - block: only mark bio as tracked if it really is tracked
  - block: add a BUILD_BUG_ON() for adding more bio flags than we have space
  - block: use bi_max_vecs to find the bvec pool
  - md/raid10: remove dead code in reshape_request
  - block: mark the bio as cloned in bio_iov_bvec_set
  - block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
  - block: remove the 1 and 4 vec bvec_slabs entries
  - block: streamline bvec_alloc
  - block: factor out a bvec_alloc_gfp helper
  - block: move struct biovec_slab to bio.c
  - block: reuse BIO_INLINE_VECS for integrity bvecs


author: Li Nan <linan122@huawei.com> - 5.10.0-254.0.0.158
changelog:
  - !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
  - !15456  soc: hisilicon: Fix one printing issue and simplify some printing
  - !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - soc: hisilicon: Add checks against NULL pointer reference
  - soc: hisilicon: Fix one printing issue and simplify some printing
  - !15391  backport mainline bugfix patch
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: yanglongkang <yanglongkang@h-partners.com> - 2.61-7
changelog:
  - backport upstream patches:
    getcpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: echo <2220386943@qq.com> - 1.2-2
changelog:
  - update version to 1.2-2
  - support new create thread
  - description of supplementary documents
  - support event grouping
  - add the mangleName in symbol.h


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: Funda Wang <fundawang@yeah.net> - 2.9.14-15
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: yinbin <yinbin8@huawei.com> - 2.2.0-60
changelog:
  - IPV6: Enable IPV6_FRAG_COPYHEADER macro to adapt 64bit
  - IPV6: fix array out of bounds in function ip6_ntoa_r
  - IPV6: add group check while mld6 schedule a report


author: hankangkang <hankangkang5@huawei.com> - 2.2.0-62
changelog:
  - When the GAZELLE_TCP_REUSE_IPPORT is on, min_cnts_lpcb is NULL
  - Turn on the LWIP_SO-LINGER switch


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: Funda Wang <fundawang@yeah.net> - 20240813-1
changelog:
  - update to 20240813 for fix CVE-2024-24853, CVE-2024-25939,
    CVE-2024-24980, CVE-2023-42667, CVE-2023-49141


author: Funda Wang <fundawang@yeah.net> - 20250211-1
changelog:
  - update to 2025021 for fix CVE-2024-28047, CVE-2024-31157, CVE-2024-39279,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-24582, CVE-2023-34440, CVE-2024-37020,
    CVE-2024-39355, CVE-2023-43758, CVE-2024-36293, CVE-2024-31068


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: xinghe <xinghe2@h-partners.com> - 1:1.0.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cache prepare nft_cache evaluate to return error
         fix cache validate handle string length
         add src support for implicit chain bindings
         fix cache release pending rules
         fix segtree map listing
         parser_json fix device parsing in netdev family
         fix src Don't parse string as verdict in map


author: huangyu <huangyu106@huawei.com> - 1:1.0.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix string prefix expression must retain original length
  fix release top level scope


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate allow implicit ether vlan dep
  evaluate datatype memleak after binop transfer
  evaluate bogus datatype assertion in binary operation evaluation
  netlink delinearize do not transfer binary operation to non anonymous sets
  payload do not kill dependency for proto unknown
  monitor missing cache and set handle initialization
  netlink linearize fix timeout with map updates


author: zhanghao <zhanghao383@huawei.com> - 1:1.0.0-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential array out of bounds access
  evaluate: fix shift exponent underflow in concatenation evaluation
  netlink: Fix for potential NULL-pointer deref
  mnl: dump_nf_hooks() leaks memory in error path


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: error out if basetypes are different
         evaluate: guard against NULL basetype
         evaluate: handle invalid mapping expressions gracefully
         evaluate: reject attempt to update a set
         evaluate: release mpz type in expr_evaluate_list() error path
         expression: missing line in describe command with invalid expression

  Thu Apr 18 2024 lingsheng <lingsheng1@h-partners.com> - 1:1.0.0-10
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: fix tcpopt_find_template to use length after mask adjustment
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6
         netlink: reset temporary set element stmt list after list splice


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser: split tcp option rules
         cache: prepare nft_cache_evaluate() to return error
         ct timeout: fix 'list object x' vs. 'list objects in table' confusion
         ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.0-14
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: fly_1997 <flylove7@outlook.com> -v1.0.1-6
changelog:
  - fix dependency error and add enable failed logs
  - fix dependency disabled failed and pre-enable illegal plugin


author: fly_1997 <flylove7@outlook.com> -v1.0.2-3
changelog:
  - add automatic startup based on the version
  - fix coredump when process exits
  - modify logger mode to append


author: LHesperus <liuchanggeng@huawei.com> -v2.0.0-1
changelog:
  - merge the plugin repository into this repository
  - add oeaware sdk library
  - new interface of plugin : replace the ringbuf data with subscribe
  - add new plugin : system info, command collector, xcall


author: fly_1997 <flylove7@outlook.com> -v2.0.0-3
changelog:
  - adjust the header file structure
  - fix cycles sample, spe memory free
  - add one time command collection


author: LHesperus <liuchanggeng@huawei.com> -v2.0.1-1
changelog:
  - add some document
  - fix bug : spe period dynamic changes
  - fix bug : analysis client not work
  - fix bug : cpuburst exit error
  - adapt : seep tune , steal task tune, xcall tune


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: Funda Wang <fundawang@yeah.net> - 0.21.0-11
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: wangkai <13474090681@163.com> - 5.3.7-6
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)
  - Fix invalid memory access in pmfind utility (BZ 2135314)


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: Funda Wang <fundawang@yeah.net> - 8.0.30-7
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: xiongyi <xiongyi@uniontech.com> - 0.90.0-7
changelog:
  - fix CVE-2020-36023
  - fix infinite looping in cvtGlyph with broken files
  - patch source:https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: heppen <hepeng68@huawei.com> - 1.1.0-3
changelog:
  - Bug fix: fix build warning.
  - Bug fix: export PWR_SYS_GetRtPowerInfo.
  - Bug fix: data collection task intercept invalid task type.


author: heppen <hepeng68@huawei.com> - 1.1.0-4
changelog:
  - Bug fix: memcpy null pointer, array out of bounds, struct align.
  - Bug fix: get watt state will failed at the first time.
  - Bug fix: use process name to query pid but return all pids.
  - Bug fix: mismatch fopen/pclose and popen/fclose, useless if statement.


author: heppen <hepeng68@huawei.com> - 1.1.0-5
changelog:
  - Bug fix: SIGPIPE cause powerapi server exit.
  - Bug fix: pstree command is too slow to get all pid.
  - Bug fix: set smart grid state failed.
  - Bug fix: get watt attr and task list is not correct.


author: Zihao Xue <xuezihao@huawei.com> - 1.1.0-6
changelog:
  - Bug fix: heap buffer overflow caused by sending incomplete strings.
  - Bug fix: too long strings into QueryProcs causes services broke down.


author: heppen <hepeng68@huawei.com> - 1.0.1-4
changelog:
  - Add the dependency on ipmitool.
  - Fix bug: Coredump when CPU cores number exceed 248 or numa nodes exceed 16.
  - Fix some memory bug.


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: chengyechun <chengyechun1@huawei.com> - 1.26.12-7
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorization header on redirects


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-35
changelog:
  - Type:CVE
  - CVE:NA
  - SUG:NA
  - DESC:fix CVE-2024-6923,CVE-2024-7592,CVE-2024-8088
      - Encode newlines in headers, and verify headers are sound
      - Fix quadratic complexity in parsing quoted cookie values with backslashes
      - Replaced SanitizedNames with a more surgical fix


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-36
changelog:
  - Type:CVE
  - CVE:CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
  - SUG:NA
  - DESC:fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032
      - rename all CVE patch name
      - CVE-2024-6232: Remove backtracking when parsing tarfile headers
      - CVE-2024-3219: patch1 Authenticate socket connection for `socket.socketpair()` fallback
      - CVE-2024-3219: patch2 Rework pure Python socketpair tests to avoid use of importlib.reload.
      - CVE-2024-0450: Protect zipfile from "quoted-overlap" zipbomb
      - CVE-2023-6597: tempfile.TemporaryDirectory: fix symlink bug in cleanup
      - CVE-2024-4032: Fix "private" (non-global) IP address ranges


author: wangshuo <wangshuo@kylinos.cn> - 3.9.9-37
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch, fix the bug introduced by the fix for CVE-2007-4559
  -      gh-107845: Fix symlink handling for tarfile.data_filter


author: Funda Wang <fundawang@yeah.net> - 3.9.9-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-9287
  - SUG:NA
  - DESC:fix CVE-2024-9287
    - Quote template strings in venv activation scripts


author: xinsheng <xinsheng3@huawei.com> - 3.9.9-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-11168
  - SUG:NA
  - DESC:fix CVE-2024-11168
         - Adds checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format


author: <fengjiabo1@huawei.com> - 10:6.2.0-91
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set(CVE-2024-3447)
  - rtl8139: Remove unused variable
  - tulip: Remove unused variable
  - virtio-mem: Fix the bitmap index of the section offset
  - virtio-mem: Fix the iterator variable in a vmem->rdl_list loop
  - system/memory: use ldn_he_p/stn_he_p
  - block: Fix crash when loading snapshot on inactive node
  - smmu: Clear SMMUPciBus pointer cache when system reset
  - block/mirror: Fix NULL s->job in active writes
  - amd_iommu: Fix APIC address check
  - virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_reques
  - libqos/virtio.c: Correct 'flags' reading in qvirtqueue_kick
  - ivshmem-test.c: enable test_ivshmem_server for ppc64 arch
  - ivshmem.c: change endianness to LITTLE_ENDIAN
  - hw/ppc/mac.h: Remove MAX_CPUS macro
  - configure: remove dead variables
  - virtio-gpu: do not byteswap padding
  - hw/intc: clean-up error reporting for failed ITS cmd
  - qemu-iotests: Discard stderr when probing devices
  - linux-user: un-parent OBJECT(cpu) when closing thread
  - hw/net/rocker: Avoid undefined shifts with more than 31 ports
  - contrib/vhost-user-blk: Clean up deallocation of VuVirtqElement
  - scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE


author: <fengjiabo1@huawei.com> - 10:6.2.0-92
changelog:
  - s390x/sclp: Simplify get_sclp_device() 
  - target/ppc: Remove msr_pr macro
  - docs/system/target-arm: Re-alphabetize board list
  - migration: Extend query-migrate to provide dirty page limit info
  - migration: Implement dirty-limit convergence algo
  - migration: Put the detection logic before auto-converge checking
  - migration: Refactor auto-converge capability logic
  - migration: Introduce dirty-limit capability
  - qapi/migration: Introduce vcpu-dirty-limit parameters
  - qapi/migration: Introduce x-vcpu-dirty-limit-period parameter
  - Change the value of no_ged from true to false
  - Allow UNIX socket option for VNC websocket
  - tpm_emulator: Avoid double initialization during
  - chardev/char-socket: Update AF_UNIX for Windows
  - KVM: dirty ring: add missing memory barrier
  - i386: reset KVM nested state upon CPU reset
  - esp: Handle CMD_BUSRESET by resetting the SCSI bus
  - dbus-vmstate: Restrict error checks to registered proxies in dbus_get_proxies
  - vfio/pci: Add Ascend310b scend910b support
  - target/i386: Export RFDS bit to guests
  - target/i386: Add new CPU model SierraForest
  - target/i386: Introduce Icelake-Server-v7 to enable TSX
  - hw/virtio: handle un-configured shutdown in virtio-pci
  - target/s390x: display deprecation status in '-cpu  help'
  - target/i386: display deprecation status in '-cpu  help'
  - pc-bios/s390-ccw: Fix booting with logical block size < physical block size


author: <fengjiabo1@huawei.com> - 10:6.2.0-93
changelog:
  - cvm: bug-fix for macro isolation
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fix CVE-2023-5088)
  - hw/ide: reset: cancel async DMA operation before resetting state (Fix CVE-2023-5088)
  - Add support for the virtcca cvm feature.


author: <fengjiabo1@huawei.com> - 10:6.2.0-96
changelog:
  - vdpa: Fix bug where vdpa appliance migration does not resume after rollback
  - block: Parse filenames only when explicitly requested (CVE-2024-4467)
  - block: introduce bdrv_open_file_child() helper
  - iotests/270: Don't store data-file with json: prefix in image (CVE-2024-4467)
  - iotests/244: Don't store data-file with protocol in image (CVE-2024-4467)
  - qcow2: Don't open data_file with BDRV_O_NO_IO (CVE-2024-4467)
  - qcow2: Do not reopen data_file in invalidate_cache
  - hw/intc/arm_gic: Fix deactivation of SPI lines chery-pick from 7175a562f157d39725ab396e39c1e8e410d206b3
  - vhost-user: Skip unnecessary duplicated VHOST_USER_SET_LOG_BASE requests
  - target/ppc: Split off common embedded TLB init cheery-pick from 581eea5d656b73c6532109f4ced4c73fd4e5fd47`
  - vdpa: fix vdpa device migrate rollback wrong when suspend device failed 1. 
  - hw/virtio/virtio-pci:Support shadow device for virtio-net/blk/scsi devices


author: <fengjiabo1@huawei.com> - 10:6.2.0-97
changelog:
  - nbd/server: CVE-2024-7409: Close stray clients at server-stop
  - main-loop.h: introduce qemu_in_main_thread()
  - aio-wait.h: introduce AIO_WAIT_WHILE_UNLOCKED
  - nbd/server: CVE-2024-7409: Drop non-negotiating clients
  - nbd/server: CVE-2024-7409: Cap default max-connections to 100
  - nbd/server: Plumb in new args to nbd_client_add()
  - nbd: Minor style and typo fixes


author: <fengjiabo1@huawei.com> - 10:6.2.0-98
changelog:
  - pci-host: designware: Limit value range of iATU viewport register
  - hmat acpi: Fix out of bounds access due to missing use of indirection
  - migration: Skip only empty block devices
  - aspeed/hace: Initialize g_autofree pointer
  - hw/net/vmxnet3: Fix guest-triggerable assert()
  - qxl: don't assert() if device isn't yet initialized
  - Avoid unaligned fetch in ladr_match()
  - linux-user: Fix waitid return of siginfo_t and rusage
  - hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  - stdvga: fix screen blanking
  - virtio-net: drop too short packets early
  - ebpf: replace deprecated bpf_program__set_socket_filter
  - vhsot-user: only read reply of SET_LOG_BASE from vq 0
  - cpu: add Tengyun S5000C cpu support
  - hw/virtio: Fix obtain the buffer id from the last descriptor
  - hw/core: ensure kernel_end never gets used undefined


author: <fengjiabo1@huawei.com> - 10:6.2.0-99
changelog:
  - target/i386: Introduce SapphireRapids-v3 to add missing features
  - qtest/fuzz-lsi53c895a-test: set guest RAM to 2G
  - hw/net/lan9118: Signal TSFL_INT flag when TX FIFO reaches specified level
  - target/arm: Fix alignment for VLD4.32
  - hw/microblaze: pass random seed to fdt
  - tests/qtest: npcm7xx-emc-test: Skip checking MAC
  - tests: mark io-command test as skipped if socat is missing
  - tests: unit: add NULL-pointer check
  - tests: test-qga: close socket on failure to connect
  - vdpa:block device capacity expansion online support vdpa block device update capacity.
  - virtio-net: Ensure queue index fits with RSS(CVE-2024-6505)
  - nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
  - ppc/vof: Fix unaligned FDT property access
  - vvfat: Fix reading files with non-continuous clusters
  - vvfat: Fix bug in writing to middle of file
  - savevm: Fix load_snapshot error path crash
  - hw/dma/xilinx_axidma: Use semicolon at end of statement, not comma
  - hw/remote/message.c: Don't directly invoke DeviceClass:reset
  - crypto/tlscredspsk: Free username on finalize
  - hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
  - virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  - char-stdio: Restore blocking mode of stdout on exit
  - hw/ppc: spapr: Use qemu_vfree() to free spapr->htab
  - smbios: sanitize type from external type before checking have_fields_bitmap
  - spapr_pci: fix leak in spapr_phb_vfio_get_loc_code
  - KVM: use store-release to mark dirty pages as harvested
  - monitor/hmp: print trace as option in help for log command
  - tpm_crb: Avoid backend startup just before shutdown under Xen
  - crypto/block-luks: make range overlap check more readable
  - spapr: Free stdout path
  - target/rx: Use target_ulong for address in LI
  - virtio-pci: Fix the use of an uninitialized irqfd
  - rtl8139: Fix behaviour for old kernels.
  - virtio-rng: block max-bytes=0 MIME-Version: 1.0
  - hw/audio/es1370: Clean up comment
  - vhost-user-server: do not set memory fd non-blocking
  - ui: reject extended clipboard message if not activated
  - virtio-net: Fix vhost virtqueue notifiers for RSS
  - hw/misc/applesmc: Fix memory leak in reset() handler


author: <fengjiabo1@huawei.com> - 10:6.2.0-100
changelog:
  - mac_dbdma: Remove leftover `dma_memory_unmap` calls(CVE-2024-8612)
  - softmmu: Support concurrent bounce buffers(CVE-2024-8612)
  - system/physmem: Per-AddressSpace bounce buffering
  - system/physmem: Propagate AddressSpace to MapClient helpers


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: support vdpa device suspend/resume
  - vdpa: correct param passed in when unregister save
  - vdpa: set vring enable only if the vring address has already been set
  - shadow_dev: introduce shadow dev for virtio-net device
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: <fengjiabo1@huawei.com> - 10:6.2.0-88
changelog:
  - ui/vnc.c: Fixed a deadlock bug.
  - hw/i386: Fix comment style in topology.h
  - migration/multifd: Remove unnecessary usage of local Error
  - linux-user: fix sockaddr_in6 endianness
  - vhost_vdpa: fix the input in trace_vhost_vdpa_listener_region_del()
  - iotests: fix 194: filter out racy postcopy-active event
  - tests/avocado: fix waiting for vm shutdown in replay_linux
  - ui/vnc: fix debug output for invalid audio message


author: <fengjiabo1@huawei.com> - 10:6.2.0-89
changelog:
  - qga-win: Fix guest-get-fsinfo multi-disks collection
  - hw/timer: fix systick trace message
  - virtio-net: correctly copy vnet header when flushing TX (CVE-2023-6693)
  - ui/clipboard: mark type as not available when there is no data (CVE-2023-6683)
  - esp: restrict non-DMA transfer length to that of available data (CVE-2024-24474)
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()


author: <fengjiabo1@huawei.com> - 10:6.2.0-90
changelog:
  - i386/cpuid: Move leaf 7 to correct group
  - i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  - i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  - i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  - target/i386: Change wrong XFRM value in SGX CPUID leaf
  - target/i386: Enable support for XSAVES based features
  - target/i386: Add kvm_get_one_msr helper
  - hw/block/hd-geometry: Do not override specified bios-chs-trans mainline inclusion commit fd8a68ad6823d33bedeba20a22857867a1c3890e category: bugfix
  - linux-user/riscv: Align signal frame to 16 bytes mainline inclusion commit 1eaa63429a9944265c92efdb94c02fabb231f564 category: bugfix
  - ipmi:smbus: Add a check around a memcpy mainline inclusion commit 3fde641e7286f9b968bdb3b4b922c6465f2a9abc category: bugfix
  - tests/tcg/linux-test: Fix random hangs in test_socket mainline inclusion commit b9e6074fc5b429b1e956e9c60db7e284a91e0f3d category: bugfix
  - qemu-options.hx: Don't claim "-serial" has limit of 4 serial ports Before v2.12, the implementation of serial ports was limited to a value of MAX_SERIAL_PORTS = 4. We now dynamically allocate the data structures for serial ports, so this limit is no longer present, but the documentation for the -serial options still reads:
  - target/ppc: Modify the uncorrect value irq to n_IRQ
  - block-migration: Ensure we don't crash during migration cleanup
  - target/s390x: fix handling of zeroes in vfmin/vfmax mainline inclusion commit 13c59eb09bd6d1fbc13f08b708226421f14a232b category: bugfix
  - hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP mainline inclusion commit 0522be9a0c0094088ccef7aab352c57f483ca250 category: bugfix
  - configure: Add missing POSIX-required space mainline inclusion commit 35a7a6fc5624b1df828d82f2dfa74d0e4188b3b2 category: bugfix
  - vga: fix incorrect line height in 640x200x2 mode mainline inclusion commit 37e7b86766244b62a406747bb78e049390d0b528 category: bugfix
  - hw/ide/core: set ERR_STAT in unsupported command completion
  - linux-user/flatload.c: Fix setting of  image_info::end_code mainline inclusion commit 734a659ad264ac080457167e845ffabbaaa66d0e category: bugfix
  - load_elf: fix iterator's type for elf file processing
  - hw/misc/mps2-scc: Free MPS2SCC::oscclk[] array on finalize()
  - hw/nvram/xlnx-efuse: Free XlnxEFuse::ro_bits[] array on finalize()
  - hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array
  - chardev/char.c: fix "abstract device type" error message
  - block/rbd: fix handling of holes in .bdrv_co_block_status
  - qga: treat get-guest-fsinfo as "best effort" mainline inclusion commit bbb0151cf2e82489120a15df5e2eb9653312b0ec category: bugfix
  - usb/hcd-xhci: check slotid in  xhci_wakeup_endpoint() mainline inclusion commit 84218892f05515d20347fde4506e1944eb11cb25 category: bugfix
  - hw/display/bcm2835_fb: Fix framebuffer allocation  address mainline inclusion commit 5865d99fe88d8c8fa437c18c6b63fb2a8165634f category: bugfix
  - block/parallels: Fix buffer-based write call mainline inclusion commit eba088f91d21d9e42a81bef847173da30c5da961 category: bugfix
  - vl: Improve error message for conflicting -incoming and -loadvm
  - hw/smbios: Fix OEM strings table option validation


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: Xia Bing <xiabing12@h-partners.com> - 0.6.7-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix "nimbus_id=0" field is not displayed when query RAS error information


author: renhongxun <renhongxun@h-partners.com> - 0.6.7-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:clear the link to rasdaemon.service when uninstalling rasdaemon
         and ensure rasdaemon restart once be upgraded


author: caixiaomeng <caixiaomeng2@huawei.com> - 0.6.7-19
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add-dynamic-switch-of-ras-events-support-and-disable-block-rq-complete


author: Bing Xia <xiabing12@h-partners.com> - 0.6.7-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix for vendor errors are not recorded in the SQLite database if 
         some cpus are offline at the system start


author: yangjunshuo <yangjunshuo@huawei.com> - 0.6.7-21
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangkai <13474090681@163.com> - 7.2.7-1
changelog:
  - Update to 7.2.7
  - Fix CVE-2021-32626 CVE-2021-32627 CVE-2021-32762 CVE-2021-32675
    CVE-2021-41099 CVE-2021-32628 CVE-2021-32687 CVE-2022-24735
    CVE-2022-24736 CVE-2022-3647 CVE-2022-3734 CVE-2022-35977
    CVE-2023-25155 CVE-2024-46981


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: wangyueliang <wangyueliang@kylinos.cn> - 2022.16-4
changelog:
  - merge feature from branch openEuler-22.03-LTS-SP1：
  - DESC: add loongarch64 and sw_64 support
  - AUTHOR: panchenbo <panchenbo@kylinsec.com.cn>


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-4
changelog:
  - Type:CVES
  - ID:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126
  - SUG:NA
  - DESC:CVE-2024-26141 CVE-2024-26146 CVE-2024-25126


author: zouzhimin <zouzhimin@kylinos.cn> - 1:2.2.3.1-5
changelog:
  - Type:CVES
  - ID:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572
  - SUG:NA
  - DESC:CVE-2022-44570 CVE-2022-44571 CVE-2022-44572


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the problem that function cpu_report_result() is called more than once
         fix error handling


author: zhuofeng <zhuofeng2@huawei.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix syssentry fails to be started when cpu_sentry is not installed


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:optimize the handing of cat-cli error msg in cpu_sentry
         over threshold should be warn level log in cat-cli


author: luckky <guodashun1@huawei.com> - 1.0.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix uint8 bug and change page isolation threshold default value


author: luckky <guodashun1@huawei.com> - 1.0.2-20
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: update the commit of the log level and format function of sysSentry


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: zhangyao <zhangyao108@huawei.com> - 249-91
changelog:
  - add backport-userdb-Use-json_dispatch_user_group_name-to-parse-Ge.patch
        backport-README-explicitly-note-that-util-linux-s-mount-swap-.patch
        backport-man-fix-section-number.patch
        backport-repart-fix-invalid-errno-in-log.patch
        backport-sysusers-insist-that-root-group-is-0.patch
        backport-importd-Always-specify-file-unpacked-by-tar.patch
        backport-docs-remove-dev-tty-confusion.patch


author: zhangyao <zhangyao108@huawei.com> - 249-92
changelog:
  - wait-online: fix handling of unmanaged state
  - add backport-wait-online-make-manager_link_is_online-return-0-whe.patch


author: zhangyao <zhangyao108@huawei.com> - 249-95
changelog:
  - add backport-cgroup-util-introduce-cg_is_threaded.patch
        backport-core-execute-warn-when-threaded-mode-is-detected.patch


author: zhangyao <zhangyao108@huawei.com> - 249-96
changelog:
  - backport upstream patch to solve systemd-shutdown hang all the time caused by fsync blocked by absence of DM mapping table


author: zhangyao <zhangyao108@huawei.com> - 249-97
changelog:
  - add backport-logind-give-better-error-messages-when-failing-to-at.patch
        backport-sd-journal-refuse-entry-objects-with-an-empty-boot-I.patch
        backport-fs-util-readlinkat-supports-an-empty-string.patch
        backport-exec-invoke-correct-dont_close-size.patch
        backport-core-Fix-file-descriptor-leak.patch
        backport-core-fix-NULL-pointer-dereference-during-deserializa.patch
        backport-core-service-fix-accept-socket-deserialization.patch
        backport-resolved-correct-parsing-of-OPT-extended-RCODEs.patch
        backport-coredump-correctly-take-tmpfs-size-into-account-for-.patch
        backport-sysusers-handle-NSS-errors-gracefully.patch
        backport-shared-log-error-when-execve-fail.patch


author: wangyuhang <wangyuhang27@huawei.com> - 249-98
changelog:
  - add backport-run-split-out-creation-of-unit-creation-messages.patch
        backport-run-pass-the-pty-slave-fd-to-transient-service.patch
        backport-run-do-not-pass-the-pty-slave-fd-to-transient-servic.patch
        backport-sd-event-do-not-assert-on-invalid-signal.patch
        backport-sd-event-change-error-code-EINVAL-EIO.patch
        backport-basic-log-do-not-treat-all-negative-errnos-as-synthe.patch
        backport-sd-ipv4acd-fix-assertion-triggered-when-an-ARP-recei.patch
        backport-main-reopen-dev-console-for-user-service-manager.patch
        backport-log-add-common-helper-log_set_target_and_open.patch
        backport-resolved-log-error-messages-for-openssl-gnutls-conte.patch
        backport-journalctl-erase-verify-key-before-free.patch
        backport-core-service-use-log_unit_-where-appropriate.patch
        backport-manager-log-unit-pid-of-sender-when-Reload-is-called.patch
        backport-Manager-also-log-caller-of-daemon-reexec.patch
        backport-manager-improve-message-about-Reload-Reexec-requests.patch
        backport-core-fix-null-in-output.patch
        backport-core-Bump-log-level-of-reexecute-request-to-notice.patch
        backport-core-Log-in-more-scenarios-about-which-process-initi.patch


author: zhangyao <zhangyao108@huawei.com> - 249-89
changelog:
  - add backport-man-fix-directory-for-user-home-bind-mounts.patch
        backport-nspawn-fix-directory-in-logged-error.patch
        backport-test-boot-timestamp-Handle-ERANGE-error.patch


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


author: wangkai <13474090681@163.com> - 1:9.0.100-1
changelog:
  - Update to 9.0.100 for fix CVE-2024-56337
  - Add a check to ensure that, if one or more web applications are potentially vulnerable to CVE-2024-56337,
    the JVM has been configured to protect against the vulnerability and to configure the JVM correctly if not.


author: Liu Chao <liuchao173@huawei.com> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)


author: gaihuiying <eaglegai@163.com> - 1.13.2-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change run directory from /var/run to /run to fix "/usr/lib/tmpfiles.d/unbound.conf:1: xxxx"


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: yanglu <yanglu72@h-partners.com> -1.20.11-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix regression caused by the fix for CVE-2024-0229 
         fix use after free related to CVE-2024-21886


author: shuaijiakun <shuaijiakun1288@phytium.com.cn> -1.20.11-32
changelog:
  - Type:feature
  - CVE:NA
  - SUG:NA
  - DESC:fix display error for ps23xx when using ast and pe2201 bmc card.


