# changelog

author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: sunhai <sunhai10@huawei.com> - 36.16.5-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix lost ntfsprogs
          fix lost nvme-cli
          fix BuildRequires


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix(anaconda-pre-log-gen): don't unnecessarily use cat and use grep -E


author: songmingliang <songmingliang@uniontech.com> - 36.16.5-38
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the root user creation GTK GUI not checking if a password
     contains the user name.
          Fix the non-root user creation Text UI not checking if a password
     contains the user name.


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: jchzhou <zhoujiacheng@iscas.ac.cn>- 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.27.9-5
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 12.3.1-38
changelog:
  - Type: Sync
  - DESC: Sync patches for fixing building issues with clang
  - Source: https://gitee.com/openeuler/gcc/pulls/239


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-7
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-84
changelog:
  - memalign: reinstate alignment overflow check (CVE-2026-0861)
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-32
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Increase input parameter checks and adjust inline data size.


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Li Nan <linan122@huawei.com> - 6.6.0-119.0.0.110
changelog:
  - !19043  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18348 Intel: Backport PMU support for Intel Clearwater Forest platform
  - !18703 ub: udma: Support loading and unloading driver.
  - !19031 v6  fuse:io_uring: support fuse over io_uring
  - !19033 ub:ubus: Add ummu_map attribute in sysfs
  - !18980  misc: uacce - fix a null pointer access issue when poweroff
  - !18519 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - !18518 iio: imu: bno055: fix OOB access of hw_xlate array
  - !18515 s390/ism: fix concurrency management in ism_cmd()
  - !18493 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - !18506 Fix CVE-2025-39781
  - !18505 Fix CVE-2025-38696
  - !18504 Fix CVE-2025-38640
  - !18503 Fix CVE-2025-39716
  - !18502 Fix CVE-2025-39767
  - !18501 Fix CVE-2025-39693
  - !18494 Fix CVE-2025-39909
  - !18497 Fix CVE-2025-39952
  - !18492 Fix CVE-2025-39916
  - !18957 [OLK-6.6] Fix CVE-2025-39846
  - !18956 [OLK-6.6] Fix CVE-2025-39842
  - !18955 [OLK-6.6] Fix CVE-2025-39861
  - !18954 [OLK-6.6] Fix CVE-2025-39794
  - !18953 [OLK-6.6] Fix CVE-2025-39863
  - !18633 [OLK-6.6] Fix CVE-2025-38715
  - !18631 [OLK-6.6]Fix CVE-2025-38698
  - !18215 [OLK-6.6] Fix CVE-2025-38576
  - !18398 btrfs: avoid NULL pointer dereference if no valid csum tree
  - !18876 Fix CVE-2025-38011
  - !18388 fs/ntfs3: handle hdr_first_de() return value
  - !18369 usb: renesas_usbhs: Reorder clock handling and power management in probe
  - !18367 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - !18321 wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - !18310 net: usb: aqc111: debug info before sanitation
  - !18309 coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - !18949 [OLK-6.6] Fix CVE-2025-38107
  - !18947 [OLK-6.6] Fix CVE-2025-38126
  - !18946 [OLK-6.6] Fix CVE-2025-38218
  - !18945 [OLK-6.6] Fix CVE-2025-38217
  - !18944 [OLK-6.6] Fix CVE-2025-38230
  - !18814 [OLK-6.6] Fix CVE-2025-38225
  - !18813 [OLK-6.6] Fix CVE-2025-38185
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18812 [OLK-6.6] Fix CVE-2025-38206
  - !18675 wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - !18432 [OLK-6.6] Fix CVE-2025-38259
  - !18244 eventpoll: don't decrement ep refcount while still holding the ep mutex
  - !18245 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - !18243 f2fs: fix to do sanity check on ino and xnid
  - !18242 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - !18246 aoe: clean device rq_list in aoedev_downdev()
  - ub: udma: Support init and uninit dfx function.
  - ub: udma: Support register and unregister segment function.
  - ub: udma: Support set eid function.
  - ub: udma: Support register and unregister ctrlq event.
  - ub: udma: Support register and unregister ce and crq event.
  - ub: udma: Support register and unregister ae event.
  - ub: udma: Register and unregister debugfs.
  - ub: udma: Create and destroy u-context.
  - ub:ubus: Add ummu_map attribute in sysfs
  - openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default
  - fuse: remove unneeded atomic set in uring creation
  - fuse: removed unused function fuse_uring_create() from header
  - fuse: {io-uring} Fix a possible req cancellation race
  - fuse: fix possible deadlock if rings are never initialized
  - fuse: fix uring race condition for null dereference of fc
  - fuse: prevent disabling io-uring on active connections
  - fuse: enable fuse-over-io-uring
  - fuse: block request allocation until io-uring init is complete
  - fuse: {io-uring} Prevent mount point hang on fuse-server termination
  - fuse: Allow to queue bg requests through io-uring
  - fuse: Allow to queue fg requests through io-uring
  - fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static
  - fuse: {io-uring} Handle teardown of ring entries
  - fuse: Add io-uring sqe commit and fetch support
  - fuse: {io-uring} Make hash-list req unique finding functions non-static
  - fuse: Add fuse-io-uring handling into fuse_copy
  - fuse: Make fuse_copy non static
  - fuse: {io-uring} Handle SQEs - register commands
  - fuse: make args->in_args[0] to be always the header
  - fuse: Add fuse-io-uring design documentation
  - fuse: Move request bits
  - fuse: Move fuse_get_dev to header file
  - fuse: rename to fuse_dev_end_requests and make non-static
  - io_uring: fix kabi broken for header file changed
  - io_uring: fix kabi broken in struct io_submit_state
  - io_uring: fix kabi broken in struct io_ring_ctx
  - io_uring: fix kabi broken in struct io_tw_state
  - io_uring: kill dead code in io_req_complete_post
  - io_uring: remove dead struct io_submit_state member
  - io_uring/cmd: let cmds to know about dying task
  - io_uring: clean up io_lockdep_assert_cq_locked
  - io_uring: refactor io_req_complete_post()
  - io_uring: remove current check from complete_post
  - io_uring: get rid of intermediate aux cqe caches
  - io_uring: refactor io_fill_cqe_req_aux
  - io_uring: remove struct io_tw_state::locked
  - io_uring: force tw ctx locking
  - io_uring/cmd: document some uring_cmd related helpers
  - io_uring/cmd: fix tw <-> issue_flags conversion
  - io_uring/cmd: kill one issue_flags to tw conversion
  - io_uring/cmd: move io_uring_try_cancel_uring_cmd()
  - io_uring/cmd: give inline space in request to cmds
  - io_uring/cmd: expose iowq to cmds
  - io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
  - io_uring: split out cmd api into a separate header
  - io_uring: cancelable uring_cmd
  - io_uring: retain top 8bits of uring_cmd flags for kernel internal use
  - !19006 ub:ubus: Bugfix of ubus and ubfi
  - !18969  arm64/mpam: Add quirk to shrink MATA PMG range
  - ub:ubus: Bugfix of ubus and ubfi
  - ub: udma: Support loading and unloading driver.
  - !18859 KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19009 v2  mm: Fix shmem build and numa fault counting errors
  - !19019  media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19026  accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - !19024  sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !19027 v11  Add xcall 2.0 support
  - xcall2.0: Introduce xcall epollwait prefetch feature
  - openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default
  - xcall2.0: Add a basic testcase
  - xcall: Add debug mode to force fast syscall for all threads
  - xcall: Rework the early exception vector of XCALL and SYNC
  - xcall2.0: Support xcall1.0 for hardware xcall
  - xcall2.0: Hajack syscall with dynamic instruciton replace
  - xcall2.0: Add xcall_area
  - xcall2.0: Add xcall module register interface
  - xcall2.0: Add userspace proc interface
  - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !18988  zcopy: A zero-copy data transfer mechanism
  - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - mm: fix nr_pages counting for folio in task_numa_fault
  - mm: fix shmem build errors with CONFIG_SWAP disable
  - !18970 net: unic: Support advanced functions of unic driver
  - !18964 ub: add cdma driver code
  - !18874  mm: introduce memalloc_flags_{save,restore}
  - !18428 Add ccp-mdev feature into hygon ccp driver
  - !18440 [OLK-6.6] pinctrl: Zhaoxin: Add KH-50000 support
  - !18992  blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18482 [OLK-6.6] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !18478 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KH-50000
  - !18477 [OLK-6.6] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18467 [OLK-6.6] Enhance SM3 SM4 drivers with optimizations and compatibility fixes
  - !18450 [OLK-6.6] i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - !18449 [OLK-6.6] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18447 RDMA/bnxt_re: Fix error recovery sequence
  - !18448 bnxt_en: Fix ethtool -d byte order for 32-bit values
  - !18452 bnxt_en: Fix DCB ETS validation
  - !18961  mm: add huge pfnmap support for remap_pfn_range()
  - blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18950 urma: implement netlink and memory management features.
  - !18930 ubcore: implement device registration and jetty management
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - !18960  KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - misc: uacce - fix a null pointer access issue when poweroff
  - !18966  wakeup kswapd during node_reclaim
  - !18857 Backport PLR (Power Limit Reasons) TPMI driver for 6.6
  - !17988 [OLK-6.6] Fix CVE-2025-38734
  - !18005 [OLK-6.6] Fix CVE-2025-38718
  - !18977 mm: migrate: Fix the compilation error caused by redundant semicolons
  - mm: migrate: Fix the compilation error caused by redundant semicolons
  - !18943 smb: client: validate change notify buffer before copy
  - !18942 rtc: rx8025: fix incorrect register reference
  - !18051 [OLK-6.6] [Bugfix] Bug fix for min_free_kbytes warning storms
  - !18040 [OLK-6.6] Fix CVE-2025-39808
  - ub: cdma: support for cdma kernelspace north-south compatibility requirements
  - ub: cdma: support reset function
  - ub: cdma: support RX stop flow function
  - ub: cdma: support debugfs interface
  - ub: cdma: support dma faa semantic
  - ub: cdma: support dma cas semantic
  - ub: cdma: support dma read semantic
  - ub: cdma: support dma write with notify semantic
  - ub: cdma: support dma write semantic delivery
  - ub: cdma: support dma write semantic configuration
  - ub: cdma: support kernel resource reclamation
  - !18892 CCA: Fix soft lockup bug while destroy realm
  - ubcore: implement support for UVS commands
  - ubcore: implement device registration and jetty management
  - !18968 kvm: supports hugepages POD when migrate vm
  - ubcore: add device management for character device and class operations
  - kvm: supports hugepages POD when migrate vm
  - net: unic: Debugfs supports querying IP specifications and IP entries.
  - net: unic: support subscribes to the RX stream stop and recovery interface.
  - net: unic: support config/query traffic class parameters
  - net: unic: support config/query ets parameters
  - net: unic: Add debugfs support for QoS configuration and query.
  - net: unic: support config/query the mapping between dscp and tc
  - net: unic: Support RAS
  - net: unic: Drive supports ub entity reset.
  - net: unic: Support to query and clear historical NIC link status information
  - net: unic: support querying and configuring coalesce parameters.
  - net: unic: Add debugfs for JFS/JFR/JFC context.
  - net: unic: Support driver dump register.
  - arm64/mpam: Merge redundant local static variables 'cpus'
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !18963 kvm: supports hugepages reclaime notify
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arch_numa: Make node reclaim distance adjustment always available
  - kvm: supports hugepages reclaime notify
  - !18940 [OLK-6.6][linux-6.6.y sync] Backport 6.6.86-6.6.87 LTS Patches
  - arm64/x86: configs: Enable huge pfnmap support in openeuler defconfig
  - mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping
  - pgtable: add pte_clrhuge() implementation for arm64
  - arm64: mm: Drop dead code for pud special bit handling
  - mm/huge_memory: check pmd_special() only after pmd_present()
  - mm/arm64: support large pfn mappings
  - mm/x86: support large pfn mappings
  - mm: always define pxx_pgprot()
  - mm/fork: accept huge pfnmap entries
  - mm/pagewalk: check pfnmap for folio_walk_start()
  - mm/gup: detect huge pfnmap entries in gup-fast
  - mm: allow THP orders for PFNMAPs
  - mm: mark special bits for huge pfn mappings when inject
  - mm: drop is_huge_zero_pud()
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud
  - !18841 mm: add auxillary functions for folios and hugetlb
  - !18896 kvm: add struct kvm if only CONFIG_KVM enabled
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - mm: hugetlb: add putback_hugetlb_folio()
  - mm: hugetlb: add get_hugetlb_folio_nodemask() mm: hugetlb: add filter function to dequeue hugetlb functions
  - mm: migrate: add isolate_and_migrate_folios()
  - kvm: add struct kvm if only CONFIG_KVM enabled
  - !18908 [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - !18376 net: wangxun: ngbe: add support for wangxun 1G
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
  - ocfs2: prevent release journal inode after journal shutdown
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
  - !18887 urma: implement ubcore sysfs interface and device management
  - !18685 ub: add cdma driver code
  - !18684 ub: ub_fwctl:Add the ub_fwctl driver
  - net_sched: ets: fix a race in ets_qdisc_change()
  - [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
  - !18928 gmem: fix some warnings
  - !18938 dma-mapping: benchmark: add support for UB devices
  - f2fs: fix to do sanity check on sit_bitmap_size
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
  - jfs: validate AG parameters in dbMount() to prevent crashes
  - fs/jfs: consolidate sanity checking in dbMount
  - jfs: add sanity check for agwidth in dbMount
  - perf: Fix dangling cgroup pointer in cpuctx
  - nfsd: decrease sc_count directly if fail to queue dl_recall
  - tracing: Do not add length to print format in synthetic events
  - ksmbd: fix memory leak in parse_lease_state()
  - ipv6: Align behavior across nexthops during path selection
  - gre: Fix IPv6 multicast route creation.
  - gre: Fix again IPv6 link-local address generation.
  - Revert "drm/amd: Keep display off while going into S4"
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices"
  - Revert "PCI: Avoid reset when disabled via sysfs"
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
  - tracing: Do not use PERF enums when perf is not defined
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
  - nfsd: put dl_stid if fail to queue dl_recall
  - exec: fix the racy usage of fs_struct->in_exec
  - jfs: add index corruption check to DT_GETPAGE()
  - ext4: fix OOB read when checking dotdot dir
  - ext4: don't over-report free space or inodes in statvfs
  - arm64: Don't call NULL in do_compat_alignment_fixup()
  - tracing: Fix synth event printk format for str fields
  - tracing: Ensure module defining synth event cannot be unloaded while tracing
  - ksmbd: add bounds check for create lease context
  - ksmbd: add bounds check for durable handle context
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
  - mmc: omap: Fix memory leak in mmc_omap_new_slot
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
  - kunit/overflow: Fix UB in overflow_allocation_test
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
  - platform/x86: ISST: Correct command storage data length
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
  - x86/hyperv: Fix check of return value from snp_set_vmsa()
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
  - media: imx-jpeg: Cleanup after an allocation error
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
  - smb: client: validate change notify buffer before copy
  - ub: cdma: support register segment
  - ub: cdma: support unregister segment
  - ub: cdma: support reporting completed events
  - ub: cdma: support reporting asynchronous events
  - ub: cdma: support the creation of jfs
  - ub: cdma: support the deletion of jfs
  - ub: cdma: support the creation of ctp
  - ub: cdma: support the deletion of ctp
  - ub: cdma: support the creation of jfc
  - ub: cdma: support the deletion of jfc
  - ub: cdma: support for releasing queue
  - ub: cdma: support for allocating queue
  - ub: cdma: support for getting device by eid
  - ub: cdma: support for getting device list
  - ub: cdma: support querying sl information and updating eu
  - ub: cdma: support the probe and remove processes
  - !18906 v2  Add MFS Support
  - rtc: rx8025: fix incorrect register reference
  - !18920 perf: Fix tt_core mismatch over PG CPU
  - !18934  mm/thp: Add a new sysfs knob for zero COW
  - !18845  fs/resctrl: Fix the L3 CMAX conversion mechanism
  - !18858 ub: ubase: Support debugs functions
  - !18853 net: unic: add support of unic driver for ub network
  - !18901 ub:hisi-ubus: Support HISI-UBUS driver framework
  - !18927  mm: add nr_free_highatomic in show_free_areas
  - !18929 v2:mm/swap: get the swap device offset directly
  - perf/core: Fix child_total_time_enabled accounting bug at task exit
  - drm/amdgpu/gfx11: fix num_mec
  - ipv6: Do not consider link down nexthops in path selection
  - ipv6: Start path selection from the first nexthop
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
  - vsock: avoid timeout during connect() if the socket is closing
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
  - e1000e: change k1 configuration on MTP and later platforms
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
  - RISC-V: errata: Use medany for relocatable builds
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
  - ntb: intel: Fix using link status DB's
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
  - spufs: fix a leak in spufs_create_context()
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
  - memory: omap-gpmc: drop no compatible check
  - can: statistics: use atomic access in hot path
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
  - drm/amd: Keep display off while going into S4
  - nvme-pci: fix stuck reset on concurrent DPC and HP
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
  - x86/hyperv: Fix output argument to hypercall that changes page visibility
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
  - sched/deadline: Use online cpus for validating runtime
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
  - HID: i2c-hid: improve i2c_hid_get_report error message
  - platform/x86/intel/vsec: Add Diamond Rapids support
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
  - cifs: fix incorrect validation for num_aces field of smb_acl
  - perf/core: Fix perf_pmu_register() vs. perf_init_event()
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio
  - affs: don't write overlarge OFS data block size fields
  - affs: generate OFS sequence numbers starting at 1
  - wifi: brcmfmac: keep power during suspend if board requires it
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
  - nvme-pci: clean up CMBMSC when registering CMB fails
  - wifi: iwlwifi: mvm: use the right version of the rate API
  - wifi: iwlwifi: fw: allocate chained SG tables for dump
  - rcu-tasks: Always inline rcu_irq_work_resched()
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
  - sched/smt: Always inline sched_smt_active()
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
  - objtool: Fix segfault in ignore_unreachable_insn()
  - ring-buffer: Fix bytes_dropped calculation issue
  - net/mlx5e: SHAMPO, Make reserved size independent of page size
  - ksmbd: fix multichannel connection failure
  - ksmbd: use aead_request_free to match aead_request_alloc
  - rndis_host: Flag RNDIS modems as WWAN devices
  - exfat: fix the infinite loop in exfat_find_last_cluster()
  - NFS: Shut down the nfs_client only after all the superblocks
  - perf tools: annotate asm_pure_loop.S
  - fs/procfs: fix the comment above proc_pid_wchan()
  - tty: n_tty: use uint for space returned by tty_write_room()
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
  - perf python: Check if there is space to copy all the event
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space
  - perf python: Decrement the refcount of just created event on failure
  - perf python: Fixup description of sample.id event member
  - i3c: master: svc: Fix missing the IBI rules
  - um: hostfs: avoid issues on inode number reuse by host
  - um: remove copy_from_kernel_nofault_allowed
  - selftests/mm/cow: fix the incorrect error handling
  - fuse: fix dax truncate/punch_hole fault path
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
  - kexec: initialize ELF lowest address to ULONG_MAX
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
  - perf units: Fix insufficient array space
  - perf evlist: Add success path to evlist__create_syswide_maps
  - iio: adc: ad7124: Fix comparison of channel configs
  - iio: adc: ad4130: Fix comparison of channel setups
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
  - fs/ntfs3: Prevent integer overflow in hdr_first_de()
  - usb: xhci: correct debug message page size calculation
  - perf bench: Fix perf bench syscall loop count
  - perf arm-spe: Fix load-store operation checking
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
  - ucsi_ccg: Don't show failed to get FW build information error
  - perf pmu: Don't double count common sysfs and json events
  - coresight-etm4x: add isb() before reading the TRCSTATR
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - coresight: catu: Fix number of pages while using 64k pages
  - soundwire: slave: fix an OF node reference leak in soundwire slave device
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
  - perf stat: Fix find_stat for mixed legacy/non-legacy events
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
  - leds: Fix LED_OFF brightness race
  - mfd: sm501: Switch to BIT() to mitigate integer overflows
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
  - crypto: nx - Fix uninitialised hv_nxc on error
  - power: supply: max77693: Fix wrong conversion of charge input threshold value
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
  - clk: amlogic: g12a: fix mmc A peripheral clock
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
  - selftests/bpf: Select NUMA_NO_NODE to create map
  - clk: amlogic: gxbb: drop non existing 32k clock parent
  - clk: amlogic: g12b: fix cluster A parent data
  - pinctrl: tegra: Set SFIO mode to Mux Register
  - IB/mad: Check available slots before posting receive WRs
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  - RDMA/mlx5: Fix calculation of total invalidated pages
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
  - pinctrl: renesas: rza2: Fix missing of_node_put() call
  - lib: 842: Improve error handling in sw842_compress()
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
  - RDMA/mana_ib: Ensure variable err is initialized
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
  - clk: samsung: Fix UBSAN panic in samsung_clk_init()
  - selftests/bpf: Fix string read in strncmp benchmark
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock
  - fbdev: sm501fb: Add some geometry checks.
  - mdacon: rework dependency list
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode
  - PCI: histb: Fix an error handling path in histb_pcie_probe()
  - drm/amd/display: avoid NPD when ASIC does not support DMUB
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
  - PCI: Remove stray put_device() in pci_register_host_bridge()
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
  - PCI: Avoid reset when disabled via sysfs
  - PCI/portdrv: Only disable pciehp interrupts early when needed
  - PCI: brcmstb: Fix potential premature regulator disabling
  - PCI: brcmstb: Use internal register to change link capability
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing
  - drm/msm/dpu: don't use active in atomic_check()
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
  - PCI: Use downstream bridges for distributing resources
  - drm: xlnx: zynqmp: Fix max dma segment size
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly
  - drm/dp_mst: Fix drm RAD print
  - drm/bridge: ti-sn65dsi86: Fix multiple instances
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
  - ALSA: hda/realtek: Always honor no_shutup_pins
  - dt-bindings: vendor-prefixes: add GOcontroll
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
  - ASoC: cs35l41: check the return value from spi_setup()
  - platform/x86: dell-ddv: Fix temperature calculation
  - media: platform: allgro-dvt: unregister v4l2_device on the error path
  - media: verisilicon: HEVC: Initialize start_bit field
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
  - x86/traps: Make exc_double_fault() consistently noreturn
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
  - PM: sleep: Fix handling devices with direct_complete set on errors
  - EDAC/ie31200: Fix the error path order of ie31200_init()
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
  - selinux: Chain up tool resolving errors in install_policy.sh
  - RISC-V: KVM: Disable the kernel perf counter during configure
  - PM: sleep: Adjust check before setting power.must_resume
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
  - x86/platform: Only allow CONFIG_EISA for 32-bit
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
  - x86/fpu: Fix guest FPU state buffer allocation size
  - smack: dont compile ipv6 code unless ipv6 is configured
  - cpufreq: scpi: compare kHz instead of Hz
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
  - watch_queue: fix pipe accounting mismatch
  - ub: ub_fwctl: support ummu data processing
  - ub: ub_fwctl: query the MSG queue information and entry details within UB.
  - ub: ub_fwctl: support querying SCC and io_die related information.
  - ub: ub_fwctl: support querying UB link trace information.
  - ub: ub_fwctl: Support Dump register.
  - ub: ub_fwctl: supports querying and configuring some scattered registers.
  - ub: ub_fwctl: supports querying TP, BA related register information
  - dma-mapping: benchmark: add support for UB devices
  - ub: ub_fwctl: supports querying NL, TA, DL related register information
  - ub: ub_fwctl: Add some simple common framework functions
  - ub: ub_fwctl: Add the ub_fwctl driver and its basic features.
  - mm/thp: Add a new sysfs knob for zero COW
  - !18803  arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - net: unic: support querying and configuring queue parameters.
  - net: unic: support querying and configuring the number of queues.
  - net: unic: support querying and configuring simple RSS.
  - net: unic: support querying and configuring promisc.
  - net: unic: support querying and configuring MTU.
  - net: unic: support querying and configuring FEC parameters.
  - net: unic: add fec statistic support
  - net: unic: add rack ip for unic
  - net: unic: add io basic Rx/Tx functionality for unic
  - net: unic: add support of unic driver for ub network
  - !18914  misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - !18915  scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - !18916  software node: Correct a OOB check in software_node_get_reference_args()
  - !18917  KVM: x86: use array_index_nospec with indices that come from guest
  - !18877 iommu/ummu: Implement IOMMU ops and advanced capabilities.
  - mm/swap: get the swap device offset directly
  - mm: add nr_free_highatomic in show_free_areas
  - ub:ubus: reserve space for ub subsystem related structure
  - ub:hisi-ubus: Support UBUS configure EID-UPI table
  - ub:hisi-ubus: Support UBUS vdm entity enable message
  - ub:hisi-ubus: Support for MSGQ's debugging functionality
  - urma: implement ubcore sysfs interface and device management
  - mm: migrate: add isolate_folio_to_list()
  - urma: implement ubcore basic connection and bonding support
  - urma: add network framework facilities for ubcore.
  - urma: add tp table support and related cmd header for ubcore.
  - CCA: unmap state2 range can block to fix soft lockup while destroy realm
  - config: enable config for PLR
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID
  - perf: Fix tt_core mismatch over PG CPU
  - iommu/ummu: Add UMMU trace log
  - iommu/ummu: Support UMMU identity mapping
  - iommu/ummu: Add UB Memory support
  - iommu/ummu: Support UMMU iopf capability
  - iommu/ummu: Support UMMU nested mode
  - iommu/ummu: Add SVA API support to UMMU driver
  - iommu/ummu: Implement iommu_ops and iommu_domain_ops for UMMU driver
  - iommu/ummu: Implement domain and core ops in logic UMMU framework
  - iommu/ummu: Implement MPAM for QoS
  - iommu/ummu: Support UMMU attribute show and store operations
  - iommu/ummu: Implement IOMMU ops forwarding in logic UMMU framework
  - iommu/ummu: Support UMMU page table management
  - iommu/ummu: Introduce logic UMMU framework
  - iommu/ummu: Add UMMU permission queue
  - iommu/ummu: Add grant and ungrant operations for permission table
  - iommu/ummu: Add UMMU permission table memory management
  - iommu/ummu: Add UMMU private implementation
  - iommu/ummu: Add manager for UMMU permission table
  - iommu/ummu: Add tct/tect ops for configuration table
  - iommu/ummu: Support UMMU configuration table management
  - ub: ubase: Support querying dev caps.
  - ub: ubase: Supports the query of UBCL config.
  - ub: ubase: add function that query aeq/ceq/tp/tpg context
  - KVM: x86: use array_index_nospec with indices that come from guest
  - software node: Correct a OOB check in software_node_get_reference_args()
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - mfs: tool: Add mfs user space tool demo
  - mfs: Optimize mfs syncer process and metadata ops
  - mfs: enable MFS
  - MAINTAINERS: Add maintainer for mfs
  - mfs: Add MFS documentation
  - mfs: Add tracepoint for MFS
  - mfs: Add user command for handling events
  - mfs: Add communication devie and event acquisition operations
  - mfs: Add basic events framework
  - mfs: Add basic cache framework: check method and control structure
  - mfs: Add basic data operation for MFS
  - mfs: Add basic metadata operation for MFS
  - mfs: implement the mount procedure
  - mfs: Initialize mfs module
  - platform/x86/intel: power-domains: Add Clearwater Forest support
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits()
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits
  - platform/x86/intel: TPMI domain id and CPU mapping
  - platform/x86/intel/tpmi: Add API to get debugfs root
  - platform/x86/intel/tpmi: Add support for performance limit reasons
  - batman-adv: Switch to linux/array_size.h
  - ub:hisi-ubus: Support MSGQ queue exception handling
  - ub:hisi-ubus: Support for processing CQ request messages
  - ub:hisi-ubus: Provide callback functions for message devices
  - ub:hisi-ubus: Support for MSGQ channel processing in SQ and CQ
  - ub:hisi-ubus: Support for hisi MSGQ framework
  - ub:hisi-ubus: Support UBUS local RAS interfaces
  - ub:hisi-ubus: Support UBUS vdm pue/ue register and release
  - ub:hisi-ubus: Support UBUS vendor defined message framework
  - ub:hisi-ubus: Add HiSilicon ubus driver framework
  - drm/amdgpu: csa unmap use uninterruptible lock
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies
  - ASoC: codec: wcd9335: Convert to GPIO descriptors
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
  - mm: introduce memalloc_flags_{save,restore}
  - ub: ubase: Added debug information query function for FST/FVT/RQMT entries
  - ub: ubase: support debugfs for active dev stats.
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  - bpf: Disable migration in nf_hook_run_bpf().
  - gmem: fix some warnings
  - parisc: Revise __get_user() to probe user read access
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting
  - drm/amd/display: Avoid a NULL pointer dereference
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - eventpoll: don't decrement ep refcount while still holding the ep mutex
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - f2fs: fix to do sanity check on ino and xnid
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - aoe: clean device rq_list in aoedev_downdev()
  - arm64/mpam: Add quirk for L3 CPBM validity check
  - fs/resctrl: Fix the L3 CMAX conversion mechanism
  - kernel.h: Move ARRAY_SIZE() to a separate header
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  - exfat: fix double free in delayed_free
  - arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - configs: Add Zhaoxin GPIO pinctrl for kh-50000 in openeuler_config
  - pinctrl: Zhaoxin: Add KH-50000 support
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - iio: imu: bno055: fix OOB access of hw_xlate array
  - s390/ism: fix concurrency management in ism_cmd()
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - btrfs: avoid NULL pointer dereference if no valid csum tree
  - fs/ntfs3: handle hdr_first_de() return value
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - net: usb: aqc111: debug info before sanitation
  - net: usb: aqc111: fix error handling of usbnet read calls
  - coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - coresight: holding cscfg_csdev_lock while removing cscfg from csdev
  - coresight: change coresight_device lock type to raw_spinlock_t
  - hfs: fix slab-out-of-bounds in hfs_bnode_read()
  - jfs: Regular file corruption check
  - net: wangxun: ngbe: add support for wangxun 1G
  - RDMA/bnxt_re: Fix error recovery sequence
  - bnxt_en: Fix ethtool -d byte order for 32-bit values
  - bnxt_en: Fix DCB ETS validation
  - Fix kabi for CWF PMU support
  - crypto: sm4 - Refactor mode handling and optimize performance
  - i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - crypto: sm3 - Refactor code and harden security
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap()
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu
  - KVM: x86/pmu: Add common define to capture fixed counters offset
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools/include: Sync x86 headers with the kernel sources
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr()
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86: Optimize the is_x86_event
  - perf/x86/intel: Check the X86 leader for ACR group
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally
  - perf/x86/intel: Support auto counter reload
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload
  - perf: Extend the bit width of the arch-specific flag
  - perf/x86/intel: Track the num of events needs late setup
  - perf/x86: Add dynamic constraint
  - perf: Extend per event callchain limit to branch stack
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
  - perf/x86/intel: Support PEBS counters snapshotting
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - perf/x86/intel: Support RDPMC metrics clear mode
  - perf/x86/intel/ds: Add PEBS format 6
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS
  - perf/x86/intel/ds: Factor out functions for PEBS records processing
  - perf/x86/intel/ds: Clarify adaptive PEBS processing
  - perf/x86/intel: Support Perfmon MSRs aliasing
  - perf/x86/intel: Support PERFEVTSEL extension
  - perf/x86: Add config_mask to represent EVENTSEL bitmask
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86: Support counter mask
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - usb: renesas_usbhs: Reorder clock handling and power management in probe
  - perf/x86/intel: Support the PEBS event mask
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - powerpc/eeh: Make EEH driver device hotplug safe
  - mm: Use pr_warn_once() for min_free_kbytes warning
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
  - sctp: linearize cloned gso packets in sctp_rcv
  - net/smc: fix UAF on smcsk after smc_listen_out()


author: Li Nan <linan122@huawei.com> - 6.6.0-121.0.0.111
changelog:
  - !19291  usbnet: Fix using smp_processor_id() in preemptible code warnings
  - !19191  Fix CVE-2025-40200
  - !19303  pid: Add a judgment for ns null in pid_nr_ns
  - !19282  fix cves
  - !19211  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19175 [OLK-6.6] Fix CVE-2025-38666
  - !18496 [OLK-6.6] Fix CVE-2025-22107
  - !18029 [OLK-6.6] Fix CVE-2025-37892
  - !19151 [OLK-6.6] Fix CVE-2025-40055
  - !19131 [OLK-6.6] Fix CVE-2025-40012
  - !19125 [OLK-6.6] Fix CVE-2025-39692
  - !19124 [OLK-6.6] Fix CVE-2025-39694
  - !19133 [OLK-6.6] Fix CVE-2025-40082
  - !19118 [OLK-6.6] Fix CVE-2025-39703
  - !19113 [OLK-6.6] Fix CVE-2025-39938
  - !19111 [OLK-6.6] Fix CVE-2025-40043
  - !19100 obmm: Ownership Based Memory Management framework
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19285  xsched: XCU Partition
  - !19293  sched/rt: Fix race in push_rt_task
  - !19294  dm-stripe: fix a possible integer overflow
  - !19278 ub: ubase: Improve performance and fix some bug
  - dm-stripe: fix a possible integer overflow
  - sched/rt: Fix race in push_rt_task
  - usbnet: Fix using smp_processor_id() in preemptible code warnings
  - xsched: move stream_lock into xsched_vsm_add_tail() to avoid sleeping in atomic context
  - xsched: rename vstream->id to vstream->sq_id
  - xsched: add null check for sched in xsched_xse_set_class
  - xsched: modify the logic for inc and dec the count value
  - xsched: replace hard-coded numeric values
  - xsched: unify root detection logic for cgroups
  - xsched: remove parent->lock and rely on cgroup_mutex for shares update
  - xsched: avoid sleeping while holding spinlock in xcu_move_task()
  - xsched: add missing spin_unlock() in xcu_move_task() error path
  - xsched: enforce valid xsched scheduler config dependencies
  - xsched: unify log prefix format and remove duplicated prefix macros
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - mm/hugetlb: unshare page tables during VMA split, not before
  - !19194  ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - !19195  iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - !19273  net/ip6_tunnel: Prevent perpetual tunnel growth
  - !19272  tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19274  netfilter: nft_objref: validate objref and objrefmap expressions
  - !19052  arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - !19182  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19179  x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - !19178  fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - !19177  ACPICA: fix acpi parse and parseext cache leaks
  - !19176  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - ub: ubase: change cmdq/mbx timeout val & fix spell error
  - ub: ubase: adapt to response message structure change for ctrlq sl query
  - net: unic: Fix UE deactivate message cleaning
  - net: unic: Use copy instead of ummu map in tx
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - net/ip6_tunnel: Prevent perpetual tunnel growth
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19257  init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - obmm: Add resource management support for imported memory
  - obmm: Add sysfs interface for configuration and monitoring
  - obmm: Add low memory management support
  - obmm: Add ownership management and transfer mechanisms
  - obmm: Add mmap support for shared memory regions
  - obmm: Add shared memory device interface
  - obmm: Add pre-import support for performance optimization
  - obmm: Add memory region import functionality
  - obmm: Add address validation and checking
  - obmm: Add user address export support
  - obmm: Add memory region export functionality
  - obmm: Implement memory pool allocator
  - obmm: Add continuous memory allocator for OBMM framework
  - obmm: Add cache maintenance helpers for inter-node consistency
  - obmm: Add region definitions and core data structures
  - obmm: Add Ownership Based Memory Management framework
  - ub:hisi-ubus: Support for ub memory decoder ras handle
  - ub:hisi-ubus: Support for UB Memory Decoder Initialization
  - ub:ubus: Support for UB Memory Decoder general layer implementation
  - !19227  bpf: Avoid RCU context warning when unpinning htab with internal structs
  - !18830  mm: swap: check for stable address space before operating on the VMA
  - init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - !19165 Documentation: Add opensource document for ubase&unic&ubl
  - !19243 Revert "net: hns3: add support for queue bonding mode of flow director"
  - !19115  nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - !19222  sctp: Fix MAC comparison to be constant-time
  - !19223  net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - !19224  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19226  sunrpc: fix null pointer dereference on zero-length checksum
  - Revert "net: hns3: add support for queue bonding mode of flow director"
  - Revert "net: hns3: add queue bonding mode support for VF"
  - Revert "net: hns3: refactor the debugfs for dumping FD tcam"
  - Revert "net: hns3: correct the logic of hclge_sync_vf_qb_mode()"
  - Revert "net: hns3: allocate fd counter for queue bonding"
  - !19166 [OLK-6.6][linux-6.6.y sync] Backport 6.6.89-6.6.90 LTS Patches
  - !19116 Fix SPI registration failure logging level
  - !19216  net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - Fix SPI registration failure logging level
  - !19072 [OLK-6.6] Fix CVE-2025-39827
  - !18647 [OLK-6.6] Fix CVE-2025-38729
  - !19117 [OLK-6.6] Fix CVE-2025-40088
  - !19114 [OLK-6.6] Fix CVE-2025-40084
  - !19048 [OLK-6.6] Fix CVE-2025-39839
  - !18615 [OLK-6.6] Fix CVE-2025-39737
  - !18791 【OLK-6.6】fix CVE-2025-39736
  - !18644 [OLK-6.6] Fix CVE-2025-38717
  - !18653 [OLK-6.6] Fix CVE-2025-38705
  - !18780 【OLK-6.6】fix  CVE-2025-38712
  - !18613 [OLK-6.6] Fix CVE-2025-38713
  - !18632 [OLK-6.6] Fix CVE-2025-38714
  - !18861 [OLK-6.6] Fix CVE-2025-38697
  - !18345 [OLK-6.6] Fix CVE-2025-38663
  - !18948 [OLK-6.6] Fix CVE-2025-38105
  - !18661 [OLK-6.6] Fix CVE-2025-39790
  - !18867 [OLK-6.6] Fix CVE-2025-39766
  - !18636 [OLK-6.6]Fix CVE-2025-39751
  - !19110  CVE-2025-40198
  - !19212  CVE-2025-40179
  - !19057  blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - !19213  Fix CVE-2025-39964
  - !19189  KVM: arm64: ipiv: change declaration argument
  - bpf: Avoid RCU context warning when unpinning htab with internal structs
  - sunrpc: fix null pointer dereference on zero-length checksum
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - sctp: Fix MAC comparison to be constant-time
  - !19214 ub: udma: recent bugfix for udma.
  - !19209  Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - !19193  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - !19206  net: dlink: handle copy_thresh allocation failure
  - !19207  net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - ub: ubase: Introduces the functions and data structures exposed by the ubase driver
  - ub: ubase: Add ubase opensource document
  - net: unic: Add a doc for unic driver
  - ub: udma: Resolve issues related to stream logout and interrupt lock.
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
  - ext4: align max orphan file size with e2fsprogs limit
  - ext4: free orphan info with kvfree
  - ext4: verify orphan file size is not too big
  - ext4: use kmalloc_array() for array space allocation
  - ub: udma: reset and segment permission issues are resolved.
  - !19203  Fix CVE-2025-40202
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: dlink: handle copy_thresh allocation failure
  - spi: tegra114: Use value to check for invalid delays
  - platform/x86/amd: pmc: Clear metrics table at start of cycle
  - dm: fix copying after src array boundaries
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
  - drivers: base: handle module_kobject creation
  - kernel: globalize lookup_or_create_module_kobject()
  - kernel: param: rename locate_module_kobject
  - xhci: split free interrupter into separate remove and free parts
  - xhci: Clean up stale comment on ERST_SIZE macro
  - xhci: Use more than one Event Ring segment
  - xhci: Set DESI bits in ERDP register correctly
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
  - ARM: dts: opos6ul: add ksz8081 phy properties
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
  - firmware: arm_scmi: Balance device refcount when destroying devices
  - sch_htb: make htb_qlen_notify() idempotent
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
  - ASoC: Use of_property_read_bool()
  - net: vertexcom: mse102x: Fix RX error handling
  - net: vertexcom: mse102x: Add range check for CMD_RTS
  - net: vertexcom: mse102x: Fix LEN_MASK
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
  - net: fec: ERR007885 Workaround for conventional TX
  - net: ipv6: fix UDPv6 GSO segmentation with NAT
  - net: dsa: felix: fix broken taprio gate states after clock jump
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
  - net: dlink: Correct endianness handling of led_mode
  - nvme-pci: fix queue unquiesce check on slot_reset
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - pds_core: make pdsc_auxbus_dev_del() void
  - pds_core: delete VF dev on reset
  - pds_core: check health in devcmd wait
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
  - !19190  Revert "ipmi: fix msg stack when IPMI is disconnected"
  - !19167  drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - ipmi: Fix handling of messages with provided receive message pointer
  - ipmi: Rework user message limit handling
  - !19134  Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - !19119  dm: fix NULL pointer dereference in __dm_suspend()
  - !19137  ext4: guard against EA inode refcount underflow in xattr update
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - net/mlx5: E-switch, Fix error handling for enabling roce
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID
  - powerpc/boot: Fix dash warning
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
  - powerpc/boot: Check for ld-option support
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - Revert "ipmi: fix msg stack when IPMI is disconnected"
  - KVM: arm64: ipiv: change declaration argument
  - !19030  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19045 net: fix the compile problem introduced by AF_UB
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - ACPICA: fix acpi parse and parseext cache leaks
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: appletalk: Fix use-after-free in AARP proxy probe
  - net: ubl: Add a doc for ubl module
  - !19161 uburma: add tp_type in urma ioctl operation.
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  - selftests/bpf: validate that tail call invalidates packet pointers
  - selftests/bpf: freplace tests for tracking of changes_packet_data
  - cpufreq: Fix setting policy limits when frequency tables are used
  - cpufreq: Avoid using inconsistent policy->min and policy->max
  - smb: client: fix zero length for mkdir POSIX create context
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - dm: always update the array size in realloc_argv on success
  - dm-integrity: fix a warning on invalid table line
  - dm-bufio: don't schedule in atomic context
  - tracing: Do not take trace_event_sem in print_event_fields()
  - spi: tegra114: Don't fail set_cs_timing when delays are zero
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
  - mm/memblock: repeat setting reserved region nid if array is doubled
  - mm/memblock: pass size instead of end to memblock_set_node()
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  - i2c: imx-lpi2c: Fix clock count when probe defers
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  - EDAC/altera: Test the correct error reg offset
  - drm/fdinfo: Protect against driver unbind
  - btrfs: fix COW handling in run_delalloc_nocow()
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
  - !19143 [OLK-6.6][linux-6.6.y sync] Backport 6.6.88-6.6.89 LTS Patches
  - uburma: add tp_type in urma ioctl operation.
  - !19132  IPIV: fix bug in live migration
  - ocfs2: fix double free in user_cluster_connect()
  - !17056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Conflicts Patches
  - !18479 [OLK-6.6] xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - !19007  uio_hv_generic: Let userspace take care of interrupt mask
  - ACPI: PPTT: Fix processor subtable walk
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
  - ata: libata-scsi: Fix CDL control
  - net: fix the compile problem introduced by AF_UB
  - objtool: Silence more KCOV warnings, part 2
  - objtool: Ignore end-of-section jumps for KCOV/GCOV
  - nvme: fixup scan failure for non-ANA multipath controllers
  - MIPS: cm: Fix warning if MIPS_CM is disabled
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  - comedi: jr3_pci: Fix synchronous deletion of timer
  - driver core: introduce device_set_driver() helper
  - x86/pvh: Call C code via the kernel virtual mapping
  - md/raid1: Add check for missing source disk in process_checks()
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  - ubsan: Fix panic from test_ubsan_out_of_bounds
  - spi: tegra210-quad: add rate limiting and simplify timeout error message
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  - loop: aio inherit the ioprio of original request
  - riscv: Provide all alternative macros all the time
  - iomap: skip unnecessary ifs_block_is_uptodate check
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  - scsi: pm80xx: Set phy_attached to zero when device is gone
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  - ext4: make block validity check resistent to sb bh corruption
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
  - timekeeping: Add a lockdep override in tick_freeze()
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  - nvmet-fc: put ref when assoc->del_work is already scheduled
  - nvmet-fc: take tgtport reference only once
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - selftests/mincore: Allow read-ahead pages to reach the end of the file
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  - objtool: Stop UNRET validation on UD2
  - nvme: multipath: fix return value of nvme_available_path
  - nvme: re-read ANA log page after ns scan completes
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  - nvme: requeue namespace scan on missed AENs
  - xen: Change xen-acpi-processor dom0 dependency
  - selftests: ublk: fix test_stripe_04
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - KVM: s390: Don't use %pK through debug printing
  - KVM: s390: Don't use %pK through tracepoints
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  - io_uring: always do atomic put from iowq
  - rtc: pcf85063: do a SW reset if POR failed
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU
  - ntb: reduce stack usage in idt_scan_mws
  - objtool, lkdtm: Obfuscate the do_nothing() pointer
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
  - objtool, panic: Disable SMAP in __stack_chk_fail()
  - objtool: Silence more KCOV warnings
  - thunderbolt: Scan retimers after device router has been enumerated
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  - usb: host: max3421-hcd: Add missing spi_device_id table
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
  - bpf: bpftool: Setting error code in do_loader()
  - s390/tty: Fix a potential memory leak bug
  - s390/sclp: Add check for get_zeroed_page()
  - parisc: PDT: Fix missing prototype warning
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  - crypto: ccp - Add support for PCI device 0x1134
  - MIPS: cm: Detect CM quirks from device tree
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  - USB: wdm: add annotation
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - USB: wdm: handle IO errors in wdm_wwan_port_start
  - USB: VLI disk crashes if LPM is used
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  - usb: dwc3: xilinx: Prevent spike in reset signal
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  - usb: cdns3: Fix deadlock when using NCM gadget
  - USB: serial: simple: add OWON HDS200 series oscilloscope support
  - USB: serial: option: add Sierra Wireless EM9291
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  - serial: sifive: lock port in startup()/shutdown() callbacks
  - serial: msm: Configure correct working mode before starting earlycon
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  - char: misc: register chrdev region with all possible minors
  - KVM: x86: Explicitly treat routing entry type changes as changes
  - mei: me: add panther lake H DID
  - scsi: Improve CDL control
  - USB: storage: quirk for ADATA Portable HDD CH94
  - ata: libata-scsi: Fix ata_msense_control_ata_feature()
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  - ata: libata-scsi: Improve CDL control
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  - KVM: SVM: Allocate IR data using atomic allocation
  - io_uring: fix 'sync' handling of io_fallback_tw()
  - LoongArch: Remove a bogus reference to ZONE_DMA
  - drm/amd/display: Force full update in gpu reset
  - drm/amd/display: Fix gpu reset in multidisplay config
  - net: phy: microchip: force IRQ polling mode for lan88xx
  - net: selftests: initialize TCP header and skb payload with zero
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible
  - virtio_console: fix missing byte order handling for cols and rows
  - LoongArch: Make do_xyz() exception handlers more robust
  - LoongArch: Make regs_irqs_disabled() more clear
  - LoongArch: Select ARCH_USE_MEMTEST
  - splice: remove duplicate noinline from pipe_clear_nowait
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  - scsi: core: Clear flags for scsi_cmnd that did not complete
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  - dma/contiguous: avoid warning about unused size_bytes
  - ceph: Fix incorrect flush end position calculation
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  - of: resolver: Simplify of_resolve_phandles() using __free()
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
  - clk: renesas: rzg2l: Refactor SD mux driver
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
  - clk: renesas: rzg2l: Add struct clk_hw_data
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags
  - arm64: tegra: Remove the Orin NX/Nano suspend key
  - iio: adc: ad7768-1: Fix conversion result sign
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  - ASoC: qcom: Fix trivial code style issues
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c
  - auxdisplay: hd44780: Convert to platform remove callback returning void
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  - soc: qcom: ice: introduce devm_of_qcom_ice_get
  - module: sign with sha512 instead of sha1 by default
  - !18797 [OLK-6.6] Fix CVE-2025-38331
  - !18978 [OLK-6.6][linux-6.6.y sync] Backport 6.6.87-6.6.88 LTS Patches
  - !19141  crash: fix crashkernel resource shrink
  - !19136  ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !18976 ubagg: implement ubagg module with ioctl interface and topology management
  - crash: fix crashkernel resource shrink
  - !19139 ub: ubase: Fix CTRLQ init process
  - !18998 uburma: implement jetty linking features.
  - ub: ubase: Fix CTRLQ init process
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !19123 ub: udma: Support udma basic transaction operations and advanced features.
  - !19122  crypto: rng - Ensure set_ent is always present
  - !19121 ub: ubase: Do some bugfix about cmdq/ctrlq message and debugfs
  - net: rose: fix a typo in rose_clear_routes()
  - urma: add ubagg ioctl interface and topology management
  - ub: udma: jetty and rct support the hugepage buffer.
  - ub: udma: Support 2M hugepage function.
  - ub: udma: Support query ub memory info.
  - ub: udma: Support query resource ratio.
  - ub: udma: Support query entity information.
  - ub: udma: Support create and destroy stars jfc.
  - ub: udma: Support create and destroy stars jfs.
  - ub: udma: Support tp context inquiry.
  - ub: udma: Support entity index inquiry.
  - ub: udma: Support device status inquiry.
  - ub: udma: Support flush jfs and jetty.
  - ub: udma: Support destroy jfs and jetty batch.
  - ub: udma: Support bind and unbind jetty.
  - ub: udma: Support dump ce aux info.
  - ub: udma: Support dump ae aux info.
  - ub: udma: Support query NPU info.
  - ub: udma: Support deactivate tp.
  - ub: udma: Support active tp.
  - ub: udma: Support get tp list.
  - ub: udma: Support rearm jfc and clean jfc.
  - ub: udma: Support poll jfc.
  - ub: udma: Support post jetty work request.
  - ub: udma: Support post jfr work request.
  - ub: udma: Support post jfs work request.
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - net: nfc: nci: Add parameter validation for packet data
  - !19103  Fix CVE-2025-40123
  - !19082 ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - KVM: arm64: ipiv: fix bug in live migration
  - KVM: arm64: ipiv: Change parameter from vcpu to kvm
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uburma: implement comprehensive jetty linking and transport features
  - uburma: implement jetty resource control and command structures
  - uburma: add uburma command and user object framework headers
  - uburma: introduce uburma basic types and helper functions
  - !19120  KVM: arm64: Fix access_actlr() build warning
  - !18952 ubcore: implement memory and netlink features.
  - ub: ubase: Fix the lose of HIMAC reset.
  - ub: ubase: flush the work queue.
  - net: unic: Fix lose vport_ctx and vport_buf information query in debugfs
  - !19091 ub: ub_fwctl: Release rpc_out when kernel state return error
  - net/smc: fix warning in smc_rx_splice() when calling get_page()
  - ub: ubase: Fix link status timestamp information
  - net: unic: Fix configure coal parameters without deactivate
  - ub: ubase: Fix CTRLQ white list
  - ub: ubase: Optimization of ubase_ctrlq_send_msg interface parameters
  - ub: ubase: Fix verification to ctrlq message seq
  - net: unic: Fix the ethtool stats and basic capability information query interface
  - ub: ubase: add CMDQ&CTRLQ compatibility code
  - ub: ubase: Fix priqos infomaton interface functions to query and check sl_bitmap
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
  - s390/sclp: Fix SCCB present check
  - net: rose: include node references in rose_neigh refcount
  - net: rose: convert 'use' field to refcount_t
  - !19058 ub: udma: udma driver TA layer resource control operation.
  - net: rose: split remove and free operations in rose_remove_neigh()
  - crypto: rng - Ensure set_ent is always present
  - KVM: arm64: Fix access_actlr() build warning
  - dm: fix NULL pointer dereference in __dm_suspend()
  - net, hsr: reject HSR frame if skb can't hold tag
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - ksmbd: transport_ipc: validate payload size before reading handle
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
  - ext4: fix string copying in parse_apply_sb_mount_options()
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  - !19081 ub:ubus: Fix X86 build error
  - ub: ub_fwctl: Release rpc_out when kernel state return error
  - fwctl:Change the CONFIG_FWCTL in the config options to m
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - ubagg: implement ubagg basic infrastructure components
  - !19093  some minor bugfix about zcopy
  - !19087 v2  Fix bugs
  - !19064 iommu/ummu:  Bugfix of ummu
  - zcopy: Remove the dump_pagetable interface
  - zcopy: Fix the incorrect mapping size passed in attach_pte_range
  - ub: udma: Add and remove jetty to jetty group.
  - ub: udma: Support import and unimport jfr and jetty.
  - iommu/ummu: Fix builds under different kconfigs
  - xcall2.0: Fix stack-out-of-bounds bug in xcall_write()
  - xcall2.0: Fix the semantic changes in xcall_enable
  - xcall2.0: Fix module unload issue by fixing refcount
  - !19071 net:nebula-matrix:fix compile err
  - !19080  KVM: arm64: ipiv: Fix compilation warning
  - !19070  xsched: XCU Partition
  - !18995  CVE-2025-40169
  - !19028 mm/slab: make __free(kfree) accept error pointers
  - ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - ub:ubus: Fix X86 build error
  - KVM: arm64: ipiv: Fix compilation warning
  - !19069  mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - !19066  arch_numa: make node_reclaim_distance_setup static
  - !19053  blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - net:nebula-matrix:fix compile err
  - xsched: Add support for CFS quota for cgroups
  - xsched: Add XCU control group implementation and its backend in xsched CFS
  - xsched: Add xsched CFS class
  - xsched: Add xsched RT class
  - xsched: Add basic scheduler core support
  - xsched: Introduce vstream management
  - xcu: Add base NPU driver support
  - xsched: Add base vstream support
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - ubcore: implement ubcore connection management and messaging feature.
  - ubcore: add segment management support to ubcore module.
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - arch_numa: make node_reclaim_distance_setup static
  - ub: udma: Support modify jfc.
  - ub: udma: Support modify jfr.
  - ub: udma: Support modify jetty.
  - ub: udma: Support modify jfs.
  - ub: udma: Support destroy jetty group.
  - ub: udma: Support create jetty group.
  - ub: udma: Support destroy jetty.
  - ub: udma: Support create jetty.
  - ub: udma: Support destroy jfc.
  - ub: udma: Support create jfc.
  - ub: udma: Support destroy jfr.
  - ub: udma: Support create jfr.
  - ub: udma: Support destroy jfs.
  - ub: udma: Support create jfs.
  - ub: udma: Support query table item from hw.
  - ub: udma: Support query jfr context from hw.
  - ub: udma: Support query jfs and jetty context from hw.
  - iommu/ummu: Fix 2P virtualization error
  - iommu/ummu: Fix ubmem unmap return value error
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - batman-adv: fix OOB read/write in network-coding decode
  - mm/slab: make __free(kfree) accept error pointers
  - Revert "mm/slab: make __free(kfree) accept error pointers"
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - md/md-bitmap: fix GPF in bitmap_get_stats()
  - igc: fix lock order in igc_ptp_reset
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - xen/x86: fix initial memory balloon target
  - pwm: mediatek: Ensure to disable clocks in error path
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
  - btrfs: fix the length of reserved qgroup to free
  - MIPS: ds1287: Match ds1287_set_base_clock() function types
  - MIPS: cevt-ds1287: Add missing ds1287.h include
  - MIPS: dec: Declare which_prom() as static
  - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
  - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
  - sign-file,extract-cert: move common SSL helper functions to a header
  - nvmet-fc: Remove unused functions
  - landlock: Add the errata interface
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete
  - LoongArch: Eliminate superfluous get_numa_distances_cnt()
  - x86/split_lock: Fix the delayed detection logic
  - x86/xen: fix memblock_reserve() usage on PVH
  - x86/xen: move xen_reserve_extra_memory()
  - Fix mmu notifiers for range-based invalidates
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  - kbuild: Add '-fno-builtin-wcslen'
  - cpufreq: Reference count policy in cpufreq_update_limits()
  - io_uring/net: fix accept multishot handling
  - drm/i915/gvt: fix unterminated-string-initialization warning
  - drm/sti: remove duplicate object names
  - drm/amdgpu/dma_buf: fix page_link check
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - drm/amd/pm/smu11: Prevent division by zero
  - drm/amd/pm/powerplay: Prevent division by zero
  - drm/amd/pm: Prevent division by zero
  - drm/amd: Handle being compiled without SI or CIK support better
  - drm/msm/a6xx: Fix stale rpmh votes from GPU
  - drm/repaper: fix integer overflows in repeat functions
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  - perf/x86/intel: Allow to update user space GPRs from PEBS records
  - scsi: ufs: exynos: Ensure consistent phy reference counts
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
  - string: Add load_unaligned_zeropad() code path to sized_strscpy()
  - smb3 client: fix open hardlink on deferred close file error
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem
  - riscv: Avoid fortify warning in syscall_get_arguments()
  - ksmbd: fix the warning from __kernel_write_iter
  - ksmbd: Prevent integer overflow in calculation of deadtime
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ovl: don't allow datadir only
  - mm: fix apply_to_existing_page_range()
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  - loop: LOOP_SET_FD: send uevents for partitions
  - loop: properly send KOBJ_CHANGED uevent for disk device
  - crypto: caam/qi - Fix drv_ctx refcount bug
  - btrfs: correctly escape subvol in btrfs_show_options()
  - Bluetooth: vhci: Avoid needless snprintf() calls
  - Bluetooth: l2cap: Process valid commands in too long frame
  - ftrace: fix incorrect hash size in register_ftrace_direct()
  - i2c: atr: Fix wrong include
  - nfs: add missing selections of CONFIG_CRC32
  - asus-laptop: Fix an uninitialized variable
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  - writeback: fix false warning in inode_to_wb()
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  - kunit: qemu_configs: SH: Respect kunit cmdline
  - riscv: Properly export reserved regions in /proc/iomem
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  - net: bridge: switchdev: do not notify new brentries as changed
  - net: b53: enable BPDU reception for management port
  - netlink: specs: rt-link: adjust mctp attribute naming
  - netlink: specs: rt-link: add an attr layer around alt-ifname
  - ata: libata-sata: Save all fields from sense data descriptor
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  - test suite: use %zu to print size_t
  - igc: add lock preventing multiple simultaneous PTM transactions
  - igc: cleanup PTP module if probe fails
  - igc: handle the IGC_PTP_ENABLED flag correctly
  - igc: move ktime snapshot into PTM retry loop
  - igc: increase wait time before retrying PTM
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  - ASoC: cs42l43: Reset clamp override on jack removal
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  - ovl: remove unused forward declaration
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  - ASoC: dwc: always enable/disable i2s irqs
  - md/md-bitmap: fix stats collection for external bitmaps
  - md/raid10: fix missing discard IO accounting
  - scsi: iscsi: Fix missing scsi_host_put() in error path
  - wifi: wl1251: fix memory leak in wl1251_tx_work
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  - Bluetooth: hci_uart: Fix another race during initialization
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
  - selftests: mptcp: fix incorrect fd checks in main_loop
  - selftests: mptcp: close fd_in before returning in main_loop
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  - PCI: Fix reference leak in pci_alloc_child_bus()
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  - of/irq: Fix device node refcount leakages in of_irq_init()
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  - of/irq: Fix device node refcount leakages in of_irq_count()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  - ntb: use 64-bit arithmetic for the MSI doorbell mask
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  - gve: handle overflow when reporting TX consumed descriptors
  - gpio: zynq: Fix wakeup source leaks on device unbind
  - gpio: tegra186: fix resource handling in ACPI probe path
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  - dm-verity: fix prefetch-vs-suspend race
  - dm-integrity: set ti->error on memory allocation failure
  - dm-ebs: fix prefetch-vs-suspend race
  - crypto: ccp - Fix check for the primary ASP device
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  - clk: qcom: gdsc: Release pm subdomains in reverse add order
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  - cifs: fix integer overflow in match_server()
  - cifs: avoid NULL pointer dereference in dbg call
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry
  - x86/xen: fix balloon target initialization for PVH dom0
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  - mm/userfaultfd: fix release hang over concurrent GUP
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uio_hv_generic: Let userspace take care of interrupt mask
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0
  - mm: fix lazy mmu docs and usage
  - mm: make page_mapped_in_vma() hugetlb walk aware
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  - sparc/mm: disable preemption in lazy mmu mode
  - iommufd: Fix uninitialized rc in iommufd_access_rw()
  - btrfs: zoned: fix zone finishing with missing devices
  - btrfs: zoned: fix zone activation with missing devices
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  - arm64: mm: Correct the update of max_pfn
  - mtd: rawnand: Add status chack in r852_ready()
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  - jbd2: remove wrong sb->s_sequence check
  - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  - i3c: master: svc: Use readsb helper for reading MDB
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions
  - udf: Fix inode_getblk() return value
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit
  - f2fs: fix to avoid atomicity corruption of atomic file
  - ext4: fix off-by-one error in do_split
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  - ASoC: q6apm: add q6apm_get_hw_pointer helper
  - io_uring/kbuf: reject zero sized provided buffers
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  - wifi: mt76: Add check for devm_kstrdup()
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  - mtd: Replace kcalloc() with devm_kcalloc()
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  - mtd: Add check for devm_kcalloc()
  - mptcp: sockopt: fix getting IPV6_V6ONLY
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove
  - media: venus: hfi_parser: add check to avoid out of bound access
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  - media: i2c: ov7251: Set enable GPIO low in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  - media: platform: stm32: Add check for clk_enable()
  - media: visl: Fix ERANGE error when setting enum controls
  - media: streamzap: prevent processing IR data on URB failure
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  - spi: cadence-qspi: Fix probe on AM62A LP SK
  - xenfs/xensyms: respect hypervisor's "next" indication
  - media: siano: Fix error handling in smsdvb_module_init()
  - media: vim2m: print device name after registering device
  - media: venus: hfi: add check to handle incorrect queue size
  - media: venus: hfi: add a check to handle OOB in sfr region
  - media: i2c: adv748x: Fix test pattern selection mask
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0
  - pwm: rcar: Improve register calculation
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  - drm/amdgpu: grab an additional reference on the gang fence v2
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  - drm/amdkfd: debugfs hang_hws skip GPU with MES
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  - drm/amdkfd: clamp queue size to minimum
  - drivers: base: devres: Allow to release group on device release
  - drm/bridge: panel: forbid initializing a panel with unknown connector type
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  - drm: panel-orientation-quirks: Add support for AYANEO 2S
  - drm/amd/display: add workaround flag to link to force FFE preset
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always
  - drm: allow encoder mode_set even when connectors change for crtc
  - Bluetooth: qca: simplify WCN399x NVM loading
  - Bluetooth: hci_uart: fix race during initialization
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
  - net: vlan: don't propagate flags on open
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  - Revert "f2fs: rebuild nat_bits during umount"
  - ext4: protect ext4_release_dquot against freezing
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  - net: sfp: add quirk for 2.5G OEM BX SFP
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  - jfs: add sanity check for agwidth in dbMount
  - fs/jfs: cast inactags to s64 to prevent potential overflow
  - net: usb: asix_devices: add FiberGecko DeviceID
  - scsi: target: spc: Fix RSOC parameter data header size
  - f2fs: don't retry IO for corrupted data scenario
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  - ASoC: amd: yc: update quirk data for new Lenovo model
  - ASoC: amd: Add DMI quirk for ACP6X mic support
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  - media: uvcvideo: Add quirk for Actions UVC05
  - ASoC: fsl_audmix: register card device depends on 'dais' property
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  - ALSA: hda: intel: Fix Optimus when GPU has no sound
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets
  - bpf: Reject negative offsets for ALU ops
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  - HID: pidff: Add PERMISSIVE_CONTROL quirk
  - HID: pidff: Add MISSING_PBO quirk and its detection
  - HID: pidff: Add MISSING_DELAY quirk and its detection
  - HID: pidff: Do not send effect envelope if it's empty
  - HID: pidff: Convert infinite length from Linux API to PID standard
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
  - xen/mcelog: Add __nonstring annotations for unterminated strings
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
  - x86/ia32: Leave NULL selector values 0~3 unchanged
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  - umount: Allow superblock owners to force umount
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  - nvmet-fcloop: swap list_add_tail arguments
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  - drm/tests: probe-helper: Fix drm_display_mode memory leak
  - drm/tests: modes: Fix drm_display_mode memory leak
  - drm/tests: cmdline: Fix drm_display_mode memory leak
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  - drm/tests: helpers: Fix compiler warning
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
  - drm/tests: Add helper to create mock crtc
  - drm/tests: Add helper to create mock plane
  - drm/tests: helpers: Add atomic helpers
  - drm/tests: modeset: Fix drm_display_mode memory leak
  - net: ethtool: Don't call .cleanup_data when prepare_data fails
  - tc: Ensure we have enough buffer space when sending filter netlink notifications
  - net/sched: cls_api: conditional notification of events
  - rtnl: add helper to check if a notification is needed
  - rtnl: add helper to check if rtnl group has listeners
  - octeontx2-pf: qos: fix VF root node parent queue index
  - net: tls: explicitly disallow disconnect
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  - drm/i915: Disable RPG during live selftest
  - drm/i915/dg2: wait for HuC load completion before running selftests
  - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
  - drm/i915/mocs: use to_gt() instead of direct &i915->gt
  - selftests/futex: futex_waitv wouldblock test should fail
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - jfs: upper bound check of tree index in dbAllocAG
  - mm: swap: check for stable address space before operating on the VMA
  - net: ethernet: cortina: Use TOE/TSO on all TCP
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - bus: mhi: host: Detect events pointing to unexpected TREs
  - drm/amd/pm: fix null pointer access
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  - net: kcm: Fix race condition in kcm_unattach()
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - usb: xhci: Fix slot_id resource race conflict
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - nilfs2: reject invalid file types when reading inodes
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - freezer, sched: Report frozen tasks as 'D' instead of 'R'
  - io_uring/sqpoll: fix sqpoll error handling races
  - i2c: microchip-core: actually use repeated sends
  - PCI/MSI: Handle lack of irqdomain gracefully
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805
  - i2c: microchip-core: fix "ghost" detections


author: Li Nan <linan122@huawei.com> - 6.6.0-125.0.0.112
changelog:
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - !19402  sched: Fix incorrect cluster mask
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - !19327 ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - !19338 iommu/ummu: Fix UMMU documentation error
  - !19287 net: unic: Add support for uboe and ethernet related tools
  - !19337 ub: udma: Support retrieving the migr field.
  - zcopy: Fix context switch within RCU read-side error
  - ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - iommu/ummu: Fix UMMU documentation error
  - !19332 ub: udma: add requirement about document and tp attr.
  - !19330 iommu/ummu: Add UMMU documentation description
  - bpf: Sync pending IRQ work before freeing ring buffer
  - ub: udma: Support retrieving the migr field.
  - !18794 【OLK-6.6】fix CVE-2025-39801
  - ub: udma: Support eid and guid updates.
  - ub: udma: bugfix for set and get tp attr.
  - !18453 [OLK-6.6] ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - !18483 [OLK-6.6] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - iommu/ummu: Add UMMU-PMU devicetree file
  - iommu/ummu: Add UMMU devicetree file
  - iommu/ummu: Add UMMU documentation description
  - ub: udma: mask jetty context addr info.
  - ub: udma: add udma driver module doc.
  - ub: ubase: Remove non-cluster mode code
  - net: unic: Add support for uboe reset
  - net: unic: Add support for MAC statistics
  - net: unic: Add pause frame support.
  - net: unic: Add Priority Flow Control (PFC) support
  - net: unic: Add debugfs support for dumping MAC tables.
  - net: unic: Supports MAC filter, and allows users to add and delete MAC
  - net: unic: Add debugfs support for dumping vlan table
  - net: unic: Integrate valn filtering features with network device operations.
  - net: unic: Add valn filtering support.
  - net: unic: Add support for querying link diagnosis status
  - net: unic: Extend loopback test support to include external loopback modes
  - net: unic: Extend loopback test support to include serdes loopback modes.
  - net: unic: Add loopback test support.
  - net: unic: Add debugfs support for dumping hardware MAC tables.
  - net: unic: Add support for setting link speed, duplex, and autonegotiation via ethtool.
  - !19328 ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - !19264 ub: cdma: add CDMA userspace-api documentation description
  - ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - ub: cdma: add CDMA userspace-api documentation description
  - ub: cdma: add CDMA kernel driver design document specification
  - ub: cdma: add CDMA driver-api documentation description
  - !19305 ub:ubus: Add ubus and ubfi opensource document
  - !19320 urma: added functions for getting and setting TP attribute fields.
  - nfsd: don't ignore the return code of svc_proc_register()
  - ub:ubus: Add ubus devicetree file
  - urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus and ubfi opensource document
  - !19317 ub: ubase: Remove useless character '+'
  - ub: ubase: Remove useless character '+'
  - !18870 add sentry kmod
  - drivers/ub/sentry: add sentry_remote_reporter module
  - drivers/ub/sentry: add sentry_uvb_comm module
  - drivers/ub/sentry: add sentry_urma_comm module
  - drivers/ub/sentry: add sentry_reporter and sentry_msg_help
  - !19306  net: Netdev use RCU protection
  - !19290 urma: bugfix the issue of urma stream generation failure
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19292  blk-ioinf: accumulate total latency properly across sampling periods
  - !19230  drm/vmwgfx: Fix Use-after-free in validation
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - ipv6: use RCU in ip6_output()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv6: use RCU in ip6_xmit()
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - net: Add locking to protect skb->dev access in ip_output
  - net: dst: add four helpers to annotate data-races around dst->dev
  - urma: bugfix the issue of urma stream generation failure
  - acpi: provides acpi power notifier chain
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - blk-ioinf: accumulate total latency properly across sampling periods
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - drm/vmwgfx: Fix Use-after-free in validation
  - NFSv4: Fix deadlock during the running of state manager
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - ALSA: HDA: Roll back the old version for consistency with the mainline
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Li Nan <linan122@huawei.com> - 6.6.0-127.0.0.113
changelog:
  - !19620 iommufd: Prevent ALIGN() overflow
  - !19608 ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - !18634 [OLK-6.6]Fix CVE-2025-38706
  - iommufd: Prevent ALIGN() overflow
  - !19400  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - !19601  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19598  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19597  ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19354 [OLK-6.6] Fix CVE-2025-37822
  - !19355 [OLK-6.6] Fix CVE-2025-38361
  - !19563 ub: cdma: fix the timing issue during flow-based deregistration.
  - !19585 crypto: hisilicon/trng - Fix the issue where TRNG cannot be used by multiple threads.
  - !19610 perf: Fix lastup for multi-CPU PG
  - !19609 urma: fixed process exiting uburma driver's private memory UAF
  - !19592  Fix incorrect use of cpuhp_remove_multi_state parameter
  - perf: Fix lastup for multi-CPU PG
  - urma: fixed process exiting uburma driver's private memory UAF
  - !19607 Revert "RDMA/hns: Fix mismatch exception rollback"
  - ub: cdma: modify the compatibility field according to the Linux KABI specification
  - ub: cdma: fix the timing issue during flow-based deregistration.
  - ub: cdma: fix kasan cdma jfae uaf
  - ub: cdma: modify log level about en information
  - ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - !18664 [OLK-6.6] Fix CVE-2025-22039
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19558 obmm: sync obmm default params value to sysfs.
  - !19560 obmm: set MAX Numa Distance to 255
  - !19589 ub:ubus: add active_mutex in ub_entity
  - soc cache: Add compilation config for hisi_soc_l3c
  - soc cache: Don't poll before removing all locks
  - soc cache: Drop redundant vm_pgoff
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Check address while walking pages
  - soc_cache: Fix component removal order to avoid race condition
  - soc cache: cleanup: Remove the redundant check of vm_pgoff
  - soc cache: cleanup: Change type of mnt_type
  - soc cache: cleanup: avoid tag addr from interfering range validation
  - soc cache: cleanup: move judgement of soc cache dev into lock protection
  - soc cache: cleanup: fix memory leakage on error path
  - soc_cache: Fix error code returning from hisi_soc_l3c_do_lock
  - soc_cache: Fix incorrect use of cpuhp_remove_multi_state parameter
  - soc cache: cleanup: replace dynamically allocated param with local variable
  - ub:ubus: add active_mutex in ub_entity
  - !19576  Bugfix for two issues
  - crypto: hisilicon/trng - support tfms sharing the device
  - crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD()
  - Revert "crypto: hisilicon/trng - support to obtain random numbers from soft algorithm"
  - Revert "crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock"
  - !19557  Fix UAF issue for mfs
  - !19555 ub: bugfix of port, decoder and vfio
  - !19561 obmm: fix granu checking in mmap
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - ub:unic Adaptation of the port reset interface
  - !19521 uvb: change dir name
  - !19532 net: hns3: add VLAN id validation before using
  - !19271  Squashfs: fix uninit-value in squashfs_get_parent
  - !19269  media: venus: Add a check for packet size after reading from shared memory
  - !19268  eventpoll: Fix semi-unbounded recursion
  - !19267  kernfs: Relax constraint in draining guard
  - !19552  KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19551 add check ack_dono flag for reboot event
  - obmm: sync obmm default params value to module sysfs.
  - obmm: set MAX Numa Distance to 255
  - obmm: fix granu checking in mmap
  - ub:ubus adapt port local ras
  - vfio:ubus vfio-ub support ub entity enable
  - mfs: Fix UAF problem on event object when enable tracepoint
  - ub:ubus: fix bug of msg workqueue null
  - ub:hisi-ubus ub:hisi-ubus: Move the decoder's page table operations to hisi-ubus
  - add check ack_dono flag for reboot event
  - !19517 gmem: fix several issues
  - !19519  arm64/mpam: Reset mbwu_state while creating new monitor group
  - KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19530  Fix unexpected behavior in resctrl mounting
  - !19520 ub: udma: bugfix related to init xa flags.
  - !19205 [OLK-6.6] Fix CVE-2025-39732
  - !19156 [OLK-6.6] Fix CVE-2025-39684
  - !19157 [OLK-6.6] Fix CVE-2025-39675
  - net: hns3: add VLAN id validation before using
  - !19526  mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - fs/resctrl: Prevent mounting with unsupported options
  - fs/resctrl: Fix resctrl mount options display in mount list
  - ub: udma: bugfix related to init xa flags.
  - ub: udma: bugfix for rx close.
  - mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - uvb: change dir name
  - !19507  Fix some memory policy bugfix
  - arm64/mpam: Need to reset MPAM component when umounting resctrl
  - arm64/mpam: Remove the redundant prev_val member variable
  - arm64/mpam: Reset mbwu_state while creating new monitor group
  - !19508 ub: ub_fwctl: Modify the problem of incorret data when querying entry
  - !19513  zcopy: fix two issues
  - zcopy: Fix Bad rss-counter state while non-mapping pages attach
  - zcopy: Fix null pointer dereference while attach transhugepage twice to same addr
  - ub: ub_fwctl: Modify the problem of incorret data when querying entry information
  - !19357 ubios_uvb: add msleep in poll thread
  - ubios_uvb: add check for uvb window buffer size
  - !19494  crypto: hisilicon - add reference counting to queues for tfm kernel reuse
  - !19475  task_work: Fix NMI race condition
  - mempolicy: restrict smart grid scheduling to vma_alloc_folio path
  - mempolicy: fix missing mmap_read_unlock() in error path
  - ubios_uvb: add check for cis message and senderid
  - !19486 [OLK-6.6] fix possible crash caused by null pointer when hct get page.
  - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon/zip - support fallback for zip
  - crypto: hisilicon/qm - optimize device selection priority based on queue ref count and NUMA distance
  - crypto: hisilicon/qm - add reference counting to queues for tfm kernel reuse
  - crypto: hisilicon - consolidate qp creation and start in hisi_qm_alloc_qps_node
  - crypto: hisilicon/qm - centralize the sending locks of each module into qm
  - crypto: hisilicon/qm - enhance the configuration of req_type in queue attributes
  - Revert "crypto: hisilicon/hpre - support the hpre algorithm fallback"
  - crypto: hisilicon/hpre: extend tag field to 64 bits for better performance
  - crypto: hisilicon/sec - move backlog management to qp and store sqe in qp for callback
  - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
  - ubios_uvb: add msleep in poll thread
  - ccp/hct: fix possible crash caused by null pointer when hct get page.
  - task_work: Fix NMI race condition
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - drm/scheduler: signal scheduled fence when kill job
  - obmm: set up default mem allocator granule
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - smb: client: fix race with concurrent opens in rename(2)
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - drm/amd/display: Check dce_hwseq before dereferencing it
  - riscv: uprobes: Add missing fence.i after building the XOL buffer
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - Squashfs: fix uninit-value in squashfs_get_parent
  - media: venus: Add a check for packet size after reading from shared memory
  - eventpoll: Fix semi-unbounded recursion
  - kernfs: Relax constraint in draining guard
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
  - comedi: Fix initialization of data for instructions that write to subdevice
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - gmem: remove reduntant interfaces and use proper mmap flag
  - gmem: gmem_reserve_vma should use vma_flag_clear to remove flag
  - gmem: remove inpropre BUG_ON in do_peer_shared_anonymous_page
  - gmem: hmemcpy should use dma for phy addr
  - Add platform-specific quirks for ZX-200 device
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()


author: Li Nan <linan122@huawei.com> - 6.6.0-129.0.0.114
changelog:
  - !19657 xsched: simplify logging macros by removing redundant pr_fmt usage
  - !19702  XSched: List Corruption
  - !19617  Handling Kunpeng Chip ARM Spectre-BHB (CVE-2022-23960) Issue
  - xsched/cgroup: move list_del from css_free to css_offline to prevent corruption
  - xsched: protect group member list with xcu_lock to prevent corruption
  - !19696  i40e: remove read access to debugfs files
  - i40e: remove read access to debugfs files
  - !19674 obmm: bugfixes of log and race condition
  - !19644 obmm: suppport unaligned PMD mapping
  - !19683  xsched: prevent linked list corruption in RT priority updates
  - xsched: prevent linked list corruption in RT priority updates
  - obmm: Remove log pringts of physical address and kernelspace virtual address
  - obmm: Fix race condition between unexport and addr_query_by_pa
  - !19659 ubcore: fix route_list when no full match.
  - !19661 Packet throughput decreases with multiple jetty streams
  - xsched: simplify logging macros by removing redundant pr_fmt usage
  - xsched: Fix compilation by adding xsched_attr to syscalls.h
  - !19562 [OLK-6.6] virtcca: fix incorrect use of the percpu declare
  - ubcore: fix route_list when no full match.
  - obmm: display mmaped region's Pagesize
  - obmm: fix for PMD mapping
  - Packet throughput decreases with multiple jetty streams
  - virtcca: Add missing includes for DECLARE_PER_CPU
  - arm64: Add missing includes for mem_encrypt
  - !19647  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - !19097 scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - !19095 scsi: mpi3mr: Set MPI request flags appropriately
  - !19092 scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - !19086 scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - !19636  Some bugfixes for interference
  - !19639 ub: ubase: Fix spell error of month
  - ub: ubase: Fix spell error of month
  - !19637 ub: udma: bugfix related to print location.
  - !19637 ub: udma: bugfix related to print location.
  - !19638 ub:ubus: bugfix port reset in cluster mode
  - !19623 iommu/ummu: Fix the issue of uninitialized resources in logic_ummu_viommu
  - ub:ubus: bugfix port reset in cluster mode
  - ub:ubus: add hotplug capability check
  - ub:ubus: bugfix calltrace of killing qemu when rmmod hisi_ubus
  - ub: udma: bugfix related to print location.
  - iommu/ummu: Remove redundant CONFIG_UB_UBRT_PLAT_DEV and code
  - interference: Add version compatibility check between subsystem and cgroup
  - interference: Fix missing interference.stat file in v1 hierarchy
  - interference: Add fallback to sched_clock when TSC is unavailable
  - interference: Add dependency on CONFIG_SCHED_INFO to avoid build error
  - interference: Resolve arm32 build error by restricting IFS to x86/arm64
  - interference: Avoid null pointer dereference in cgroup_ifs_add_files
  - iommu/ummu-core: Duplicate EID are not allowed
  - iommu/ummu: Move tid_type attr to logic ummu
  - iommu/ummu: Fixing the issue of uninitialized resources in logic_ummu_viommu
  - !19634 crypto: hisilicon - some bugfix
  - !19628 ub:ubfi: Fix UBFI memory leak issue
  - !19616 ub: ubase&unic: Fix some bug finding in running the driver
  - !19553 perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - crypto: hisilicon - lower priority for hisilicon crypto implementations
  - crypto: hisilicon/zip - remove redundant callback validation and invocation in crypto_wait_req
  - crypto: hisilicon/zip - add algorithm check before soft tfm allocation
  - crypto: hisilicon/zip - fix a callback problem
  - crypto: hisilicon/qm - place the interrupt status interface after the PM usage counter
  - crypto: hisilicon/qm - increment PM usage counter when handling the aeq interrupt
  - crypto: hisilicon/sgl - fix inconsistent map/unmap direction issue
  - crypto: hisilicon/hpre - support curve25519 fallback for hardware queue unavailable
  - crypto: hisilicon - mask all error type when uninit
  - net: unic: Fixed the call trace issue triggered internally by the completion event interrupt
  - !19624  xsched: XCU Partition
  - !19621 ubagg: fix mismatched spin unlock.
  - iommu/ummu: Optimize chip generational compatibility feature
  - iommu/ummu: Fix VM multi-instance problem
  - ubagg: fix mismatched spin unlock.
  - net: unic: Restore tx and rx stats when setting coalesce parameters
  - ub: ubase: obtain rc_max_cnt from MAMI
  - ub: ubase: fix a issue of udma device's eid deleted when stop rx stream and reset concurrently
  - ub: ubase: add opcode to query ub port_bitmap.
  - net: unic: Restore default queue count per tc when tc number changes.
  - ub: ubase: Fix the issue of mismatch between the ubase aeqe structure and the protocol.
  - ub: ubase: add ip_over_urma API for udma.
  - ub: ubase: optimize print format of fw_ver in debugfs.
  - ub: ubase: Fix the issue of deadlock by quantities of log in the ctrlq crq task.
  - ub: ubase: Remove non-cluster mode code.
  - net: unic: Resolve the bandwidth jitter problem
  - ub:ubfi: Fix UBFI memory leak issue
  - ub:ubus: Matt and MMIO judgments are not performed in cluster
  - ub:ubus: Delete ubc cfg0 config during cluster mode
  - ub:hisi-ubus: Fix ue reg/unreg without lock bug
  - xsched: fix infinite loop caused by invalid CFS group vruntime update
  - xsched: prevent race between enqueue_ctx and xsched_task_free
  - xsched: DEBUG log cleanup
  - xsched: fix divide-by-zero caused by u64 overflow in CFS shares weight calculation
  - xsched: prevent NULL deref by refcounting css and tracking offline state
  - xsched: fix hung_task caused by cgroup_file_show and xcg_mutex deadlock
  - xsched: fix concurrent modification NULL pointer dereference in xcu.sched_class
  - xsched: fix NULL pointer risk on attach entry allocation
  - xsched: refactor CFS per-XCU rq init/deinit paths
  - iommu/ummu: NO plbi for grant, config permq need dma_wmb
  - iommu/ummu: Fix compilation option configuration about CONFIG_ACPI
  - iommu/ummu: UMMU doesn't send tect sync after delete eid
  - iommu/ummu: Delete unnecessary commands
  - config: Disable unprivileged BPF syscall by default
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - perf arm-spe: Backport perf_cpu_map__new_online_cpus()
  - perf arm-spe: Save per CPU information in metadata
  - perf arm-spe: Calculate meta data size
  - perf arm-spe: Define metadata header version 2
  - perf arm-spe: Prepare for adding data source packet implementations for other cores
  - perf arm-spe: Use old behavior when opening old SPE files
  - perf arm-spe: Set sample.addr to target address for instruction sample
  - perf color: Add printf format checking and resolve issues
  - perf arm-spe: Add Cortex CPUs to common data source encoding list
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list
  - perf arm-spe: Remove the unused 'midr' field
  - perf arm-spe: Use metadata to decide the data source feature
  - perf arm-spe: Introduce arm_spe__is_homogeneous()
  - perf arm-spe: Dump metadata with version 2
  - perf arm-spe: Support metadata version 2
  - perf arm-spe: Rename the common data source encoding
  - perf arm-spe: Rename arm_spe__synth_data_source_generic()
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - scsi: mpi3mr: Set MPI request flags appropriately
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor


author: Li Nan <linan122@huawei.com> - 6.6.0-134.0.0.115
changelog:
  - !20054 merge topo_kernel_merge_1_1 into OLK-6.6
  - !19916 merge OLK-6.6_new into OLK-6.6
  - !20030 merge topo_kernel_merge into OLK-6.6
  - urma: ubcore support expose/unexpose dev and eid set commands.
  - urma: support uvs query chip_id.
  - urma: add create, delete agg_dev and get name of agg_dev.
  - urma: adapt to new topo info for ubcore/ubagg.
  - !19992 merge patch-1767753584 into OLK-6.6
  - !19763 merge patch-1766378735 into OLK-6.6
  - Revert "NFS: fix up nfs_release_folio() to try to release the page"
  - !19697 merge refs/pull/19697/head into OLK-6.6
  - !19844 merge patch-1766802317 into OLK-6.6
  - !19712 merge refs/pull/19712/head into OLK-6.6
  - !19653 merge refs/pull/19653/head into OLK-6.6
  - !19650 merge refs/pull/19650/head into OLK-6.6
  - !19809 merge patch-1766626818 into OLK-6.6
  - !19839 merge patch-1766740817 into OLK-6.6
  - !19924 merge patch-1767513707 into OLK-6.6
  - !19925 merge patch-1767513733 into OLK-6.6
  - !18476 merge refs/pull/18476/head into OLK-6.6
  - !19871 merge patch-1766998564 into OLK-6.6
  - !19870 merge patch-1766998524 into OLK-6.6
  - !19868 merge patch-1766998223 into OLK-6.6
  - !19831 merge patch-1766714417 into OLK-6.6
  - !19830 merge patch-1766713816 into OLK-6.6
  - !19829 merge patch-1766713004 into OLK-6.6
  - !19828 merge patch-1766712979 into OLK-6.6
  - !19827 merge patch-1766712955 into OLK-6.6
  - !19826 merge patch-1766712919 into OLK-6.6
  - !19711 merge refs/pull/19711/head into OLK-6.6
  - !19810 merge patch-1766626870 into OLK-6.6
  - !19843 merge patch-1766799391 into OLK-6.6
  - !19909 merge patch-1767491328 into OLK-6.6
  - !19799 merge patch-1766495417 into OLK-6.6
  - !19807 merge patch-1766567019 into OLK-6.6
  - !19895 merge patch-1767085921 into OLK-6.6
  - !19926 merge patch-1767515451 into OLK-6.6
  - !19656 merge refs/pull/19656/head into OLK-6.6
  - !19923 merge patch-1767513671 into OLK-6.6
  - !19928 merge patch-1767515719 into OLK-6.6
  - !19859 merge patch-1766977633 into OLK-6.6
  - !19860 merge patch-1766977668 into OLK-6.6
  - !19884 merge patch-1767076134 into OLK-6.6
  - !19913 merge patch-1767493335 into OLK-6.6
  - !19914 merge patch-1767493378 into OLK-6.6
  - !19915 merge patch-1767493397 into OLK-6.6
  - mfs: Avoid UAF on cache object when anon_file is release
  - mfs: avoid deadlock when the cache layer is modified
  - mfs: remove FAROUND event to avoid context switch during map_pages
  - !19612 merge refs/pull/19612/head into OLK-6.6
  - !19733 merge refs/pull/19733/head into OLK-6.6
  - !19729 merge refs/pull/19729/head into OLK-6.6
  - !19720 merge refs/pull/19720/head into OLK-6.6
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
  - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
  - bpf: Free special fields when update [lru_,]percpu_hash maps
  - !19846 merge patch-1766818825 into OLK-6.6
  - !19904 merge patch-1767162173 into OLK-6.6
  - !19845 merge patch-1766818524 into OLK-6.6
  - !19797 merge patch-1766494034 into OLK-6.6
  - !19796 merge patch-1766494001 into OLK-6.6
  - !19800 merge patch-1766541023 into OLK-6.6
  - !19847 merge patch-1766820323 into OLK-6.6
  - !19875 merge patch-1767010708 into OLK-6.6
  - !19761 merge patch-1766371001 into OLK-6.6
  - !19619 merge refs/pull/19619/head into OLK-6.6
  - !19912 merge patch-1767493281 into OLK-6.6
  - net_sched: prio: fix a race in prio_tune()
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler
  - can: j1939: implement NETDEV_UNREGISTER notification handler
  - Bluetooth: hci_core: Disable works on hci_unregister_dev
  - iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - mm: mem_reliable: prevent excessive direct reclaim loops
  - mm: mem_reliable: use percise count during limit check
  - mm: mem_reliable: fix task reliable counter during fork
  - !19793 merge patch-1766492701 into OLK-6.6
  - !19823 merge tmp into OLK-6.6
  - !19888 merge ubase into OLK-6.6
  - !19898 merge OLK_6.6_velinux_1 into OLK-6.6
  - !19901 merge OLK-6.6 into OLK-6.6
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
  - obmm: Register resource for every memdev
  - !19822 merge master into OLK-6.6
  - !19811 merge OLK-6.6 into OLK-6.6
  - !19818 merge OLK-6.6 into OLK-6.6
  - !19854 merge OLK-6.6 into OLK-6.6
  - !19886 merge OLK-6.6 into OLK-6.6
  - ub: ubase: fix ubase activate/deactivate resp timeout
  - urma inclusion category: bugfix bugzilla: https://gitee.com/openeuler/release-management/issues/ID3WJX
  - bpf: Fix stackmap overflow check in __bpf_get_stackid()
  - bpf: Refactor stack map trace depth calculation into helper function
  - net: unic: Fix ethtool configuration error issue.
  - ub: ubase: Resolve mailbox timeout issue.
  - scsi: qla2xxx: Clear cmds after chip reset
  - ub: udma: bugfix related to rx close.
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  - futex: Don't leak robust_list pointer on exec race
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
  - Bluetooth: hci_event: validate skb length for unknown CC opcode
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
  - tracing: Fix memory leaks in create_field_var()
  - ub: udma: Bugfix related to 2M hugepage.
  - ppp: fix race conditions in ppp_fill_forward_path
  - scsi: qla2xxx: Fix improper freeing of purex item
  - coresight: ETR: Fix ETR buffer use-after-free issue
  - arm-spe: Fix typos in the arm_spe_to_htpg()
  - mm/shmem: Fix order passing error in the shmem_alloc_folio()
  - arm64/mpam: Synchronize MPAM Partid to kernel mode
  - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
  - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
  - ext4: refresh inline data size before write operations
  - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
  - ub:ubfi:skipped address of subtable 0 in ubrt
  - ub:ubus delete undefined class code
  - ub: cdma: add ioctl logs and error codes
  - ub:ubus: fix ub_get_bus_controller getting null
  - ub:ubus: Move the decoder's queue operations to hisi-ubus
  - ub:ubus: hi_msg_sync_wait first pull cq
  - perf/x86/intel: Fix KASAN global-out-of-bounds warning
  - mm: migrate: add dma copy offloading for hugetlb
  - nvmet-fc: avoid scheduling association deletion twice
  - bpf: Fix invalid prog->stats access when update_effective_progs fails
  - ftrace: Fix softlockup in ftrace_module_enable
  - bpf: account for current allocated stack depth in widen_imprecise_scalars()
  - bpf: Add bpf_prog_run_data_pointers()
  - iommu: set the default iommu-dma mode as non-strict
  - timers: Fix NULL function pointer race in timer_shutdown_sync()
  - x86/fpu: Ensure XFD state on signal delivery
  - !19680 LoongArch: Mask all interrupts during kexec/kdump
  - !19682 Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - !19738  xsched: move xsched types to user-accessible headers
  - !19717 obmm: Race condition fix, mmap rollback fix and export_user flag check.
  - xsched: move xsched types to user-accessible headers
  - obmm: Add FAST flag check for obmm_export_from_user
  - obmm: Rollback mmap_granu when mmap failed
  - !19735 add check ack msg and do sleep
  - add check ack msg and do sleep
  - usb: storage: Fix memory leak in USB bulk transport
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - !18003 [OLK-6.6] PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs
  - Loongarch: Enable CONFIG_RANDOMIZE_BASE default
  - LoongArch: Mask all interrupts during kexec/kdump
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - !19714 drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - obmm: Fix race condition of region release and device release
  - !19688 ub: ubase: CtrlQ retry message uses the same seq
  - !19687 ub: udma: Bugfix related to crq event unregister.
  - !19641 ub:hisi-ubus: fix MUE unreg msg rsp time
  - !19677 ub: libcdma: add eid upi update response
  - drm/hisilicon/hibmc: fix PCIe 64-bit bar support
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  - !19709  mm: try skipping pinned page before unmapping in migration
  - usb: storage: sddr55: Reject out-of-bound new_pba
  - mm: try skipping pinned page before unmapping in migration
  - iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
  - ub: udma: Bugfix related to crq event unregister.
  - ub:ubus: Change create device irq domain debug info
  - ub: ubase: CtrlQ retry message uses the same seq
  - net: unic: Fix the calltrace caused by modifying queue parameters in the MUE scenario
  - ub: cdma: add eid upi update response
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
  - be2net: pass wrb_params in case of OS2BMC
  - ub:hisi-ubus: fix MUE unreg msg rsp time
  - driver/coda: Fix possible NULL pointer dereference error.
  - VirtCCA supports Ascend 310P in CoDA scenarios
  - NFSD: Fix crash in nfsd4_read_release()
  - configs: Add bus lock detect config in openeuler_config
  - x86/split_lock: Add support for Zhaoxin
  - x86/split_lock: Simplify reenabling
  - x86/split_lock: Fix the delayed detection logic
  - x86/split_lock: Move Split and Bus lock code to a dedicated file
  - PCI: phytium: Add hotplug and hotreset workaround patch for phytium SoCs


author: Li Nan <linan122@huawei.com> - 6.6.0-135.0.0.116
changelog:
  - !19710 [OLK-6.6] Batch BAR sizing operations
  - !19952  mfs: Add prefetch demo
  - !20138 net:nebula-matrix:add protection of consecutive write regs
  - !20033  ceph: fix crash in process_v2_sparse_read() for encrypted directories
  - !20032  net: atlantic: fix fragment overflow handling in RX path
  - !20031  Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
  - !20014  xfs: do not propagate ENODATA disk errors into xattr code
  - !20015  Fix CVE-2025-40242
  - !19960  wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
  - !20005  cifs: Fix establishing NetBIOS session for SMB2+ connection
  - !20009  ftrace: Fix BPF fexit with livepatch
  - !19983  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - !19968  EEVDF null pointer
  - !19773  bpf, arm64: Do not audit capability check in do_jit()
  - !19997  mfs: remove FAROUND event for mfsd demo
  - !19942 [virtCCA Live Migration 1]virtcca secure cvm supports live migration
  - !20160 v3  CVE-2025-68304
  - !20141 urma: Fix the bug of exposing devices fails for host network
  - !20148 ubcore: fix route query for container loopback.
  - !20120 urma: fix urma_admin agg del eid failed.
  - !20028 release urma source when the ub device is removed
  - !20017  kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - !20115  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !20109 uvb: change cis call default poll timeout
  - urma: fix the bug for container.
  - !20154 merge fix_is_err into OLK-6.6
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX
  - Bluetooth: ISO: free rx_skb if not consumed
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready
  - Bluetooth: SCO: remove the redundant sco_conn_put
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet
  - urma: fix ubcore_cock NULL pointer check.
  - ubcore: fix route query for container loopback.
  - net:nebula-matrix:add protection of consecutive write regs
  - urma: fix urma_admin agg del eid failed.
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !20100 merge OLK-6.6-v6.6.92-backport into OLK-6.6
  - uvb: change cis call default poll timeout
  - dmaengine: idxd: Fix double free in idxd_setup_wqs()
  - dmaengine: idxd: Fix refcount underflow on module unload
  - dmaengine: idxd: Remove improper idxd_free
  - fs/xattr.c: fix simple_xattr_list()
  - firmware: arm_scmi: Account for failed debug initialization
  - drm/amdgpu: fix pm notifier handling
  - LoongArch: Explicitly specify code model in Makefile
  - usb: typec: ucsi: displayport: Fix deadlock
  - mm/page_alloc: fix race condition in unaccepted memory handling
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
  - dmaengine: idxd: Add missing cleanups in cleanup internals
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
  - net: qede: Initialize qede_ll_ops with designated initializer
  - smb: client: fix memory leak during error handling for POSIX mkdir
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
  - phy: renesas: rcar-gen3-usb2: Set timing registers only once
  - phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
  - phy: Fix error handling in tegra_xusb_port_init
  - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
  - tracing: samples: Initialize trace_array_printk() with the correct function
  - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
  - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
  - hv_netvsc: Remove rmsg_pgcnt
  - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
  - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
  - ALSA: usb-audio: Add sample rate quirk for Audioengine D1
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
  - drm/amd/display: Avoid flooding unnecessary info messages
  - drm/amd/display: Correct the reply value when AUX write incomplete
  - LoongArch: Fix MAX_REG_OFFSET calculation
  - udf: Make sure i_lenExtents is uptodate on inode eviction
  - NFSv4/pnfs: Reset the layout state after a layoutreturn
  - tsnep: fix timestamping with a stacked DSA driver
  - tsnep: Inline small fragments within TX descriptor
  - octeontx2-af: Fix CGX Receive counters
  - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability
  - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
  - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
  - ALSA: sh: SND_AICA should depend on SH_DMA_API
  - nvme-pci: make nvme_pci_npages_prp() __always_inline
  - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
  - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
  - ALSA: seq: Fix delivery of UMP events to group ports
  - net: mctp: Ensure keys maintain only one ref to corresponding dev
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
  - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation
  - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
  - spi: loopback-test: Do not split 1024-byte hexdumps
  - HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
  - iio: chemical: sps30: use aligned_s64 for timestamp
  - iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
  - Revert "drm/amd: Stop evicting resources on APUs in suspend"
  - drm/amd: Add Suspend/Hibernate notification callback support
  - drm/amdgpu: trigger flr_work if reading pf2vf data failed
  - drm/amdgpu: Fix the runtime resume failure issue
  - drm/amd: Stop evicting resources on APUs in suspend
  - iio: adc: ad7266: Fix potential timestamp alignment issue.
  - firmware: arm_scmi: Fix timeout checks on polling path
  - firmware: arm_scmi: Track basic SCMI communication debug metrics
  - firmware: arm_scmi: Add support for debug metrics at the interface
  - firmware: arm_scmi: Add message dump traces for bad and unexpected replies
  - firmware: arm_scmi: Add helper to trace bad messages
  - tpm: tis: Double the timeout B to 4s
  - cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks
  - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
  - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)
  - binfmt_elf: Move brk for static PIE even if ASLR disabled
  - binfmt_elf: Honor PT_LOAD alignment for static PIE
  - binfmt_elf: Calculate total_size earlier
  - selftests/exec: Build both static and non-static load_address tests
  - binfmt_elf: Leave a gap between .bss and brk
  - selftests/exec: load_address: conform test to TAP format output
  - binfmt_elf: elf_bss no longer used by load_elf_binary()
  - binfmt_elf: Support segments with 0 filesz and misaligned starts
  - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
  - !20080 merge OLK-6.6 into OLK-6.6
  - ubcore: fix netdev size limit error.
  - !19254 merge refs/pull/19254/head into OLK-6.6
  - drivers/ub/sentry: release urma source when the ub device is removed
  - ceph: fix crash in process_v2_sparse_read() for encrypted directories
  - net: atlantic: fix fragment overflow handling in RX path
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - gfs2: Fix unlikely race in gdlm_put_lock
  - gfs2: Add proper lockspace locking
  - xfs: do not propagate ENODATA disk errors into xattr code
  - ftrace: Fix BPF fexit with livepatch
  - cifs: Fix establishing NetBIOS session for SMB2+ connection
  - mfs: remove FAROUND event for mfsd demo
  - [virtCCA Live Migration 1]virtcca secure cvm supports live migration
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - sched: Fix kabi breakage of struct cfs_rq for zero_vruntime
  - sched/eevdf: Fix min_vruntime vs avg_vruntime
  - sched/core: Add comment explaining force-idle vruntime snapshots
  - sched/fair: Forfeit vruntime on yield
  - Revert "sched/fair: Only increment deadline once on yield"
  - sched: Fix kabi breakage of struct cfs_rq for min_vruntime_copy
  - sched/eevdf: Remove min_vruntime_copy
  - sched: Fix kabi breakage of struct sched_entity for on_rq and rel_deadline
  - sched/fair: Avoid re-setting virtual deadline on 'migrations'
  - sched/balancing: Change comment formatting to not overlap Git conflict marker lines
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
  - mfs: Add prefetch demo
  - bpf, arm64: Do not audit capability check in do_jit()
  - PCI: Batch BAR sizing operations
  - bpf: Do not audit capability check in do_jit()
  - usb: usbtmc: Fix read_stb function and get_stb ioctl
  - staging: axis-fifo: fix TX handling on copy_from_user() failure
  - staging: axis-fifo: flush RX FIFO on read errors
  - staging: axis-fifo: fix maximum TX packet length check
  - ksmbd: fix stream write failure
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - Documentation: x86/bugs/its: Add ITS documentation
  - x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
  - x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
  - x86/speculation: Simplify and make CALL_NOSPEC consistent
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode
  - x86/bpf: Add IBHF call at end of classic BPF
  - x86/bpf: Call branch history clearing sequence on exit
  - io_uring: ensure deferred completions are posted for multishot
  - io_uring: always arm linked timeouts prior to issue
  - do_umount(): add missing barrier before refcount checks in sync case
  - drm/panel: simple: Update timings for AUO G101EVN010
  - MIPS: Fix MAX_REG_OFFSET
  - iio: adc: dln2: Use aligned_s64 for timestamp
  - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
  - types: Complement the aligned types with signed 64-bit one
  - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
  - iio: accel: adxl367: fix setting odr for activity time update
  - usb: usbtmc: Fix erroneous generic_read ioctl return
  - usb: usbtmc: Fix erroneous wait_srq ioctl return
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns
  - USB: usbtmc: use interruptible sleep in usbtmc_read
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
  - usb: host: tegra: Prevent host controller crash when OTG port is used
  - usb: gadget: Use get_status callback to set remote wakeup capability
  - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
  - usb: gadget: f_ecm: Add get_status callback
  - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
  - usb: cdnsp: Fix issue with resuming from L1
  - ocfs2: stop quota recovery before disabling quotas
  - ocfs2: implement handshaking with ocfs2 recovery thread
  - ocfs2: switch osb->disable_recovery to enum
  - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
  - xenbus: Use kref to track req lifetime
  - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
  - smb: client: Avoid race in open_cached_dir with lease breaks
  - usb: uhci-platform: Make the clock really optional
  - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
  - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
  - drm/amd/display: Copy AUX read reply data whenever length > 0
  - drm/amd/display: Fix wrong handling for AUX_DEFER case
  - drm/amd/display: Remove incorrect checking in dmub aux handler
  - drm/amd/display: Fix the checking condition in dmub aux handling
  - iio: adis16201: Correct inclinometer channel resolution
  - iio: adc: rockchip: Fix clock initialization sequence
  - iio: adc: ad7606: fix serial register access
  - drm/amd/display: Shift DMUB AUX reply command if necessary
  - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
  - staging: axis-fifo: Remove hardware resets for user errors
  - staging: iio: adc: ad7816: Correct conditional logic for store mode
  - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
  - Input: synaptics - enable SMBus for HP Elitebook 850 G1
  - Input: synaptics - enable InterTouch on Dell Precision M3800
  - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
  - Input: synaptics - enable InterTouch on Dynabook Portege X30-D
  - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
  - Input: xpad - fix Share button on Xbox One controllers
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - Input: cyttsp5 - fix power control issue on wakeup
  - Input: cyttsp5 - ensure minimum reset pulse width
  - net: dsa: b53: fix learning on VLAN unaware bridges
  - net: dsa: b53: always rejoin default untagged VLAN on bridge leave
  - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
  - net: dsa: b53: fix flushing old pvid VLAN on pvid change
  - net: dsa: b53: fix clearing PVID of a port
  - net: dsa: b53: allow leaky reserved multicast
  - netfilter: ipset: fix region locking in hash types
  - can: gw: fix RCU/BH usage in cgw_create_job()
  - can: mcp251xfd: fix TDC setting for low data bit rates
  - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
  - netdevice: add netdev_tx_reset_subqueue() shorthand
  - sch_htb: make htb_deactivate() idempotent
  - ksmbd: prevent out-of-bounds stream writes by validating *pos
  - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - can: mcan: m_can_class_unregister(): fix order of unregistration calls
  - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
  - dm: add missing unlock on in dm_keyslot_evict()


author: Li Nan <linan122@huawei.com> - 6.6.0-136.0.0.117
changelog:
  - !20020  ext4: fix e4b bitmap inconsistency reports
  - !20308  ext4: fix stale data issue on the iomap path
  - !20347  Fix exception when umount with release dev fd
  - mfs: Do not release the async event immediately when read failed
  - mfs: Fix wild-memory-access error when mfs event is destroy.
  - !20336  memcg: avoid the warning in mem_cgroup_migrate
  - !20326  KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
  - !20059  net/mdiobus: Fix potential out-of-bounds read/write access
  - !20057  net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
  - !20056  net: phy: clear phydev->devlink when the link is deleted
  - !20055  netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
  - !20130  ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
  - !20327  s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
  - !20324  drm/mediatek: Disable AFBC support on Mediatek DRM driver
  - !20276  ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
  - !20325  atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  - !20330 [OLK-6.6][linux-6.6.y sync] Backport 6.6.98-6.6.99 LTS Patches
  - Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard
  - kasan: use vmalloc_dump_obj() for vmalloc error reports
  - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
  - btrfs: don't ignore inode missing when replaying log tree
  - btrfs: fix log tree replay failure due to file with 0 links and extents
  - btrfs: do not assert we found block group item when creating free space tree
  - vsock: fix lock inversion in vsock_assign_transport()
  - ksmbd: fix potential use-after-free in oplock/lease break ack
  - kasan: remove kasan_find_vm_area() to prevent possible deadlock
  - smb: client: fix potential race in cifs_put_tcon()
  - selftests/bpf: adapt one more case in test_lru_map to the new target_free
  - Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
  - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
  - bpf: Adjust free target to avoid global starvation of LRU map
  - vt: add missing notification when switching back to text mode
  - btrfs: fix assertion when building free space tree
  - net: mana: Record doorbell physical address in PF mode
  - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
  - net: usb: qmi_wwan: add SIMCom 8230C composition
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
  - io_uring: make fallocate be hashed work
  - um: vector: Reduce stack usage in vector_eth_configure()
  - atm: idt77252: Add missing `dma_map_error()`
  - ublk: sanity check add_dev input for underflow
  - net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
  - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
  - net: appletalk: Fix device refcount leak in atrtr_create()
  - drm/tegra: nvdec: Fix dma_alloc_coherent error check
  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
  - cifs: all initializations for tcon should happen in tcon_info_alloc
  - smb: client: fix DFS interlink failover
  - smb: client: avoid unnecessary reconnects when refreshing referrals
  - usb: dwc3: Abort suspend on soft disconnect failure
  - usb: cdnsp: Fix issue with CV Bad Descriptor test
  - usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
  - usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
  - btrfs: fix inode lookup error handling during log replay
  - btrfs: return a btrfs_inode from btrfs_iget_logging()
  - btrfs: remove redundant root argument from fixup_inode_link_count()
  - btrfs: remove redundant root argument from btrfs_update_inode_fallback()
  - btrfs: remove noinline from btrfs_update_inode()
  - erofs: fix to add missing tracepoint in erofs_read_folio()
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
  - smb: server: make use of rdma_destroy_qp()
  - x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
  - mm/vmalloc: leave lazy MMU mode on PTE mapping error
  - scripts/gdb: fix interrupts.py after maple tree conversion
  - scripts/gdb: de-reference per-CPU MCE interrupts
  - scripts/gdb: fix interrupts display after MCP on x86
  - mm: fix the inaccurate memory statistics issue for users
  - maple_tree: fix mt_destroy_walk() on root leaf node
  - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
  - drm/gem: Fix race in drm_gem_handle_create_tail()
  - drm/ttm: fix error handling in ttm_buffer_object_transfer
  - memcg: avoid the warning in mem_cgroup_migrate
  - !17578 perf mem/c2c: Add load store event mapping for Hygon
  - !19670 [OLK-6.6] Fix CVE-2025-39833
  - !19669 [OLK-6.6] Fix CVE-2025-39743
  - !19668 [OLK-6.6] Fix CVE-2025-38681
  - !18606 [0LK-6.6] Fix CVE-2025-38699
  - !20332 Fix CVE-2025-68371
  - !19666 [OLK-6.6] Fix CVE-2025-38650
  - !19665 [OLK-6.6] Fix CVE-2025-38578
  - !19649 [olk 6.6] 主线补丁同步，hugememory&khugepaged
  - !20317 Fix CVE-2025-71108
  - scsi: smartpqi: Fix device resources accessed after device removal
  - !20037 [Intel-SIG] DMR new CPU model support
  - wifi: prevent A-MSDU attacks in mesh networks
  - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
  - KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
  - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
  - x86/mce: Don't remove sysfs if thresholding sysfs init fails
  - x86/mce/amd: Fix threshold limit reset
  - x86/mce/amd: Add default names for MCA banks and blocks
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct
  - Bluetooth: HCI: Set extended advertising data synchronously
  - perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
  - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
  - rxrpc: Fix bug due to prealloc collision
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
  - atm: clip: Fix infinite recursive call of clip_push().
  - atm: clip: Fix memory leak of struct clip_vcc.
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd().
  - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
  - net: phy: smsc: Force predictable MDI-X state on LAN87xx
  - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
  - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
  - !19995  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - vsock: Fix transport_* TOCTOU
  - !19994  ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
  - vsock: Fix transport_{g2h,h2g} TOCTOU
  - !19993  net: ipv6: fix field-spanning memcpy warning in AH output
  - vsock: fix `vsock_proto` declaration
  - !19988  udp_tunnel: use netdev_warn() instead of netdev_WARN()
  - fix proc_sys_compare() handling of in-lookup dentries
  - pinctrl: amd: Clear GPIO debounce for suspend
  - Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
  - Bluetooth: hci_sync: Fix not disabling advertising instance
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
  - !19146 Backport uncore freq driver fixes and support for agent_types and die_id sysfs attributes
  - !20036 Backport CWF cstate PMU for 6.6
  - !20304 [OLK-6.6][linux-6.6.y sync] Backport 6.6.96-6.6.98 LTS Patches
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
  - !20303 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
  - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  - drm/mediatek: Disable AFBC support on Mediatek DRM driver
  - !20295  CVE-2025-68296
  - usb: typec: ucsi: Handle incorrect num_connectors capability
  - Input: xpad - set correct controller type for Acer NGR200
  - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
  - smb: client: remove redundant lstrp update in negotiate protocol
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init
  - platform/x86: Fix initialization order for firmware_attributes_class
  - RDMA/mlx5: Fix vport loopback forcing for MPV device
  - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
  - ext4: fix stale data issue on the iomap path
  - !20046  drm/sysfb: Do not dereference NULL pointer in plane reset
  - !20045  binfmt_misc: restore write access before closing files opened by open_exec()
  - f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
  - powerpc/kernel: Fix ppc_save_regs inclusion in build
  - platform/x86: think-lmi: Fix sysfs group cleanup
  - platform/x86: think-lmi: Fix kobject cleanup
  - platform/x86: think-lmi: Create ksets consecutively
  - powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
  - iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
  - Logitech C-270 even more broken
  - dma-buf: fix timeout handling in dma_resv_wait_timeout v2
  - smb: client: fix readdir returning wrong type with POSIX extensions
  - usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
  - usb: cdnsp: do not disable slot for disabled slot
  - Input: iqs7222 - explicitly define number of external channels
  - Input: xpad - support Acer NGR 200 Controller
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
  - xhci: dbc: Flush queued requests before stopping dbc
  - xhci: dbctty: disable ECHO flag by default
  - usb: xhci: quirk for data loss in ISOC transfers
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
  - platform/x86: hp-bioscfg: Fix class device unregistration
  - platform/x86: hp-bioscfg: Directly use firmware_attributes_class
  - rcu: Return early if callback is not specified
  - wifi: mac80211: drop invalid source address OCB frames
  - aoe: defer rexmit timer downdev work to workqueue
  - regulator: fan53555: add enable_time support and soft-start times
  - ASoC: amd: yc: update quirk data for HP Victus
  - powerpc: Fix struct termio related ioctl macros
  - platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
  - ata: pata_cs5536: fix build on 32-bit UML
  - ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed
  - ALSA: sb: Don't allow changing the DMA mode during operations
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
  - drm/simpledrm: Do not upcast in release helpers
  - scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
  - scsi: ufs: core: Add OPP support for scaling clocks and regulators
  - scsi: ufs: core: Fix abnormal scale up after last cmd finish
  - f2fs: fix to zero post-eof page
  - f2fs: convert f2fs_vm_page_mkwrite() to use folio
  - f2fs: prevent writing without fallocate() for pinned files
  - f2fs: add tracepoint for f2fs_vm_page_mkwrite()
  - x86/traps: Initialize DR6 by writing its architectural reset value
  - wifi: mac80211: finish link init before RCU publish
  - wifi: mac80211: Add link iteration macro for link data
  - wifi: mac80211: chan: chandef is non-NULL for reserved
  - smb: client: remove 	 from TP_printk statements
  - btrfs: fix qgroup reservation leak on failure to allocate ordered extent
  - smb: client: fix race condition in negotiate timeout by using more precise timing
  - amd-xgbe: do not double read link status
  - nui: Fix dma_mapping_error() check
  - enic: fix incorrect MTU comparison in enic_change_mtu()
  - amd-xgbe: align CL37 AN sequence as per databook
  - lib: test_objagg: Set error message in check_expect_hints_stats()
  - igc: disable L1.2 PCI-E link substate to avoid performance issue
  - drm/i915/gsc: mei interrupt top half should be in irq disabled context
  - drm/i915/gt: Fix timeline left held on VMA alloc error
  - platform/mellanox: mlxreg-lc: Fix logic error in power state check
  - platform/x86: dell-wmi-sysman: Fix class device unregistration
  - platform/x86: dell-sysman: Directly use firmware_attributes_class
  - platform/x86: think-lmi: Fix class device unregistration
  - platform/x86: think-lmi: Directly use firmware_attributes_class
  - platform/x86: firmware_attributes_class: Simplify API
  - platform/x86: firmware_attributes_class: Move include linux/device/class.h
  - platform/x86: make fw_attr_class constant
  - arm64: dts: qcom: sm8550: add UART14 nodes
  - drm/i915/selftests: Change mock_request() to return error pointers
  - spi: spi-fsl-dspi: Clear completion counter before initiating transfer
  - drm/exynos: fimd: Guard display clock control with runtime PM calls
  - dpaa2-eth: fix xdp_rxq_info leak
  - ethernet: atl1: Add missing DMA mapping error checks and count errors
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir
  - btrfs: rename err to ret in btrfs_rmdir()
  - btrfs: fix iteration of extrefs during log replay
  - btrfs: fix missing error handling when searching for inode refs during log replay
  - Bluetooth: Prevent unintended pause by checking if advertising is active
  - platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
  - RDMA/mlx5: Fix vport loopback for MPV device
  - RDMA/mlx5: Fix CC counters query for MPV
  - RDMA/mlx5: Fix HW counters query for non-representor devices
  - scsi: ufs: core: Fix spelling of a sysfs attribute name
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
  - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
  - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
  - arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
  - mtk-sd: reset host->mrq on prepare_data() error
  - mtk-sd: Prevent memory corruption from DMA map failure
  - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
  - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window
  - Bluetooth: hci_sync: revert some mesh modifications
  - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
  - mmc: sdhci: Add a helper function for dump register in dynamic debug mode
  - vsock/vmci: Clear the vmci transport packet properly when initializing it
  - s390/pci: Do not try re-enabling load/store if device is disabled
  - rtc: cmos: use spin_lock_irqsave in cmos_interrupt
  - rtc: pcf2127: fix SPI command byte for PCF2131
  - rtc: pcf2127: add missing semicolon after statement
  - !20296 [OLK-6.6][linux-6.6.y sync] Backport 6.6.95-6.6.96 LTS Patches
  - !20298  cifs: Fix memory and information leak in smb3_reconfigure()
  - !20042  RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
  - !20041  Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
  - !19820  usbnet: Prevents free active kevent
  - !20268 urma: fix dereference of null_ptr for uobj
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
  - kallsyms: fix build without execinfo
  - drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
  - Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
  - usb: typec: displayport: Fix potential deadlock
  - NFSv4.2: another fix for listxattr
  - ARM: 9354/1: ptrace: Use bitfield helpers
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel
  - firmware: arm_scmi: Add a common helper to check if a message is supported
  - nvme: always punt polled uring_cmd end_io work to task_work
  - Revert "ipv6: save dontfrag in cork"
  - x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
  - Kunit to check the longest symbol length
  - s390/entry: Fix last breaking event handling in case of stack corruption
  - media: uvcvideo: Rollback non processed entities on error
  - ksmbd: remove unsafe_memcpy use in session setup
  - ksmbd: Use unsafe_memcpy() for ntlm_negotiate
  - drm/amdgpu: switch job hw_fence to amdgpu_fence
  - drm/amdgpu: Add kicker device detection
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config
  - drm/bridge: cdns-dsi: Fix connecting to next bridge
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
  - drm/amdkfd: Fix race in GWS queue scheduling
  - drm/msm/gpu: Fix crash when throttling GPU immediately during boot
  - drm/udl: Unregister device before cleaning up on disconnect
  - drm/tegra: Assign plane type before registration
  - drm/etnaviv: Protect the scheduler's pending list with its lock
  - drm/cirrus-qemu: Fix pitch programming
  - drm/ast: Fix comment on modeset lock
  - HID: wacom: fix kobject reference count leak
  - HID: wacom: fix memory leak on sysfs attribute creation failure
  - HID: wacom: fix memory leak on kobject creation failure
  - HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  - net: libwx: fix the creation of page_pool
  - btrfs: update superblock's device bytes_used when dropping chunk
  - btrfs: fix a race between renames and directory logging
  - dm-raid: fix variable in journal device check
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation
  - serial: imx: Restore original RXTL for console to fix data loss
  - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
  - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
  - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
  - drm/i915: fix build error some more
  - net: selftests: fix TCP packet checksum
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  - net: enetc: Correct endianness handling in _enetc_rd_reg64
  - libbpf: Fix possible use-after-free for externs
  - um: ubd: Add missing error check in start_io_thread()
  - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
  - af_unix: Don't set -ECONNRESET for consumed OOB skb.
  - wifi: mac80211: fix beacon interval calculation overflow
  - attach_recursive_mnt(): do not lock the covering tree when sliding something under it
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
  - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
  - s390/pkey: Prevent overflow in size calculation for memdup_user()
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
  - i2c: robotfuzz-osif: disable zero-length read messages
  - i2c: tiny-usb: disable zero-length read messages
  - af_unix: Don't leave consecutive consumed OOB skbs.
  - af_unix: Don't call skb_get() for OOB skb.
  - af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
  - af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
  - af_unix: Define locking order for unix_table_double_lock().
  - platform/x86: ideapad-laptop: use usleep_range() for EC polling
  - platform/x86: ideapad-laptop: move ACPI helpers from header to source file
  - platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
  - platform/x86: ideapad-laptop: introduce a generic notification chain
  - dummycon: Trigger redraw when switching consoles with deferred takeover
  - tty: vt: make consw::con_switch() return a bool
  - tty: vt: sanitize arguments of consw::con_clear()
  - tty: vt: make init parameter of consw::con_init() a bool
  - PCI: apple: Set only available ports up
  - PCI: apple: Use helper function for_each_child_of_node_scoped()
  - !20288  memcg: avoid dead loop when setting memory.max
  - cifs: Fix memory and information leak in smb3_reconfigure()
  - !19975  Bluetooth: MGMT: cancel mesh send timer when hdev removed
  - !19976  net/mlx5: Clean up only new IRQ glue on request_irq() failure
  - !19977  net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
  - !19978  net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
  - uio_hv_generic: Query the ringbuffer size for device
  - Drivers: hv: vmbus: Add utility function for querying ring size
  - f2fs: don't over-report free space or inodes in statvfs
  - btrfs: handle csum tree error with rescue=ibadroots correctly
  - ovl: Check for NULL d_inode() in ovl_dentry_upper()
  - scsi: ufs: core: Don't perform UFS clkscaling during host async scan
  - ceph: fix possible integer overflow in ceph_zero_objects()
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller
  - ALSA: hda: Ignore unsol events for cards being shut down
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
  - usb: Add checks for snprintf() calls in usb_alloc_dev()
  - usb: common: usb-conn-gpio: use a unique name for usb connector device
  - usb: potential integer overflow in usbg_make_tpg()
  - misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
  - iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
  - usb: dwc2: also exit clock_gating when stopping udc while suspended
  - coresight: Only check bottom two claim bits
  - um: use proper care when taking mmap lock during segfault
  - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
  - iio: pressure: zpa2326: Use aligned_s64 for the timestamp
  - bcache: fix NULL pointer in cache_set_flush()
  - amd/amdkfd: fix a kfd_process ref leak
  - md/md-bitmap: fix dm-raid max_write_behind setting
  - PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
  - PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
  - dmaengine: xilinx_dma: Set dma_device directions
  - rust: module: place cleanup_module() in .exit.text section
  - ksmbd: provide zero as a unique ID to the Mac client
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
  - hwmon: (pmbus/max34440) Fix support for max34451
  - NFSv4: xattr handlers should check for absent nfs filehandles
  - cxl/region: Add a dev_err() on missing target list entries
  - fuse: fix race between concurrent setattrs from multiple nodes
  - leds: multicolor: Fix intensity setting while SW blinking
  - sunrpc: don't immediately retransmit on seqno miss
  - mfd: max14577: Fix wakeup source leaks on device unbind
  - mailbox: Not protect module_put with spin_lock_irqsave
  - NFSv4.2: fix listxattr to return selinux security label
  - NFSv4: Always set NLINK even if the server doesn't support it
  - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
  - cifs: Fix cifs_query_path_info() for Windows NT servers
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request
  - !20282 [OLK-6.6][linux-6.6.y sync] Backport 6.6.94-6.6.95 LTS Patches
  - drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
  - drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info
  - Revert "gpio: mlxbf3: only get IRQ for device instance 0"
  - smb: client: fix warning when reconnecting channel
  - wifi: ath11k: Add missing platform IDs for quirk table
  - power: supply: bq27xxx: restrict no-battery detection to bq27000
  - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
  - Revert "ACPI: battery: negate current when discharging"
  - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
  - cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function
  - gpio: mlxbf3: only get IRQ for device instance 0
  - perf evsel: Missed close() when probing hybrid core PMUs
  - RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
  - RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
  - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
  - perf: Fix cgroup state vs ERROR
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly
  - platform/loongarch: laptop: Add backlight power control support
  - smb: client: fix first command failure during re-negotiation
  - Revert "cpufreq: tegra186: Share policy per cluster"
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
  - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device
  - net: make for_each_netdev_dump() a little more bug-proof
  - smb: Log an error when close_all_cached_dirs fails
  - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
  - net: atm: fix /proc/net/atm/lec handling
  - net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
  - net: microchip: lan743x: Reduce PTP timeout on HW failure
  - tcp: fix passive TFO socket having invalid NAPI ID
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
  - ptp: allow reading of currently dialed frequency to succeed on free-running clocks
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
  - net: ice: Perform accurate aRFS flow match
  - pldmfw: Select CRC32 when PLDMFW is selected
  - hwmon: (occ) fix unaligned accesses
  - hwmon: (occ) Rework attribute registration for stack usage
  - memcg: avoid dead loop when setting memory.max
  - drm/nouveau/bl: increase buffer size to avoid truncate warning
  - ionic: Prevent driver/fw getting out of sync on devcmd(s)
  - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
  - drm/msm/disp: Correct porch timing for SDM845
  - smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels
  - erofs: remove unused trace event erofs_destroy_inode
  - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
  - net: Fix checksum update for ILA adj-transport
  - iio: accel: fxls8962af: Fix temperature calculation
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
  - wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
  - Input: sparcspkr - avoid unannotated fall-through
  - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
  - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
  - selftests/x86: Add a test to detect infinite SIGTRAP handler loop
  - udmabuf: use sgtable-based scatterlist wrappers
  - net_sched: sch_sfq: reject invalid perturb period
  - scsi: s390: zfcp: Ensure synchronous unit_add
  - scsi: storvsc: Increase the timeouts to storvsc_timeout
  - smb: improve directory cache reuse for readdir operations
  - cifs: do not disable interface polling on failure
  - cifs: serialize other channels when query server interfaces is pending
  - cifs: deal with the channel loading lag while picking channels
  - LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
  - platform/loongarch: laptop: Unregister generic_sub_drivers on exit
  - platform/loongarch: laptop: Get brightness setting from EC on probe
  - io_uring: fix task leak issue in io_wq_create()
  - Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
  - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
  - powerpc/vdso: Fix build of VDSO32 with pcrel
  - platform/x86: dell_rbu: Stop overwriting data buffer
  - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
  - tee: Prevent size calculation wraparound on 32-bit kernels
  - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
  - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  - watchdog: da9052_wdt: respect TWDMIN
  - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz
  - wifi: ath12k: fix incorrect CE addresses
  - wifi: ath12k: fix link valid field initialization in the monitor Rx
  - wifi: ath11k: determine PM policy based on machine model
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
  - bpf, sockmap: Fix data lost during EAGAIN retries
  - f2fs: fix to set atomic write status more clear
  - usbnet: asix AX88772: leave the carrier control to phylink
  - ice: fix check for existing switch rule
  - sock: Correct error checking condition for (assign|release)_proto_idx()
  - wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping
  - pinctrl: mcp23s08: Reset all pins to input at probe
  - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
  - vxlan: Do not treat dst cache initialization errors as fatal
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
  - net: bridge: mcast: update multicast contex when vlan state is changed
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  - wifi: mac80211: VLAN traffic in multicast path
  - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
  - wifi: iwlwifi: pcie: make sure to lock rxq->read
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
  - libbpf: Add identical pointer detection to btf_dedup_is_equiv()
  - clk: rockchip: rk3036: mark ddrphy as critical
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled
  - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
  - net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
  - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
  - net: atlantic: generate software timestamp just before the doorbell
  - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
  - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
  - tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
  - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
  - wifi: ath11k: Fix QMI memory reuse logic
  - wifi: ath12k: fix a possible dead lock caused by ab->base_lock
  - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  - net: dlink: add synchronization for stats update
  - i2c: npcm: Add clock toggle recovery
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
  - sctp: Do not wake readers in __sctp_write_space()
  - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  - emulex/benet: correct command version selection in be_cmd_get_stats()
  - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
  - i2c: designware: Invoke runtime suspend on quick slave re-registration
  - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
  - tipc: use kfree_sensitive() for aead cleanup
  - net: macb: Check return value of dma_set_mask_and_coherent()
  - ACPI: battery: negate current when discharging
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
  - gpiolib: of: Add polarity quirk for s5m8767
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  - ACPICA: utilities: Fix overflow check in vsnprintf()
  - power: supply: bq27xxx: Retrieve again when busy
  - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
  - ACPI: bus: Bail out if acpi_kobj registration fails
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  - ACPICA: Avoid sequence overread in call to strncmp()
  - mmc: Add quirk to disable DDR50 tuning
  - power: supply: collie: Fix wakeup source leaks on device unbind
  - clocksource: Fix the CPUs' choice in the watchdog per CPU verification
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  - iio: adc: ad7606_spi: fix reg write value mask
  - iio: imu: inv_icm42600: Fix temperature calculation
  - iio: accel: fxls8962af: Fix temperature scan element sign
  - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
  - PCI: Fix lock symmetry in pci_slot_unlock()
  - PCI: cadence-ep: Correct PBA offset in .set_msix() callback
  - uio_hv_generic: Use correct size for interrupt and monitor pages
  - Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
  - cifs: dns resolution is needed only for primary channel
  - cifs: update dstaddr whenever channel iface is updated
  - cifs: reset connections for all channels when reconnect requested
  - remoteproc: core: Release rproc->clean_table after rproc_attach() fails
  - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
  - regulator: max14577: Add error check for max14577_read_reg()
  - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
  - staging: iio: ad5933: Correct settling cycles encoding per datasheet
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
  - mtd: rawnand: qcom: Fix read len for onfi param page
  - dm-verity: fix a memory leak if some arguments are specified multiple times
  - dm-mirror: fix a tiny race condition
  - KVM: VMX: Flush shadow VMCS on emergency reboot
  - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
  - mtd: nand: sunxi: Add randomizer configuration before randomizer enable
  - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
  - mm: fix ratelimit_pages update error in dirty_ratio_handler()
  - clk: meson-g12a: add missing fclk_div2 to spicc
  - parisc: fix building with gcc-15
  - vgacon: Add check for vc_origin address range in vgacon_scroll()
  - parisc/unaligned: Fix hex output to show 8 hex chars
  - EDAC/altera: Use correct write width with the INTTEST register
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
  - net: ftgmac100: select FIXED_PHY
  - Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer()
  - ext4: ensure i_size is smaller than maxbytes
  - ext4: factor out ext4_get_maxbytes()
  - ext4: fix calculation of credits for extent tree modification
  - bus: fsl-mc: fix GET/SET_TAILDROP command ids
  - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
  - cgroup,freezer: fix incomplete freezing when attaching tasks
  - ceph: set superblock s_magic for IMA fsmagic matching
  - can: tcan4x5x: fix power regulator retrieval during probe
  - bus: mhi: host: Fix conflict between power_up and SYSERR
  - bus: mhi: ep: Update read pointer only after buffer is written
  - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
  - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
  - arm64/mm: Close theoretical race where stale TLB entry remains valid
  - media: uvcvideo: Fix deferred probing error
  - media: uvcvideo: Send control events for partial succeeds
  - media: uvcvideo: Return the number of processed controls
  - media: imx-jpeg: Reset slot data pointers when freed
  - media: imx-jpeg: Drop the first error frames
  - media: videobuf2: use sgtable-based scatterlist wrappers
  - media: venus: Fix probe error handling
  - media: v4l2-dev: fix error handling in __video_register_device()
  - media: omap3isp: use sgtable-based scatterlist wrappers
  - media: mediatek: vcodec: Correct vsi_core framebuffer size
  - media: gspca: Add error handling for stv06xx_read_sensor()
  - media: davinci: vpif: Fix memory leak in probe error path
  - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
  - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
  - media: ccs-pll: Start OP pre-PLL multiplier search from correct value
  - media: ccs-pll: Start VT pre-PLL multiplier search from correct value
  - media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
  - media: nxp: imx8-isi: better handle the m2m usage_count
  - media: ov5675: suppress probe deferral errors
  - media: ov8856: suppress probe deferral errors
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
  - wifi: rtw88: usb: Reduce control message timeout to 500 ms
  - wifi: ath12k: fix ring-buffer corruption
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
  - wifi: ath11k: fix ring-buffer corruption
  - wifi: ath11k: fix rx completion meta data corruption
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
  - regulator: max20086: Change enable gpio to optional
  - regulator: max20086: Fix MAX200086 chip id
  - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
  - io_uring/kbuf: account ring io_buffer_list memory
  - io_uring: account drain memory to cgroup
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
  - gfs2: move msleep to sleepable context
  - crypto: marvell/cesa - Do not chain submitted requests
  - configfs: Do not override creating attribute file failure in populate_attrs()
  - !19787  ima: Handle error code returned by ima_filter_rule_match()
  - !20207  *** fix CVE-2025-37800 ***
  - !20248  sched/fair: Track idle balance interval with idle_stamp in balance_fair
  - !20179 v3  oenetcls: add a switch to enable/disable checking NIC ntuple feature
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
  - !20263 Fix CVE-2025-40311
  - urma: fix dereference of null_ptr for uobj
  - !19549  NFSD: free copynotify stateid in nfs4_free_ol_stateid()
  - !20147  fuse: fix readahead reclaim deadlock
  - !20146  fuse: fix io-uring list corruption for terminated non-committed requests
  - !20145  fuse: missing copy_finish in fuse-over-io-uring argument copies
  - !20144  fsnotify: do not generate ACCESS/MODIFY events on child for special files
  - !19482  NFSD: Define a proc_layoutcommit for the FlexFiles layout type
  - !19483  ksmbd: fix refcount leak causing resource not released
  - !19484  NFSD: fix race between nfsd registration and exports_proc
  - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
  - !19989  proc: fix missing pde_set_flags() for net proc files
  - sched/fair: Track idle balance interval with idle_stamp in balance_fair
  - !19990  Fix SDEI state machine issue during reboot process
  - !20024 [OLK-6.6] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
  - !20217 [OLK-6.6][linux-6.6.y sync] Backport 6.6.93-6.6.94 LTS Patches
  - !20070 [OLK-6.6] Merge continuous pages into a large range when notifying range enc status changes
  - ACPI: CPPC: Perform fast check switch only for online CPUs
  - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator
  - serial: sh-sci: Check that the DMA cookie is valid
  - thunderbolt: Fix wake on connect at runtime
  - bonding: set random address only when slaves already exist
  - drm/mediatek: Fix device use-after-free on unbind
  - rtc: Optimize calculations in rtc_time64_to_tm()
  - !20170  perf/x86/amd: Check event before enable to avoid GPF
  - !20069 ub: cdma: jfs 64K page table memory adaptation
  - !20224  crypto: af_alg - zero initialize memory allocated via sock_kmalloc
  - !20027 [OLK-6.6]Enhance CMA memory usage reporting for CSV3
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc
  - drm/meson: Use 1000ULL when operating with mode->clock
  - regulator: dt-bindings: mt6357: Drop fixed compatible requirement
  - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
  - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset.
  - usb: cdnsp: Fix issue with detecting USB 3.2 speed
  - usb: cdnsp: Fix issue with detecting command completion event
  - kbuild: Disable -Wdefault-const-init-unsafe
  - Revert "io_uring: ensure deferred completions are posted for multishot"
  - io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
  - io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
  - io_uring: add io_file_can_poll() helper
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
  - tools/resolve_btfids: Fix build when cross compiling kernel with clang.
  - block: Fix bvec_set_folio() for very large folios
  - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
  - perf: Ensure bpf_perf_link path is properly serialized
  - nvmet-fcloop: access fcpreq only when holding reqlock
  - fs/filesystems: Fix potential unsigned integer underflow in fs_name()
  - net_sched: tbf: fix a race in tbf_change()
  - net/mlx5e: Fix leak of Geneve TLV option object
  - net/mlx5: Fix return value when searching for existing flow group
  - net/mlx5: Ensure fw pages are always allocated on same NUMA
  - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
  - Bluetooth: Fix NULL pointer deference on eir_get_service_data
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
  - net/mdiobus: Fix potential out-of-bounds read/write access
  - macsec: MACsec SCI assignment for ES = 0
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
  - i40e: retry VFLR handling if there is ongoing VF reset
  - i40e: return false from i40e_reset_vf if reset is in progress
  - drm/meson: fix more rounding issues with 59.94Hz modes
  - drm/meson: use vclk_freq instead of pixel_freq in debug print
  - drm/meson: fix debug log statement when setting the HDMI clocks
  - drm/meson: use unsigned long long / Hz for frequency types
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations
  - pinctrl: qcom: pinctrl-qcm2290: Add missing pins
  - wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready
  - wifi: ath11k: don't wait when there is no vdev started
  - wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process()
  - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
  - wifi: ath11k: convert timeouts to secs_to_jiffies()
  - wifi: ath11k: fix soc_dp_stats debugfs file permission
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery
  - Bluetooth: hci_core: fix list_for_each_entry_rcu usage
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
  - serial: sh-sci: Move runtime PM enable to sci_probe_single()
  - serial: sh-sci: Check if TX data was written to device in .tx_empty()
  - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
  - arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
  - arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
  - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
  - arm64: dts: ti: k3-am65-main: Fix sdhci node properties
  - kasan: use unchecked __memset internally
  - Input: synaptics-rmi - fix crash with unsupported versions of F34
  - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
  - ASoC: Intel: avs: Verify content returned by parse_int_array()
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
  - ASoC: codecs: hda: Fix RPM usage count underflow
  - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
  - wireguard: device: enable threaded NAPI
  - net: dsa: b53: allow RGMII for bcm63xx RGMII ports
  - net: dsa: b53: do not enable RGMII delay on bcm63xx
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
  - vmxnet3: correctly report gso type for UDP tunnels
  - net: wwan: t7xx: Fix napi rx poll issue
  - net: dsa: tag_brcm: legacy: fix pskb_may_pull length
  - ice: fix rebuilding the Tx scheduler tree for large queue counts
  - ice: create new Tx scheduler nodes for new queues only
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
  - spi: bcm63xx-hsspi: fix shared reset
  - spi: bcm63xx-spi: fix shared reset
  - net: lan966x: Make sure to insert the vlan tags also in host mode
  - net/mlx4_en: Prevent potential integer overflow calculating Hz
  - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  - net: stmmac: platform: guarantee uniqueness of bus_id
  - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
  - coresight: prevent deactivate active config while enabling the config
  - counter: interrupt-cnt: Protect enable/disable OPs with mutex
  - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
  - iio: adc: ad7124: Fix 3dB filter frequency reading
  - iio: filter: admv8818: Support frequencies >= 2^32
  - iio: filter: admv8818: fix range calculation
  - iio: filter: admv8818: fix integer overflow
  - iio: filter: admv8818: fix band 4, state 15
  - thunderbolt: Fix a logic error in wake on connect
  - rtc: loongson: Add missing alarm notifications for ACPI RTC events
  - PCI/DPC: Initialize aer_err_info before using it
  - PCI: apple: Use gpiod_set_value_cansleep in probe flow
  - PCI: cadence: Fix runtime atomic count underflow
  - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
  - rtc: sh: assign correct interrupts with DT
  - cifs: Fix validation of SMB1 query reparse point response
  - perf trace: Always print return value for syscalls returning a pid
  - perf record: Fix incorrect --user-regs comments
  - perf tests switch-tracking: Fix timestamp comparison
  - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
  - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
  - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
  - remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick}
  - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
  - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
  - perf intel-pt: Fix PEBS-via-PT data_src
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
  - dm-flakey: make corrupting read bios work
  - dm-flakey: error all IOs when num_features is absent
  - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
  - dm: free table mempools if not used in __bind
  - dm: don't change md if dm_table_set_restrictions() fails
  - perf ui browser hists: Set actions->thread before calling do_zoom_thread()
  - perf build: Warn when libdebuginfod devel files are not available
  - randstruct: gcc-plugin: Fix attribute addition
  - randstruct: gcc-plugin: Remove bogus void member
  - soc: aspeed: lpc: Fix impossible judgment condition
  - ARM: aspeed: Don't select SRAM
  - arm64: dts: mt6359: Rename RTC node to match binding expectations
  - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
  - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
  - arm64: defconfig: mediatek: enable PHY drivers
  - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
  - ARM: dts: qcom: apq8064: add missing clocks to the timer node
  - dt-bindings: vendor-prefixes: Add Liontron name
  - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
  - nilfs2: add pointer check for nilfs_direct_propagate()
  - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
  - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
  - arm64: tegra: Drop remaining serial clock-names and reset-names
  - arm64: dts: rockchip: Update eMMC for NanoPi R5 series
  - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
  - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
  - arm64: dts: mt6359: Add missing 'compatible' property to regulators node
  - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
  - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio
  - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio
  - arm64: dts: imx8mp-beacon: Fix RTC capacitive load
  - arm64: dts: imx8mn-beacon: Fix RTC capacitive load
  - arm64: dts: imx8mm-beacon: Fix RTC capacitive load
  - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
  - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
  - ARM: dts: at91: at91sam9263: fix NAND chip selects
  - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
  - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
  - arm64: dts: qcom: sm8250: Fix CPU7 opp table
  - arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
  - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
  - arm64: dts: qcom: sdm845-starqltechn: refactor node order
  - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
  - arm64: dts: qcom: sdm845-starqltechn: remove wifi
  - f2fs: fix to correct check conditions in f2fs_cross_rename
  - f2fs: use d_inode(dentry) cleanup dentry->d_inode
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
  - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
  - net: phy: mscc: Fix memory leak when using one step timestamping
  - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
  - net: phy: fix up const issues in to_mdio_device() and to_phy_device()
  - net: phy: clear phydev->devlink when the link is deleted
  - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
  - RISC-V: KVM: lock the correct mp_state during reset
  - netfilter: nft_tunnel: fix geneve_opt dump
  - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
  - vfio/type1: Fix error unwind in migration dirty bitmap allocation
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
  - wifi: mt76: mt7996: fix RX buffer size of MCU event
  - wifi: mt76: mt7996: set EHT max ampdu length capability
  - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
  - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
  - iommu: remove duplicate selection of DMAR_TABLE
  - s390/bpf: Store backchain even for leaf progs
  - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
  - libbpf: Use proper errno value in nlattr
  - ktls, sockmap: Fix missing uncharge operation
  - tracing: Fix error handling in event_trigger_parse()
  - tracing: Rename event_trigger_alloc() to trigger_data_alloc()
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd
  - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
  - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
  - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
  - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
  - netfilter: nft_quota: match correctly when the quota just depleted
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
  - libbpf: Use proper errno value in linker
  - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
  - f2fs: clean up w/ fscrypt_is_bounce_page()
  - bonding: assign random address if device address is same as bond
  - iommu: Protect against overflow in iommu_pgsize()
  - Use thread-safe function pointer in libbpf_print
  - libbpf: Remove sample_period init in perf_buffer
  - wifi: ath12k: Add MSDU length validation for TKIP MIC error
  - wifi: rtw88: do not ignore hardware read error during DPK
  - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
  - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
  - xfrm: Use xdo.dev instead of xdo.real_dev
  - libbpf: Fix buffer overflow in bpf_object__init_prog
  - net: ncsi: Fix GCPS 64-bit member variables
  - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
  - selftests/bpf: Fix bpf_nf selftest failure
  - IB/cm: use rwlock for MAD agent lock
  - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
  - drm/mediatek: Fix kobject put for component sub-drivers
  - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids
  - x86/cpu: Add two Intel CPU model numbers
  - !20099 v2  xsched: Add XSched manual
  - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
  - drm/tegra: rgb: Fix the unbound reference count
  - drm/vkms: Adjust vkms_state->active_planes allocation type
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
  - selftests/seccomp: fix syscall_restart test for arm compat
  - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
  - firmware: psci: Fix refcount leak in psci_dt_init
  - m68k: mac: Fix macintosh_config for Mac II
  - watchdog: exar: Shorten identity name to fit correctly
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
  - arm64/fpsimd: Fix merging of FPSIMD state during signal return
  - arm64/fpsimd: Avoid RES0 bits in the SME trap handler
  - media: rkvdec: Fix frame size enumeration
  - drm/vc4: tests: Use return instead of assert
  - drm/vmwgfx: Add seqno waiter for sync_files
  - ASoC: apple: mca: Constrain channels according to TDM mask
  - spi: sh-msiof: Fix maximum DMA transfer size
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
  - PM: sleep: Print PM debug messages during hibernation
  - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
  - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
  - power: reset: at91-reset: Optimize at91_reset()
  - spi: tegra210-quad: modify chip select (CS) deactivation
  - spi: tegra210-quad: remove redundant error handling code
  - !20076  smb3: fix for slab out of bounds on mount to ksmbd
  - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
  - ASoC: tas2764: Enable main IRQs
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
  - kunit: Fix wrong parameter to kunit_deactivate_static_stub()
  - crypto: sun8i-ce - move fallback ahash_request to the end of the struct
  - crypto: xts - Only add ecb if it is not already there
  - crypto: lrw - Only add ecb if it is not already there
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
  - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
  - btrfs: scrub: update device stats when an error is detected
  - crypto: marvell/cesa - Avoid empty transfer descriptor
  - x86/cpu: Sanitize CPUID(0x80000000) output
  - x86/microcode/AMD: Do not return error when microcode update is not necessary
  - powerpc: do not build ppc_save_regs.o always
  - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
  - perf/core: Fix broken throttling when max_samples_per_tick=1
  - gfs2: gfs2_create_inode error handling fix
  - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
  - tools/x86/kcpuid: Fix error handling
  - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property
  - dt-bindings: usb: cypress,hx3: Add support for all variants
  - usb: usbtmc: Fix timeout value in get_stb
  - Bluetooth: hci_qca: move the SoC type check to the right place
  - usb: typec: ucsi: fix Clang -Wsign-conversion warning
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
  - rtc: Fix offset calculation for .start_secs < 0
  - rtc: Make rtc_time64_to_tm() support dates before 1970
  - pinctrl: armada-37xx: set GPIO output value before setting direction
  - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
  - !18475 [OLK-6.6] x86/kvm: expose CPUID 0xC000_0000 for Zhaoxin "Shanghai" vendor
  - driver core: fix potential NULL pointer dereference in dev_uevent()
  - Revert "Revert "Revert "driver core: Fix uevent_show() vs driver detach race"""
  - !19893  nbd: defer config unlock in nbd_genl_connect
  - !19892  nbd: defer config put in recv_work
  - !19890  md: fix rcu protection in md_wakeup_thread
  - !19889  nvme-multipath: fix lockdep WARN due to partition scan work
  - !19835  blk-cgroup: fix possible deadlock while configuring policy
  - !19815  scsi: sg: Do not sleep in atomic context
  - !20162  tracing: Fix enabling of tracing on file release
  - !20110  macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
  - !20164  powerpc/kexec: Enable SMT before waking offline CPUs
  - !20149  tracing: Do not register unsupported perf events
  - !20153  iavf: fix off-by-one issues in iavf_config_rss_reg()
  - !20152  e1000: fix OOB in e1000_tbi_should_accept()
  - !20140  mlxsw: spectrum_router: Fix neighbour use-after-free
  - !20139  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - !20118 [OLK-6.6][linux-6.6.y sync] Backport 6.6.92-6.6.93 LTS Patches
  - !19756  erofs: avoid infinite loops due to corrupted subpage compact indexes
  - !19107 mptcp: Fix proto fallback detection with BPF
  - !20128  NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
  - !20000  cifs: fix memory leak in smb3_fs_context_parse_param error path
  - !20001  smb: client: fix memory leak in cifs_construct_tcon()
  - !20002  CVE-2025-40328
  - !19999  smb: client: fix potential cfid UAF in smb2_query_info_compound
  - !19998  cifs: client: fix memory leak in smb3_fs_context_parse_param
  - !20094  CVE-2025-40099
  - !20089  smb: client: Fix refcount leak for cifs_sb_tlink
  - !20088  ceph: fix race condition validating r_parent before applying state
  - !20086  smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
  - !20081  CVE-2025-39798
  - !20078  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
  - !20077  NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
  - !20075  smb: client: fix potential deadlock when reconnecting channels
  - !20074  smb: client: add NULL check in automount_fullpath
  - !20071  smb: client: Avoid race in open_cached_dir with lease breaks
  - !19945  fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - !19021  memcg: enable asynchronous reclaim for cgroup-v2
  - net/oenetcls: add a switch to enable/disable checking NIC ntuple feature
  - net/oenetcls: Balancing softirq to improve performance
  - perf/x86/amd: Check event before enable to avoid GPF
  - af_unix: Initialise scc_index in unix_add_edge().
  - wifi: rtw89: avoid circular locking dependency in ser_state_run()
  - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
  - Revert "cpuidle: menu: Avoid discarding useful information"
  - cpuidle: governors: menu: Avoid using invalid recent intervals data
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value
  - cpufreq: tegra186: Set target frequency for all cpus in policy
  - Revert "mmc: sdhci: Disable SD card clock before changing parameters"
  - soc: qcom: smp2p: Fix fallback to qcom,ipc parse
  - rpmsg: qcom_smd: Fix fallback to qcom,ipc parse
  - Revert "SUNRPC: Don't allow waiting for exiting tasks"
  - nvmem: imx-ocotp: fix MAC address byte length
  - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
  - ksmbd: use list_first_entry_or_null for opinfo_get_list()
  - net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
  - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
  - NFS: Avoid flushing data while holding directory locks in nfs_rename()
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
  - spi: spi-sun4i: fix early activation
  - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
  - drm/amd/display: fix link_set_dpms_off multi-display MST corner case
  - um: let 'make clean' properly clean underlying SUBARCH as well
  - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
  - nfs: don't share pNFS DS connections between net namespaces
  - HID: quirks: Add ADATA XPG alpha wireless mouse support
  - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
  - coredump: fix error handling for replace_fd()
  - perf/arm-cmn: Initialise cmn->cpu earlier
  - perf/arm-cmn: Fix REQ2/SNP2 mixup
  - arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
  - arm64: dts: qcom: sm8550: Add missing properties for cryptobam
  - arm64: dts: qcom: sm8450: Add missing properties for cryptobam
  - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
  - arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
  - af_unix: Fix uninit-value in __unix_walk_scc()
  - af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
  - af_unix: Add dead flag to struct scm_fp_list.
  - af_unix: Don't access successor in unix_del_edges() during GC.
  - af_unix: Try not to hold unix_gc_lock during accept().
  - af_unix: Remove lock dance in unix_peek_fds().
  - af_unix: Replace garbage collection algorithm.
  - af_unix: Detect dead SCC.
  - af_unix: Assign a unique index to SCC.
  - af_unix: Avoid Tarjan's algorithm if unnecessary.
  - af_unix: Skip GC if no cycle exists.
  - af_unix: Save O(n) setup of Tarjan's algo.
  - af_unix: Fix up unix_edge.successor for embryo socket.
  - af_unix: Save listener for embryo socket.
  - af_unix: Detect Strongly Connected Components.
  - af_unix: Iterate all vertices by DFS.
  - af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
  - af_unix: Link struct unix_edge when queuing skb.
  - af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
  - af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
  - af_unix: Remove CONFIG_UNIX_SCM.
  - af_unix: Remove io_uring code for GC.
  - af_unix: Replace BUG_ON() with WARN_ON_ONCE().
  - af_unix: Try to run GC async.
  - af_unix: Run GC on only one CPU.
  - af_unix: Return struct unix_sock from unix_get_socket().
  - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
  - drm/gem: Internally test import_attach for imported objects
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
  - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
  - pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
  - watchdog: aspeed: fix 64-bit division
  - serial: sh-sci: Save and restore more registers
  - highmem: add folio_test_partial_kmap()
  - spi: spi-fsl-dspi: Reset SR flags before sending a new message
  - spi: spi-fsl-dspi: Halt the module after a new message transfer
  - spi: spi-fsl-dspi: restrict register range for regmap access
  - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
  - Input: xpad - add more controllers
  - smb: client: Reset all search buffer pointers when releasing buffer
  - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - drm/edid: fixed the bug that hdr metadata was not reset
  - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
  - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
  - llc: fix data loss when reading from a socket in llc_ui_recvmsg()
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
  - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
  - ASoc: SOF: topology: connect DAI to a single DAI link
  - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
  - can: slcan: allow reception of short error messages
  - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
  - octeontx2-af: Set LMT_ENA bit for APR table entries
  - octeontx2-pf: Add AF_XDP non-zero copy support
  - io_uring: fix overflow resched cqe reordering
  - net: lan743x: Restore SGMII CTRL register on resume
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1
  - pinctrl: qcom: switch to devm_register_sys_off_handler()
  - pinctrl: qcom/msm: Convert to platform remove callback returning void
  - ice: Fix LACP bonds without SRIOV environment
  - ice: fix vf->num_mac count with port representors
  - bridge: netfilter: Fix forwarding of fragmented packets
  - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
  - dmaengine: fsl-edma: Fix return code for unhandled interrupts
  - dmaengine: idxd: Fix ->poll() return value
  - xfrm: Sanitize marks before insert
  - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
  - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
  - dmaengine: idxd: Fix allowing write() from different address spaces
  - soundwire: bus: Fix race on the creation of the IRQ domain
  - xenbus: Allow PVH dom0 a non-local xenstore
  - wifi: iwlwifi: add support for Killer on MTL
  - tools: ynl-gen: validate 0 len strings from kernel
  - cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
  - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
  - io_uring/fdinfo: annotate racy sq/cq head/tail reads
  - nvme-pci: add quirks for WDC Blue SN550 15b7:5009
  - nvme-pci: add quirks for device 126f:1001
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
  - ASoC: cs42l43: Disable headphone clamps during type detection
  - pinctrl: meson: define the pull up/down resistor value as 60 kOhm
  - book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
  - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
  - drm: Add valid clones check
  - drm/panel-edp: Add Starry 116KHD024006
  - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
  - drm: bridge: adv7511: fill stream capabilities
  - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
  - wifi: ath9k: return by of_get_mac_address
  - accel/qaic: Mask out SR-IOV PCI resources
  - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
  - regulator: ad5398: Add device tree support
  - spi: zynqmp-gqspi: Always acknowledge interrupts
  - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
  - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
  - wifi: rtl8xxxu: retry firmware download on error
  - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
  - firmware: arm_scmi: Relax duplicate name constraint across protocol ids
  - bpftool: Fix readlink usage in get_fd_type
  - drm/ast: Find VBIOS mode from regular display size
  - ASoC: rt722-sdca: Add some missing readable registers
  - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
  - arm64: zynqmp: add clock-output-names property in clock nodes
  - HID: usbkbd: Fix the bit shift number for LED_KANA
  - wifi: ath12k: Avoid napi_sync() before napi_enable()
  - scsi: st: Restore some drive settings after reset
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
  - net/mana: fix warning in the writer of client oob
  - ice: count combined queues using Rx/Tx count
  - rcu: fix header guard for rcu_all_qs()
  - rcu: handle unstable rdp in rcu_read_unlock_strict()
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
  - ice: treat dyn_allowed only as suggestion
  - bridge: mdb: Allow replace of a host-joined group
  - r8169: don't scan PHY addresses > 0
  - ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
  - vxlan: Annotate FDB data races
  - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
  - f2fs: introduce f2fs_base_attr for global sysfs entries
  - hwmon: (xgene-hwmon) use appropriate type for the latency value
  - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
  - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
  - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
  - ext4: remove writable userspace mappings before truncating page cache
  - ext4: don't write back data before punch hole in nojournal mode
  - leds: trigger: netdev: Configure LED blink interval for HW offload
  - pstore: Change kmsg_bytes storage size to u32
  - r8152: add vendor/device ID pair for Dell Alienware AW1022z
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
  - net: fec: Refactor MAC reset to function
  - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
  - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
  - drm/v3d: Add clock handling
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF
  - net/mlx5e: set the tx_queue_len for pfifo_fast
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
  - drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
  - drm/amdgpu: enlarge the VBIOS binary size limit
  - drm/amd/display: Initial psr_version with correct setting
  - drm/amd/display: Update CR AUX RD interval interpretation
  - drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
  - drm/amd/display: Don't try AUX transactions on disconnected link
  - drm/amdgpu: Set snoop bit for SDMA for MI series
  - soundwire: amd: change the soundwire wake enable/disable sequence
  - phy: core: don't require set_mode() callback for phy_get_mode() to work
  - serial: sh-sci: Update the suspend/resume support
  - sched: Reduce the default slice to avoid tasks getting an extra tick
  - x86/traps: Cleanup and robustify decode_bug()
  - clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
  - clk: qcom: ipq5018: allow it to be bulid on arm32
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op
  - media: i2c: imx219: Correct the minimum vblanking value
  - kunit: tool: Use qboot on QEMU x86_64
  - smack: Revert "smackfs: Added check catlen"
  - smack: recognize ipv4 CIPSO w/o categories
  - pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
  - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
  - ASoC: tas2764: Power up/down amp on mute ops
  - ASoC: tas2764: Mark SW_RESET as volatile
  - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
  - ASoC: ops: Enforce platform maximum on initial value
  - firmware: arm_ffa: Reject higher major version as incompatible
  - net/mlx5: Apply rate-limiting to high temperature warning
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
  - media: test-drivers: vivid: don't call schedule in loop
  - vxlan: Join / leave MC group after remote changes
  - PCI: Fix old_size lower bound in calculate_iosize() too
  - eth: mlx4: don't try to complete XDP frames in netpoll
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0
  - can: c_can: Use of_property_present() to test existence of DT property
  - pmdomain: imx: gpcv2: use proper helper for property detection
  - RDMA/core: Fix best page size finding when it can cross SG entries
  - drm/amd/display: Add support for disconnected eDP streams
  - i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
  - EDAC/ie31200: work around false positive build warning
  - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
  - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
  - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
  - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
  - scsi: mpt3sas: Send a diag reset if target reset fails
  - clocksource: mips-gic-timer: Enable counter when CPUs start
  - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
  - MIPS: Use arch specific syscall name match function
  - crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
  - x86/kaslr: Reduce KASLR entropy on most x86 systems
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global
  - libbpf: Fix out-of-bound read
  - media: tc358746: improve calculation of the D-PHY timing registers
  - media: adv7180: Disable test-pattern control on adv7180
  - cpuidle: menu: Avoid discarding useful information
  - vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
  - vhost-scsi: Return queue full for page alloc failures during copy
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
  - ASoC: mediatek: mt8188: Add reference for dmic clocks
  - ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
  - drm/amd/display: handle max_downscale_src_width fail check
  - x86/build: Fix broken copy command in genimage.sh when making isoimage
  - Octeontx2-af: RPM: Register driver with PCI subsys IDs
  - soc: ti: k3-socinfo: Do not use syscon helper to build regmap
  - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
  - bonding: report duplicate MAC address in all situations
  - net: xgene-v2: remove incorrect ACPI_PTR annotation
  - net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
  - leds: pwm-multicolor: Add check for fwnode_property_read_u32
  - drm/amdkfd: KFD release_work possible circular locking
  - selftests/net: have `gro.sh -t` return a correct exit code
  - net/mlx5: Avoid report two health errors on same syndrome
  - firmware: arm_ffa: Set dma_mask for ffa devices
  - PCI: brcmstb: Add a softdep to MIP MSI-X driver
  - PCI: brcmstb: Expand inbound window size up to 64GB
  - wifi: ath12k: Report proper tx completion status to mac80211
  - soc: apple: rtkit: Implement OSLog buffers properly
  - soc: apple: rtkit: Use high prio work queue
  - fpga: altera-cvp: Increase credit timeout
  - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
  - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
  - hwmon: (gpio-fan) Add missing mutex locks
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
  - clk: imx8mp: inform CCF of maximum frequency of clocks
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
  - drm/rockchip: vop2: Add uv swap for cluster window
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
  - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
  - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
  - net: pktgen: fix mpls maximum labels list parsing
  - net: ethernet: ti: cpsw_new: populate netdev of_node
  - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
  - drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
  - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
  - remoteproc: qcom_wcnss: Handle platforms with only single power domain
  - net: phylink: use pl->link_interface in phylink_expects_phy()
  - drm/gem: Fix kabi-breakage for drm
  - powerpc/kexec: Enable SMT before waking offline CPUs
  - tracing: Fix enabling of tracing on file release
  - iavf: fix off-by-one issues in iavf_config_rss_reg()
  - e1000: fix OOB in e1000_tbi_should_accept()
  - tracing: Do not register unsupported perf events
  - fuse: fix readahead reclaim deadlock
  - fuse: fix io-uring list corruption for terminated non-committed requests
  - fuse: missing copy_finish in fuse-over-io-uring argument copies
  - fsnotify: do not generate ACCESS/MODIFY events on child for special files
  - mlxsw: spectrum_router: Fix neighbour use-after-free
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - drm/gem: Test for imported GEM buffers with helper
  - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
  - media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
  - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
  - ieee802154: ca8210: Use proper setters and getters for bitwise types
  - rtc: ds1307: stop disabling alarms on probe
  - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
  - ALSA: seq: Improve data consistency at polling
  - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
  - arm64: tegra: Resize aperture for the IGX PCIe C5 slot
  - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
  - drm/amdkfd: Set per-process flags only once cik/vi
  - watchdog: aspeed: Update bootstatus handling
  - cpufreq: tegra186: Share policy per cluster
  - iommu/amd/pgtbl_v2: Improve error handling
  - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
  - auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
  - gfs2: Check for empty queue in run_queue
  - drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
  - drm/amd/display: calculate the remain segments for all pipes
  - drm/amd/display: remove minimum Dispclk and apply oem panel timing.
  - ipv6: save dontfrag in cork
  - printk: Check CON_SUSPEND when unblanking a console
  - hwmon: (dell-smm) Increment the number of fans
  - usb: xhci: Don't change the status of stalled TDs on failed Stop EP
  - mmc: sdhci: Disable SD card clock before changing parameters
  - mmc: dw_mmc: add exynos7870 DW MMC support
  - arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
  - netfilter: conntrack: Bound nf_conntrack sysctl writes
  - timer_list: Don't use %pK through printk()
  - posix-timers: Add cond_resched() to posix_timer_add() search loop
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
  - ext4: do not convert the unwritten extents if data writeback fails
  - ext4: reject the 'data_err=abort' option in nojournal mode
  - ASoC: sun4i-codec: support hp-det-gpios property
  - drm/amdgpu: Update SRIOV video codec caps
  - mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
  - pinctrl-tegra: Restore SFSEL bit when freeing pins
  - xen: Add support for XenServer 6.1 platform device
  - net/smc: use the correct ndev to find pnetid by pnetid table
  - dm: restrict dm device size to 2^63-512 bytes
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests
  - kbuild: fix argument parsing in scripts/config
  - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
  - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
  - objtool: Fix error handling inconsistencies in check()
  - rtc: rv3032: fix EERD location
  - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
  - jbd2: do not try to recover wiped journal
  - bpf: Return prog btf_id without capable check
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED
  - scsi: st: ERASE does not change tape location
  - scsi: st: Tighten the page format heuristics with MODE SELECT
  - hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
  - ext4: reorder capability check last
  - um: Update min_low_pfn to match changes in uml_reserved
  - um: Store full CSGSFS and SS register from mcontext
  - dlm: make tcp still work in multi-link env
  - i3c: master: svc: Fix missing STOP for master request
  - drm/amd/display: Guard against setting dispclk low for dcn31x
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
  - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
  - btrfs: fix non-empty delayed iputs list on unmount due to async workers
  - btrfs: run btrfs_error_commit_super() early
  - btrfs: avoid linker error in btrfs_find_create_tree_block()
  - btrfs: make btrfs_discard_workfn() block_group ref explicit
  - i2c: pxa: fix call balance of i2c->clk handling routines
  - i2c: qup: Vote for interconnect bandwidth to DRAM
  - x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
  - wifi: mt76: mt7996: revise TXS size
  - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
  - mmc: host: Wait for Vdd to settle on card power off
  - ext4: on a remount, only log the ro or r/w state when it has changed
  - PCI: vmd: Disable MSI remapping bypass under Xen
  - pNFS/flexfiles: Report ENETDOWN as a connection error
  - tools/build: Don't pass test log files to linker
  - PCI: dwc: ep: Ensure proper iteration over outbound map windows
  - objtool: Properly disable uaccess validation
  - lockdep: Fix wait context check on softirq for PREEMPT_RT
  - dql: Fix dql->limit value when reset.
  - thermal/drivers/qoriq: Power down TMU on system suspend
  - SUNRPC: rpcbind should never reset the port to the value '0'
  - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
  - NFSv4: Treat ENETUNREACH errors as fatal for state recovery
  - cifs: Fix establishing NetBIOS session for SMB2+ connection
  - cifs: add validation check for the fields in smb_aces
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit
  - fbcon: Use correct erase colour for clearing in fbcon
  - fbdev: fsl-diu-fb: add missing device_remove_file()
  - riscv: Allow NOMMU kernels to access all of RAM
  - mailbox: use error ret code of of_parse_phandle_with_args()
  - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
  - tracing: Mark binary printing functions with __printf() attribute
  - SUNRPC: Don't allow waiting for exiting tasks
  - NFS: Don't allow waiting for exiting tasks
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
  - fuse: Return EPERM rather than ENOSYS from link()
  - cifs: Fix negotiate retry functionality
  - cifs: Fix querying and creating MF symlinks over SMB1
  - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
  - kconfig: merge_config: use an empty file as initfile
  - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
  - bpf: fix possible endless loop in BPF map iteration
  - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
  - drm/amdgpu: Allow P2P access through XGMI
  - ima: process_measurement() needlessly takes inode_lock() on MAY_READ
  - net: enetc: refactor bulk flipping of RX buffers to separate function
  - scsi: mpi3mr: Add level check to control event logging
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported
  - dma-mapping: avoid potential unused data compilation warning
  - intel_th: avoid using deprecated page->mapping, index fields
  - scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
  - nvmem: qfprom: switch to 4-byte aligned reads
  - nvmem: core: update raw_len if the bit reading is required
  - nvmem: core: verify cell's raw_len
  - nvmem: rockchip-otp: add rk3576 variant data
  - nvmem: rockchip-otp: Move read-offset into variant-data
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
  - phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
  - phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
  - phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
  - phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
  - i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
  - i2c: designware: Use temporary variable for struct device
  - i2c: designware: Remove ->disable() callback
  - i2c: designware: Uniform initialization flow for polling mode
  - gpio: pca953x: fix IRQ storm on system wake up
  - gpio: pca953x: Simplify code with cleanup helpers
  - gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
  - xsched: Add XSched manual
  - x86/sev: merge continuous pages into a large range when notifying range enc status changes
  - cifs: parse_dfs_referrals: prevent oob on malformed input
  - smb: client: fix return value of parse_dfs_referrals()
  - smb: client: Fix refcount leak for cifs_sb_tlink
  - ceph: fix race condition validating r_parent before applying state
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
  - NFSv4: Don't clear capabilities that won't be reset
  - NFS: Fix the setting of capabilities when automounting a new filesystem
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
  - smb3: fix for slab out of bounds on mount to ksmbd
  - smb: client: fix potential deadlock when reconnecting channels
  - smb: client: add NULL check in automount_fullpath
  - smb: client: Avoid race in open_cached_dir with lease breaks
  - ub: cdma: jfs 64K page table memory adaptation
  - ub: cdma: ELR code refactoring
  - ub: cdma: add some log print
  - net/mdiobus: Fix potential out-of-bounds read/write access
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
  - net: phy: clear phydev->devlink when the link is deleted
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
  - drm/sysfb: Do not dereference NULL pointer in plane reset
  - binfmt_misc: restore write access before closing files opened by open_exec()
  - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
  - perf/x86/intel/cstate: Add Clearwater Forest support
  - perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest
  - perf/x86/intel: Add missing MODULE_DESCRIPTION() lines
  - perf/x86/intel/cstate: Switch to new Intel CPU model defines
  - irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI
  - ext4: fix e4b bitmap inconsistency reports
  - x86/csv: Enhance CMA memory usage reporting for CSV3
  - smb: client: fix incomplete backport in cfids_invalidation_worker()
  - smb: client: fix potential UAF in smb2_close_cached_fid()
  - smb: client: fix memory leak in cifs_construct_tcon()
  - cifs: fix memory leak in smb3_fs_context_parse_param error path
  - smb: client: fix potential cfid UAF in smb2_query_info_compound
  - cifs: client: fix memory leak in smb3_fs_context_parse_param
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
  - net: ipv6: fix field-spanning memcpy warning in AH output
  - Fix SDEI state machine issue during reboot process
  - Add sdei interface to check event status
  - proc: fix type confusion in pde_set_flags()
  - proc: fix missing pde_set_flags() for net proc files
  - udp_tunnel: use netdev_warn() instead of netdev_WARN()
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  - nbd: defer config unlock in nbd_genl_connect
  - nbd: defer config put in recv_work
  - md: fix rcu protection in md_wakeup_thread
  - nvme-multipath: fix lockdep WARN due to partition scan work
  - blk-cgroup: fix possible deadlock while configuring policy
  - usbnet: Prevents free active kevent
  - scsi: sg: Do not sleep in atomic context
  - ima: Handle error code returned by ima_filter_rule_match()
  - erofs: avoid infinite loops due to corrupted subpage compact indexes
  - scsi: bfa: Double-free fix
  - mISDN: hfcpci: Fix warning when deleting uninitialized timer
  - jfs: truncate good inode pages when hard link is 0
  - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
  - hfsplus: remove mutex_lock check in hfsplus_free_extents
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  - mm/khugepaged: use KMEM_CACHE()
  - mm/ksm: cleanup mm_slot_entry() invocation
  - mm/khugepaged: remove definition of struct khugepaged_mm_slot
  - mm/ksm: get mm_slot by mm_slot_entry() when slot is !NULL
  - mm/khugepaged: use list_xxx() helper to improve readability
  - khugepaged: simplify the allocation of slab caches
  - mm/khugepaged: fix comment for default scan sleep duration
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid()
  - NFSD: fix race between nfsd registration and exports_proc
  - ksmbd: fix refcount leak causing resource not released
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type
  - platform/x86: intel-uncore-freq: fix all header kernel-doc warnings
  - platform/x86/intel: power-domains: Fix error code in tpmi_init()
  - platform/x86/intel-uncore-freq: Present unique domain ID per package
  - platform/x86/intel-uncore-freq: Fix warning in partitioned system
  - platform/x86/intel-uncore-freq: avoid non-literal format string
  - Documentation: admin-guide: pm: Add documentation for die_id
  - platform/x86/intel-uncore-freq: Add attributes to show die_id
  - platform/x86/intel: power-domains: Add interface to get Linux die ID
  - Documentation: admin-guide: pm: Add documentation for agent_types
  - platform/x86/intel-uncore-freq: Add attributes to show agent types
  - mptcp: Fix proto fallback detection with BPF
  - memcg: enable asynchronous reclaim for cgroup-v2
  - memcg: change CONFIG_MEMCG_V1_RECLAIM to CONFIG_MEMCG_QOS
  - x86/kvm: expose CPUID 0xC000_0000 for Zhaoxin "Shanghai" vendor
  - perf mem/c2c: Add load store event mapping for Hygon


author: Li Nan <linan122@huawei.com> - 6.6.0-137.0.0.118
changelog:
  - !20552 ub: udma: fix some code issues.
  - !20313 Fix CVE-2025-40220
  - !20321  nvme: fix admin request_queue lifetime
  - !20512 PM / devfreq: hisi: Fix potential UAF in OPP handling
  - !20544 Fix CVE-2025-71147
  - !20548 v4  net: LTS-6.6 backport
  - !20503 Fix CVE-2025-39713
  - !20133 Fix CVE-2025-39721
  - !20438 Fix CVE-2025-38659
  - !20264 Fix CVE-2025-40277
  - !20340 Fix CVE-2025-40271
  - !20319 Fix CVE-2025-40237
  - !20392  vfs: Don't leak disconnected dentries on umount
  - !20554  iommu/s390: Implement blocking domain
  - !20489 [OLK-6.6][linux-6.6.y sync] Backport 6.6.101-6.6.102 LTS Patches
  - !20513 ACPI: PCC: Fix race condition by removing static qualifier
  - !20468  drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
  - !20483  rcu: Protect ->defer_qs_iw_pending from data race
  - !20510 drivers/ub/sentry: fix primary eid index value
  - !20553 ub: cdma: support separated page table feature
  - ub: udma: fix some code issues.
  - !20480 iommu/ummu-core: fix error invalidate tid
  - !20561 iommu/ummu: Add ummu sva independent page table parameter
  - ub: udma: bugfix related to 2m_hugepage.
  - ub: udma: support for separate page tables
  - ub: udma: delete debugfs code.
  - ub: udma: bugfix related to ctrlq function.
  - ub: udma: verify get cqe/ae aux info out addr and len.
  - ub: cdma: support separated page table feature
  - iommu/ummu: Add ummu sva independent page table parameter
  - iommu: Adjust PLB refresh timing in 'grant' and 'ungrant'
  - !20505 Fix CVE-2026-23035
  - iommu/s390: Implement blocking domain
  - drivers/ub/sentry: fix primary eid index value
  - !20535  libceph: make decode_pool() more resilient against corrupted osdmaps
  - !20536  mm/page_alloc: change all pageblocks migrate type on coalescing
  - !20537  mm/secretmem: fix use-after-free race in fault handler
  - !20538  wifi: avoid kernel-infoleak from struct iw_point
  - !20539  net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
  - !20440  PCI/AER: Fix NULL pointer access by aer_info
  - !20262 Fix CVE-2025-68176
  - netfilter: nf_reject: don't leak dst refcount for loopback packets
  - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
  - page_pool: always add GFP_NOWARN for ATOMIC allocations
  - virtio-net: fix received length check in big packets
  - net: bridge: fix use-after-free due to MST port state bypass
  - vsock: Ignore signal/timeout on connect() if already established
  - tls: make sure to abort the stream if headers are bogus
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
  - xfrm: Duplicate SPI Handling
  - tls: handle data disappearing from under the TLS ULP
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd
  - !20237 Fix CVE-2025-68724
  - !20459 Fix CVE-2025-71131
  - !20525 Fix CVE-2025-68816
  - !20529  CVE-2025-68172
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
  - !20370 Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
  - wifi: avoid kernel-infoleak from struct iw_point
  - mm/secretmem: fix use-after-free race in fault handler
  - mm/page_alloc: change all pageblocks migrate type on coalescing
  - libceph: make decode_pool() more resilient against corrupted osdmaps
  - pps: Fix kabi breakage of struct pps_device for last_fetched_ev
  - sched: Fix kabi breakage of struct task_struct for saved_state
  - crypto: aspeed - fix double free caused by devm
  - !20515  Bluetooth: bcsp: receive data only if registered
  - !20507 Fix CVE-2025-40358
  - !20450 ub: ubase&unic: Fix some bug in concurrent process
  - !20452 iommu/ummu: Fix some bugs and optimize the code implementation
  - !20451 iommu/ummu: Add the function of creating devices with SVA-separated
  - !20500 mm: fix the inaccurate memory statistics issue for users
  - net/mlx5: fw_tracer, Validate format string parameters
  - Bluetooth: bcsp: receive data only if registered
  - ACPI: PCC: Fix race condition by removing static qualifier
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf
  - iommu/ummu: Add the function of creating devices with SVA-separated
  - iommu/ummu-core: fix error invalidate tid
  - riscv: stacktrace: Disable KASAN checks for non-current tasks
  - !20497  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - !20496  drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
  - !20495  iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - !20494  HID: core: Harden s32ton() against conversion to 0 bits
  - !20493  iommu: Fix two issues in iommu_copy_struct_from_user()
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
  - PM / devfreq: hisi: Fix potential UAF in OPP handling
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
  - !20487  interference: Fix uninitialized ifs_clock compiling issue
  - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
  - MIPS: mm: Prevent a TLB shutdown on initial uniquification
  - mm: fix the inaccurate memory statistics issue for users
  - mm: add config option for atomic mode in mm counter
  - Revert "mm: fix the inaccurate memory statistics issue for users"
  - !20444  net/mlx5e: Fix crash on profile change rollback failure
  - !20442  net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - HID: core: Harden s32ton() against conversion to 0 bits
  - iommu: Fix two issues in iommu_copy_struct_from_user()
  - SUNRPC: call xs_sock_process_cmsg for all cmsg
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
  - !20374 [OLK 6.6]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
  - !20227  Rename leapioraid to leapraid and release v2.0
  - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
  - MIPS: mm: tlb-r4k: Uniquify TLB entries on init
  - x86/fpu: Delay instruction pointer fixup until after warning
  - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
  - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
  - x86/sev: Evict cache lines during SNP memory validation
  - net: usbnet: Fix the wrong netif_carrier_on() call
  - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
  - sched,freezer: Remove unnecessary warning in __thaw_task
  - freezer,sched: Clean saved_state when restoring it during thaw
  - freezer,sched: Do not restore saved_state of a thawed task
  - freezer,sched: Use saved_state to reduce some spurious wakeups
  - sched/core: Remove ifdeffery for saved_state
  - i2c: stm32f7: unmap DMA mapped buffer
  - i2c: stm32f7: simplify status messages in case of errors
  - i2c: stm32f7: perform most of irq job in threaded handler
  - i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
  - i2c: stm32f7: Use devm_clk_get_enabled()
  - USB: serial: option: add Foxconn T99W709
  - smb: server: Fix extension string in ksmbd_extract_shortname()
  - ksmbd: fix corrupted mtime and ctime in smb2_open
  - ksmbd: fix Preauh_HashValue race condition
  - ksmbd: fix null pointer dereference error in generate_encryptionkey
  - vsock: Do not allow binding to VMADDR_PORT_ANY
  - selftests/perf_events: Add a mmap() correctness test
  - smb: client: return an error if rdma_connect does not return within 5 seconds
  - smb: client: let recv_done() cleanup before notifying the callers.
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
  - smb: client: make use of common smbdirect_socket
  - smb: smbdirect: add smbdirect_socket.h
  - smb: client: Correct typos in multiple comments across various files
  - smb: client: Use min() macro
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
  - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
  - irqchip: Build IMX_MU_MSI only on ARM
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
  - sunrpc: fix client side handling of tls alerts
  - net/sched: taprio: enforce minimum value for picos_per_byte
  - net: drop UFO packets in udp_rcv_segment()
  - ipv6: reject malicious packets in ipv6_gso_segment()
  - net/mlx5: Correctly set gso_segs when LRO is used
  - netlink: specs: ethtool: fix module EEPROM input/output arguments
  - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
  - phy: mscc: Fix parsing of unicast frames
  - netpoll: prevent hanging NAPI when netcons gets enabled
  - md/md-cluster: handle REMOVE message earlier
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors
  - PCI: pnv_php: Fix surprise plug detection and recovery
  - powerpc/eeh: Export eeh_unfreeze_pe()
  - PCI: pnv_php: Work around switches with broken presence detection
  - kconfig: qconf: fix ConfigList::updateListAllforAll()
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
  - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
  - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
  - scsi: mpt3sas: Fix a fw_event memory leak
  - vfio/pci: Separate SR-IOV VF dev_set
  - vfio/pds: Fix missing detach_ioas op
  - vfio: Prevent open_count decrement to negative
  - vfio: Fix unbalanced vfio_df_close call in no-iommu mode
  - f2fs: fix to calculate dirty data during has_not_enough_free_secs()
  - f2fs: fix to update upper_p in __get_secs_required() correctly
  - f2fs: vm_unmap_ram() may be called from an invalid context
  - f2fs: fix to avoid out-of-boundary access in devs.path
  - f2fs: doc: fix wrong quota mount option description
  - f2fs: fix KMSAN uninit-value in extent_info usage
  - rtc: rv3028: fix incorrect maximum clock rate handling
  - rtc: pcf8563: fix incorrect maximum clock rate handling
  - rtc: pcf85063: fix incorrect maximum clock rate handling
  - rtc: nct3018y: fix incorrect maximum clock rate handling
  - rtc: hym8563: fix incorrect maximum clock rate handling
  - rtc: ds1307: fix incorrect maximum clock rate handling
  - ucount: fix atomic_long_inc_below() argument type
  - module: Restore the moduleparam prefix length check
  - apparmor: fix loop detection used in conflicting attachment resolution
  - apparmor: ensure WB_HISTORY_SIZE value is a power of 2
  - bpf: Check netfilter ctx accesses are aligned
  - bpf: Check flow_dissector ctx accesses are aligned
  - vhost-scsi: Fix log flooding with target does not exist errors
  - mtd: rawnand: atmel: set pmecc data setup time
  - mtd: rawnand: rockchip: Add missing check after DMA map
  - mtd: rawnand: atmel: Fix dma_mapping_error() address
  - jfs: fix metapage reference count leak in dbAllocCtl
  - crypto: qat - fix seq_file position update in adf_ring_next()
  - crypto: qat - fix DMA direction for compression on GEN2 devices
  - perf tools: Remove libtraceevent in .gitignore
  - sh: Do not use hyphen in exported variable name
  - ASoC: fsl_xcvr: get channel status data when PHY is not exists
  - dmaengine: nbpfaxi: Add missing check after DMA map
  - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
  - fs/orangefs: Allow 2 more characters in do_c_string()
  - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
  - soundwire: stream: restore params when prepare ports fail
  - crypto: img-hash - Fix dma_unmap_sg() nents value
  - crypto: keembay - Fix dma_unmap_sg() nents value
  - hwrng: mtk - handle devm_pm_runtime_enable errors
  - watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
  - scsi: isci: Fix dma_unmap_sg() nents value
  - scsi: mvsas: Fix dma_unmap_sg() nents value
  - scsi: elx: efct: Fix dma_unmap_sg() nents value
  - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
  - clk: sunxi-ng: v3s: Fix de clock definition
  - perf tests bp_account: Fix leaked file descriptor
  - kernel: trace: preemptirq_delay_test: use offstack cpu mask
  - crypto: inside-secure - Fix `dma_unmap_sg()` nents value
  - perf sched: Fix memory leaks in 'perf sched latency'
  - perf sched: Fix memory leaks for evsel->priv in timehist
  - perf sched: Free thread->priv using priv_destructor
  - perf dso: Add missed dso__put to dso__load_kcore
  - perf tools: Fix use-after-free in help_unknown_cmd()
  - Fix dma_unmap_sg() nents value
  - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
  - fanotify: sanitize handle_type values when reporting fid
  - pinctrl: sunxi: Fix memory leak on krealloc failure
  - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
  - crypto: arm/aes-neonbs - work around gcc-15 warning
  - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
  - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
  - clk: xilinx: vcu: unregister pll_post only if registered correctly
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
  - mtd: fix possible integer overflow in erase_xfer()
  - crypto: marvell/cesa - Fix engine load inaccuracy
  - crypto: qat - use unmanaged allocation for dc_data
  - crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
  - PCI: rockchip-host: Fix "Unexpected Completion" log message
  - bpf/preload: Don't select USERMODE_DRIVER
  - ipv6: annotate data-races around rt->fib6_nsiblings
  - ipv6: fix possible infinite loop in fib6_info_uses_dev()
  - vrf: Drop existing dst reference in vrf_ip6_input_dst
  - selftests: rtnetlink.sh: remove esp4_offload after test
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update
  - netfilter: xt_nfacct: don't assume acct name is null-terminated
  - can: kvaser_usb: Assign netdev.dev_port based on device channel index
  - can: kvaser_pciefd: Store device channel index
  - can: peak_usb: fix USB FD devices potential malfunction
  - tools/rv: Do not skip idle in trace
  - Bluetooth: hci_event: Mask data status from LE ext adv reports
  - kcsan: test: Initialize dummy variable
  - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
  - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
  - wifi: ath12k: fix endianness handling while accessing wmi service bit
  - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
  - wifi: mac80211: Don't call fq_flow_idx() for management frames
  - wifi: mac80211: Do not schedule stopped TXQs
  - wifi: plfxlc: Fix error handling in usb driver probe
  - wifi: mac80211: reject TDLS operations when station is not associated
  - iommu/amd: Fix geometry.aperture_end for V2 tables
  - mwl8k: Add missing check after DMA map
  - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
  - tcp: call tcp_measure_rcv_mss() for ooo packets
  - xen/gntdev: remove struct gntdev_copy_batch from stack
  - net_sched: act_ctinfo: use atomic64_t for three counters
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  - um: rtc: Avoid shadowing err in uml_rtc_start()
  - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
  - netfilter: nf_tables: adjust lockdep assertions handling
  - netfilter: nf_tables: Drop dead code from fill_*_info routines
  - fbcon: Fix outdated registered_fb reference in comment
  - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
  - m68k: Don't unregister boot console needlessly
  - drm/msm/dpu: Fill in min_prefill_lines for SC8180X
  - kselftest/arm64: Fix check for setting new VLs in sve-ptrace
  - net: dst: annotate data-races around dst->input
  - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
  - wifi: ath11k: clear initialized flag for deinit-ed srng lists
  - iwlwifi: Add missing check for alloc_ordered_workqueue
  - wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
  - wifi: rtl818x: Kill URBs before clearing tx status queue
  - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
  - caif: reduce stack size, again
  - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
  - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
  - selftests/bpf: fix signedness bug in redir_partial()
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
  - bpf, sockmap: Fix psock incorrectly pointing to sk
  - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
  - staging: nvec: Fix incorrect null termination of battery manufacturer
  - interconnect: qcom: sc8180x: specify num_nodes
  - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
  - soc: qcom: pmic_glink: fix OF node leak
  - samples: mei: Fix building on musl libc
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
  - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
  - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
  - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
  - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
  - arm: dts: ti: omap: Fixup pinheader typo
  - usb: early: xhci-dbc: Fix early_ioremap leak
  - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
  - pps: fix poll support
  - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  - spi: stm32: Check for cfg availability in stm32_spi_probe
  - usb: misc: apple-mfi-fastcharge: Make power supply names unique
  - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
  - ARM: dts: vfxxx: Correctly use two tuples for timer address
  - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
  - arm64: dts: qcom: sc7180: Expand IMEM region
  - arm64: dts: qcom: sdm845: Expand IMEM region
  - soc: qcom: QMI encoding/decoding for big endian
  - selftests: Fix errno checking in syscall_user_dispatch test
  - ASoC: mediatek: use reserved memory or enable buffer pre-allocation
  - gfs2: No more self recovery
  - Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
  - hfs: make splice write available again
  - hfsplus: make splice write available again
  - ublk: use vmalloc for ublk_device's __queues
  - fs_context: fix parameter name in infofc() macro
  - audit,module: restore audit logging in load failure case
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM
  - ASoC: Intel: fix SND_SOC_SOF dependencies
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
  - ethernet: intel: fix building with large NR_CPUS
  - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
  - interference: Fix uninitialized ifs_clock compiling issue
  - iommu/ummu: optimize log printing
  - !20455 Fix compilation failure caused by PR#20174
  - !20302  CVE-2026-22980
  - !20142  CVE-2025-68803
  - !20261  ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
  - !20435  fix CVE-2026-22998
  - !20433  scsi: target: Reset t_task_cdb pointer in error case
  - !20432  scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
  - !20431  block: Use RCU in blk_mq_[un
  - !20307  tpm: Cap the number of PCR banks
  - !20062  xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
  - !20157 v2  md: backport from mainline
  - rcu: Protect ->defer_qs_iw_pending from data race
  - platform/x86/intel/pmt: fix compilation failure caused by PR#20174
  - iommu/ummu: optimize kv cache memory management
  - iommu/ummu: optimize permission table management
  - iommu/ummu: remove check for eid_type while del eid
  - iommu/ummu: optimize the code implementation
  - drivers/perf: fix ummu-pmu data reading exception
  - iommu/ummu: IOMMU_DOMAIN_BLOCKED type don not sync tct
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
  - net: unic: Notify mami of the bond ip change.
  - ub: ubase: Support for UE link by ctrlq message
  - ub: ubase: send a deactivate req in removing
  - ub: ubase: Querying TPG/TP contexts in the chip is no longer supported after enabling safe mode.
  - ub: ubase: Use an independent thread for the ctrlq workqueue.
  - !20368 ubcore: fix logging and permission for route query.
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
  - !20344  ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  - net: unic: Fix the ummu 0xa event that occurs when modifying queues and resetting concurrent scenarios
  - ub: ubase: Add KABI compatibility
  - ub: ubase: fixing the issue of cdma ctp_req_vl parameter configuration
  - ub: ubase: add PMU IDEV interrupt supported abilities.
  - ub: ubase: Delete the tid mask for eq, jfs, jfr, and jfc context
  - ub: ubase: Set the completion event interrupt to auto
  - net: unic: fix poll tx read old skb cause a UAF bug
  - !20249 Fix CVE-2025-38489
  - !20250 Fix CVE-2025-38480
  - !20378 Fix CVE-2025-39838
  - !20430  Fix CVE-2025-39942
  - !20351 Fix CVE-2025-71149
  - !20375 Fix CVE-2025-71150
  - !20323 Fix CVE-2025-38730
  - !20320 Fix CVE-2025-68814
  - !20314 Fix CVE-2025-71072
  - !20315 Fix CVE-2025-68794
  - !20403  bpf: Check skb->transport_header is set in bpf_skb_check_mtu
  - !20402  bpf: Do not let BPF test infra emit invalid GSO types to stack
  - !20401  tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
  - !20400  netfilter: nft_ct: add seqadj extension for natted connections
  - !20399  net: xfrm: Fix CVE-2025-40215
  - !20398  net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - !20397  bpf: Reject narrower access to pointer ctx fields
  - !20396  Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  - !20394  IB/mlx5: Fix potential deadlock in MR deregistration
  - !20367 ub: cdma: cdma uaf bugfix
  - net/mlx5e: Fix crash on profile change rollback failure
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  - PCI/AER: Fix NULL pointer access by aer_info
  - gfs2: No more self recovery
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
  - crypto: qat - flush misc workqueue during device shutdown
  - !20174 Backport PMT spec 3.0 support
  - !20366 [Hygon][6.6][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
  - !19814 [OLK-6.6] Batch flushing user memory encrytion status change
  - !20393 [OLK-6.6][linux-6.6.y sync] Backport 6.6.100-6.6.101 LTS Patches
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  - nvmet-tcp: remove boilerplate code
  - scsi: target: Reset t_task_cdb pointer in error case
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
  - smb: server: remove separate empty_recvmsg_queue
  - !20384 ub:ubus: Fix ubus link message and pool device error
  - !20389  gfs2: Prevent recursive memory reclaim
  - !20388  *** fix CVE-2025-38062 ***
  - !20387  KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
  - !20386  pinctrl: check the return value of pinmux_ops::get_function_name()
  - !20385  iommu/amd/pgtbl: Fix possible race while increase page table level
  - ub:ubus: Not cfg access during surprise down
  - ub:hisi-ubus: Delete validate_pa err print
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it
  - can: netlink: can_changelink(): allow disabling of automatic restart
  - Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
  - drm/sched: Remove optimization that causes hang when killing dependent jobs
  - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
  - bpf: Check skb->transport_header is set in bpf_skb_check_mtu
  - bpf: Do not let BPF test infra emit invalid GSO types to stack
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
  - netfilter: nft_ct: add seqadj extension for natted connections
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
  - xfrm: delete x->tunnel as we delete x
  - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - bpf: Reject narrower access to pointer ctx fields
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  - IB/mlx5: Fix potential deadlock in MR deregistration
  - ub:ubus: Fix ubus link message and pool device error
  - ub:hisi-ubus: cq poller maximum handle 64 cqe per time
  - ub:hisi-ubus:Fix vdm message print error
  - ub:ubus:Fix ubus interrupt release issue
  - wifi: mt76: mt7921: prevent decap offload config before STA initialization
  - mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
  - iio: hid-sensor-prox: Restore lost scale assignments
  - iio: hid-sensor-prox: Fix incorrect OFFSET calculation
  - crypto: powerpc/poly1305 - add depends on BROKEN for now
  - erofs: address D-cache aliasing
  - drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
  - ALSA: hda: Add missing NVIDIA HDA codec IDs
  - ALSA: hda/tegra: Add Tegra264 support
  - comedi: comedi_test: Fix possible deletion of uninitialized timers
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
  - usb: typec: tcpm: allow switching to mode accessory to mux properly
  - usb: typec: tcpm: allow to use sink in accessory mode
  - drm/amdkfd: Don't call mmput from MMU notifier callback
  - mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
  - selftests: mptcp: connect: also cover checksum
  - selftests: mptcp: connect: also cover alt modes
  - resource: fix false warning in __request_region()
  - gve: Fix stuck TX queue for DQ queue format
  - e1000e: ignore uninitialized checksum word on tgp
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
  - dpaa2-switch: Fix device reference count leak in MAC endpoint handling
  - dpaa2-eth: Fix device reference count leak in MAC endpoint handling
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
  - sprintf.h requires stdarg.h
  - bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
  - i2c: virtio: Avoid hang by using interruptible completion wait
  - i2c: tegra: Fix reset error handling with ACPI
  - platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
  - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
  - can: dev: can_restart(): move debug message and stats after successful restart
  - can: dev: can_restart(): reverse logic to remove need for goto
  - i40e: When removing VF MAC filters, only check PF-set MAC
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards
  - i40e: Add rx_missed_errors for buffer exhaustion
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
  - net/mlx5: Fix memory leak in cmd_exec()
  - staging: vchiq_arm: Make vchiq_shutdown never fail
  - x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
  - regmap: fix potential memory leak of regmap_bus
  - iio: adc: ad7949: use spi_is_bpw_supported()
  - interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
  - RDMA/core: Rate limit GID cache warning messages
  - virtio_ring: Fix error reporting in virtqueue_resize
  - !20348 [OLK-6.6][linux-6.6.y sync] Backport 6.6.99-6.6.100 LTS Patches
  - !20346  tracing: Fix crash on synthetic stacktrace field usage
  - vfs: Don't leak disconnected dentries on umount
  - !20334 Fix CVE-2025-68780
  - gfs2: Prevent recursive memory reclaim
  - amd/amdkfd: enhance kfd process check in switch partition
  - drm/amdkfd: allow compute partition mode switch with cgroup exclusions
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
  - pinctrl: check the return value of pinmux_ops::get_function_name()
  - iommu/amd/pgtbl: Fix possible race while increase page table level
  - !19966  nvme-fc: use lock accessing port_state and rport state
  - ASoC: fsl_sai: replace regmap_write with regmap_update_bits
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - cifs: prevent NULL pointer dereference in UTF16 conversion
  - ksmbd: Fix refcount leak when invalid session is found on session lookup
  - ubcore: fix logging and permission for route query.
  - !20232 driver/coda: VirtCCA supports MSI device DA
  - Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
  - !20197 ub: udma&ubase: fix a bug that caused long reboot time
  - x86: Resolve FPU state corruption between atomic and non-atomic contexts
  - ub: cdma: cdma uaf bugfix
  - ub: cdma: jfs call trace bugfix
  - !20353  x86/fpu: Clear XSTATE_BV[i
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
  - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
  - nvmem: layouts: u-boot-env: remove crc32 endianness conversion
  - i2c: omap: fix deprecated of_property_read_bool() use
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode
  - regulator: pwm-regulator: Manage boot-on with disabled PWM channels
  - regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
  - i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
  - i2c: omap: Fix an error handling path in omap_i2c_probe()
  - i2c: omap: Add support for setting mux
  - usb: dwc3: qcom: Don't leave BCR asserted
  - usb: hub: Don't try to recover devices lost during warm reset.
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
  - ipv6: make addrconf_wq single threaded
  - !20354 cpufreq/sched: Explicitly synchronize limits_changed flag handling
  - sched/deadline: only set free_cpus for online runqueues
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling
  - io_uring/poll: correctly handle io_poll_add() return value on update
  - shmem: fix recovery on rename failures
  - io_uring: fix filename leak in __io_openat_prep()
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
  - rxrpc: Fix transmission of an abort in response to an abort
  - rxrpc: Fix recv-recv race of completed call
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
  - net: bridge: Do not offload IGMP/MLD messages
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
  - net/mlx5: Correctly set gso_size when LRO is used
  - Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
  - Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
  - Bluetooth: SMP: If an unallowed command is received consider it a failure
  - Bluetooth: hci_sync: fix connectable extended advertising when using static random address
  - hwmon: (corsair-cpro) Validate the size of the received input buffer
  - selftests: net: increase inter-packet timeout in udpgro.sh
  - wifi: cfg80211: remove scan request n_channels counted_by
  - nvme: fix misaccounting of nvme-mpath inflight I/O
  - net: phy: Don't register LEDs for genphy
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
  - rpl: Fix use-after-free in rpl_do_srh_inline().
  - block: fix kobject leak in blk_unregister_queue
  - net: emaclite: Fix missing pointer increment in aligned_read()
  - soundwire: amd: fix for clearing command status register
  - soundwire: amd: fix for handling slave alerts after link is down
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - comedi: Fix some signed shift left operations
  - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  - comedi: das6402: Fix bit shift out of bounds
  - comedi: das16m1: Fix bit shift out of bounds
  - comedi: aio_iiro_16: Fix bit shift out of bounds
  - comedi: pcl812: Fix bit shift out of bounds
  - iio: adc: stm32-adc: Fix race in installing chained IRQ handler
  - iio: adc: max1363: Reorder mode_list[] entries
  - iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
  - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
  - soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
  - soc: aspeed: lpc-snoop: Cleanup resources in stack-order
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
  - pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
  - net: libwx: properly reset Rx ring descriptor
  - net: libwx: remove duplicate page_pool_put_full_page()
  - mmc: sdhci_am654: Workaround for Errata i2312
  - mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
  - mmc: bcm2835: Fix dma_unmap_sg() nents value
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
  - isofs: Verify inode mode when loading from disk
  - dmaengine: nbpfaxi: Fix memory corruption in probe()
  - af_packet: fix soft lockup issue caused by tpacket_snd()
  - af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
  - arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
  - arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
  - arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
  - net/mlx5: Update the list of the PCI supported devices
  - phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
  - io_uring/poll: fix POLLERR handling
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
  - drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
  - tracing/osnoise: Fix crash in timerlat_dump_stack()
  - spi: Add check for 8-bit transfer with 8 IO mode support
  - pch_uart: Fix dma_sync_sg_for_device() nents value
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops()
  - i2c: stm32: fix the device used for the DMA map
  - tracing: Fix crash on synthetic stacktrace field usage
  - usb: musb: fix gadget state on disconnect
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
  - USB: serial: option: add Foxconn T99W640
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
  - phy: tegra: xusb: Disable periodic tracking on Tegra234
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  - fs/proc: fix uaf in proc_readdir_de()
  - io_uring/net: commit partial buffers on retry
  - nvme: fix admin request_queue lifetime
  - fs/notify: call exportfs_encode_fid with s_umount
  - iomap: adjust read range correctly for non-block-aligned positions
  - fuse: fix livelock in synchronous file put from fuseblk workers
  - tpm: Cap the number of PCR banks
  - nfsd: provide locking for v4_end_grace
  - Revert "nfsd: provide locking for v4_end_grace"
  - config: enable config for PMT discovery driver
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access
  - platform/x86/intel/pmt: fix build dependency for kunit test
  - platform/x86/intel/pmt/discovery: fix format string warning
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature
  - platform/x86/intel/pmt/discovery: Get telemetry attributes
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h
  - docs: Add ABI documentation for intel_pmt feature directories
  - platform/x86/intel/pmt: Add PMT Discovery driver
  - sysfs: Fix crash on empty group attributes array
  - sysfs: Introduce a mechanism to hide static attribute_groups
  - platform/x86/intel/vsec: Add new Discovery feature
  - platform/x86/intel/vsec: Skip driverless features
  - platform/x86/intel/vsec: Skip absent features during initialization
  - platform/x86/intel/vsec: Add device links to enforce dependencies
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space
  - platform/x86/intel/vsec: Add private data for per-device data
  - MAINTAINERS: Add link to documentation of Intel PMT ABI
  - platform/x86/intel/pmt: allow user offset for PMT callbacks
  - driver/coda: VirtCCA supports MSI device DA
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
  - Rename leapioraid to leapraid and release v2.0
  - ub: udma: fix a bug that caused long reboot time.
  - ub: ubase: Accelerate when ctrl node is shutting down
  - platform/x86/intel/pmt: Use PMT callbacks
  - platform/x86/intel/vsec: Add PMT read callbacks
  - platform/x86/intel/vsec.h: Move to include/linux
  - md: prevent incorrect update of resync/recovery offset
  - md/raid1: Fix data corruption for degraded array with slow disk
  - md/raid1: set max_sectors during early return from choose_slow_rdev()
  - md-cluster: fix no recovery job when adding/re-adding a disk
  - md-cluster: fix hanging issue while a new disk adding
  - md/raid5: recheck if reshape has finished with device_lock held
  - md-cluster: Constify struct md_cluster_operations
  - md: Remove unneeded semicolon
  - md/raid5: fix spares errors about rcu usage
  - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
  - md: pass in max_sectors for pers->sync_request()
  - md: factor out helpers for different sync_action in md_do_sync()
  - md: replace last_sync_action with new enum type
  - md: use new helpers in md_do_sync()
  - md: don't fail action_store() if sync_thread is not registered
  - md: remove parameter check_seq for stop_sync_thread()
  - md: replace sysfs api sync_action with new helpers
  - md: factor out helper to start reshape from action_store()
  - md: add new helpers for sync_action
  - md: add a new enum type sync_action
  - md: rearrange recovery_flags
  - md/raid0: don't free conf on raid0_run failure
  - md: make md_flush_request() more readable
  - md: change the return value type of md_write_start to void
  - md: Revert "md: Fix overflow in is_mddev_idle"
  - md: don't account sync_io if iostats of the disk is disabled
  - md: Fix overflow in is_mddev_idle
  - md: add check for sleepers in md_wakeup_thread()
  - md: add a mddev_is_dm helper
  - md: add a mddev_add_trace_msg helper
  - md: add a mddev_trace_remap helper
  - dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
  - dm-raid: add a new helper prepare_suspend() in md_personality
  - dm-raid: really frozen sync_thread during suspend
  - md: add a new helper reshape_interrupted()
  - md: export helper md_is_rdwr()
  - md: export helpers to stop sync_thread
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume
  - md/raid1: factor out helpers to choose the best rdev from read_balance()
  - md/raid1: factor out the code to manage sequential IO
  - md/raid1: factor out choose_bb_rdev() from read_balance()
  - md/raid1: factor out choose_slow_rdev() from read_balance()
  - md/raid1: factor out read_first_rdev() from read_balance()
  - md/raid1-10: factor out a new helper raid1_should_read_first()
  - md/raid1-10: add a helper raid1_check_read_range()
  - md/raid1: fix choose next idle in read_balance()
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf
  - md/raid1: factor out helpers to add rdev to conf
  - md: add a new helper rdev_has_badblock()
  - md: check mddev->pers before calling md_set_readonly()
  - md: clean up openers check in do_md_stop() and md_set_readonly()
  - md: sync blockdev before stopping raid or setting readonly
  - md: factor out a helper to sync mddev
  - md: return directly before setting did_set_md_closing
  - md: changed the switch of RAID_VERSION to if
  - md: merge the check of capabilities into md_ioctl_valid()
  - md: Don't suspend the array for interrupted reshape
  - md: Don't register sync_thread for reshape directly
  - md: Make sure md_do_sync() will set MD_RECOVERY_DONE
  - md: Don't ignore read-only array in md_check_recovery()
  - md: Don't ignore suspended array in md_check_recovery()
  - md: get rdev->mddev with READ_ONCE()
  - md: remove redundant md_wakeup_thread()
  - md: remove redundant check of 'mddev->sync_thread'
  - md: fix a suspicious RCU usage warning
  - raid: Remove now superfluous sentinel element from ctl_table array
  - NFSD: NFSv4 file creation neglects setting ACL
  - nfsd: set security label during create operations
  - xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
  - nvme-fc: use lock accessing port_state and rport state
  - x86/mm: Batch flushing user memory encrytion status change


author: Li Nan <linan122@huawei.com> - 6.6.0-138.0.0.119
changelog:
  - !20588 [OLK-6.6] Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
  - Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
  - !20576  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - !20575  RDMA/cm: Fix leaking the multicast GID table reference
  - !20580  RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
  - !20551  Fix CVE-2025-68785
  - !20478  f2fs: fix to avoid potential deadlock
  - !20501 [OLK-6.6] backport important bugfix for bnxt driver from upstream linux-6.6.y
  - !20520 Fix CVE-2026-23038
  - !20424  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - !20425  mlx5: Fix default values in create CQ
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - RDMA/cm: Fix leaking the multicast GID table reference
  - net: openvswitch: fix middle attribute validation in push_nsh() action
  - net: openvswitch: remove never-working support for setting nsh fields
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
  - bnxt_en: Fix potential data corruption with HW GRO/LRO
  - f2fs: fix to avoid potential deadlock
  - mlx5: Fix default values in create CQ
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:File growth can be calculated only if it is strictly greater than
         fix the error of retransmission


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Linux_zhang <zhangruifang@h-partners.com> - 2.39.1-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: revert libblkid ext add checksum support, the disk cannot be mounted because the checksum may fail.
          [add] backport-revert-libblkid-ext-add-checksum-support.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: shixuantong <shixuantong1@huawei.com> - 3.4.4-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: shechenglong <shechenglong@xfusion.com> - 25.0.3-17
changelog:
  - DESC: move group creation into pre section rather than post section
          change requires into meta dependency for its actual use


author: Funda Wang <fundawang@yeah.net> - 25.0.3-22
changelog:
  - fix CVE-2024-36620, CVE-2024-36621, CVE-2024-36623
  - reorganize patches so that they could be applied automatically


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.4-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change the files order in patch file fix-doc-about-difok.patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: xinghe <xinghe2@h-partners.com> - 2.74.3-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-7
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.10.5-2
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-14
changelog:
  - Bugfix: Enhance the capability to trace the shutdown status of large VMS
  - conf: qemu: support provide inject secret for Hygon CSV
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM.
  - Consistent coding style with opensource.
  - build: Make daemons depend on generated *_protocol.[ch]
  - Add the get tmm memory info API into libvirt-host. Also should add the RPC calls into libvirtd for API calling.
  - Add cvm parameter into the type of LaunchSecurity which is a optional filed for libvirt xml


author: fangyi <eric.fangyi@huawei.com> - 9.10.0-15
changelog:
  - cpu-Add-new-Dharma-CPU-model.patch
  - qemu-cvm-support-uefi-boot-by-rom.patch
  - iommufd-Support-configuring-iommufd-backends-for-qem.patch
  - vdpa-iommufd-Support-associating-iommufd-with-vDPA-h.patch
  - capabilities-add-fun-to-determine-if-binary-is-strat.patch
  - qemu_command-unsupport-command-line-will-not-built-f.patch
  - chardev-use-path-instead-of-fd-for-stratovirt.patch
  - Revert-qemu-command-Delegate-qemuBuildDriveStr-to-SD.patch
  - Revert-qemu-Remove-pre-blockdev-PFLASH-setup.patch
  - qemu_command-get-disk-alias-from-disk-instead-of-nod.patch


author: JiaboFeng <fengjiabo1@huawei.com> - 9.10.0-17
changelog:
  - Revert "Automatically unbind all devices' driver under same root port and bind to vfio-pci in the context of CVM."


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-18
changelog:
  - add qemu VIRTCCA capability detection
  - add virtcca test xml
  - virtcca use hugepage disable bind numa
  - util: resctrl: add parsing process for the new parameters cache id
  - util:resctrl:add L3 priority parse and format method
  - conf: add support for cachetune/L3 priority
  - util: resctrl: define memory bandwidth types & add parse and format method
  - conf: add support for memorytune XML processing for MB hardlimit
  - conf: add support for memorytune XML processing for MB priority
  - conf: add support for memorytune XML processing for MB min_bandwidth
  - [backport]domcaps: Report launchSecurity
  - [backport]qemu: Fill launchSecurity in domaincaps
  - [v4-1-4]src: Add ARM CCA support in qemu driver to launch VM
  - [v4-2-4]src: Add ARM CCA support in domain capabilities command
  - [v4-3-4]src: Add ARM CCA support in domain schema
  - hostdev: add numa configure for host pci device


author: ZixinLi <lizixin10@h-partners.com> - 9.10.0-19
changelog:
  - Fix CVE-2025-12748 CVE-2025-13193
  - conf: Add virDomainDefIDsParseString
  - bhyve: Check ACLs before parsing the whole domain XML
  - libxl: Check ACLs before parsing the whole domain XML
  - lxc: Check ACLs before parsing the whole domain XML
  - vz: Check ACLs before parsing the whole domain XML
  - ch: Check ACLs before parsing the whole domain XML
  - qemu: Check ACLs before parsing the whole domain XML
  - qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots


author: Funda Wang <fundawang@yeah.net> - 2.11.5-5
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Funda Wang <fundawang@yeah.net> - 2.11.5-6
changelog:
  - Type:CVE
  - CVE:CVE-2025-32414
  - CVE:CVE-2025-32415
  - SUG:NA
  - DESC: fix CVE-2025-32414, CVE-2025-32415


author: liuchao <liuchao173@huawei.com> - 2.13.7-1
changelog:
  - Update to 2.13.7:
    - fix: invoke MKDIR_P before changing directories
    - fix: -Wsingle-bit-bitfield-constant-conversion with clang16
    - fix: clean java inner class files in examples
    - Introduce sync vs unsync enablers
    - Fix: misaligned urcu reader accesses
    - ustfork: Fix warning about volatile qualifier
    - ustfork: Fix possible race conditions
    - Fix: tracepoint: Remove trailing \ at the end of macro
    - fix: python agent: use stdlib distutils when setuptools is installed
    - fix: python agent: install on Debian python >= 3.10
    - fix: python agent: Add a dependency on generated files
    - python: use setuptools with python >= 3.12


author: jikai<jikai11@huawei.com> - 5.0.2-13
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: unfreeze freezing container and bugfix for files.limit and syscontainer


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 5.0.2-14
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: update meson parameters for disabling LTO when building with clang & ld.bfd


author: yuanchao <1050706328@qq.com> - 5.0.2-16
changelog:
  - Type: bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix error of cc.compiles in meson.build on aarch cased by '-fstack-clash-protection' and '-Werror'


author: wujichao <wujichao1@huawei.com> - 0.3-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:bugfix: Information in cpu directory is overwritten after lxcfs restart


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 1.9.4-3
changelog:
  - Add patch riscv_zicclsm_lz4_force_mem_access_2.patch to configure LZ4_FORCE_MEMORY_ACCESS=2 for RISC-V with Zicclsm extension


author: chenyanpanHW <chenyanpan@huawei.com> - 12.5-33
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/nail-11.25-config.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.3-pager.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-lzw.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fname-null.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-collect.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-usage.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-man-page-fixes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-outof-Introduce-expandaddr-flag.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-fio.c-Unconditionally-require-wordexp-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-globname-Invoke-wordexp-with-WRDE_NOCMD-CVE-2004-277.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-unpack-Disable-option-processing-for-email-addresses.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-empty-from.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-nss-hostname-matching.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-encsplit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/mailx-12.5-openssl.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-mailx-12.5-no-SSLv3.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/set-mail-defualt-did-not-record-failsend.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xiejing <xiejing@kylinos.cn> - 4:10.5.25-1
changelog:
  - Bump to 10.5.25 for resolving CVE-2024-21096
  - Fix version description in systemd service file
  - Add conflict with greatsql and change requires


author: yanglu <yanglu72@h-partners.com> - 2:0.95-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


author: wangkai <13474090681@163.com> - 8.0.44-1
changelog:
  - Update to 8.0.44 for fix CVEs (CVE-2025-53069,CVE-2025-53062,CVE-2025-53054,
    CVE-2025-53053,CVE-2025-53045,CVE-2025-53044,CVE-2025-53042,CVE-2025-53040)


author: yaoxin <1024769339@qq.com> - 8.0.45-1
changelog:
  - Update to 8.0.45 for fix CVEs (CVE-2026-21936,CVE-2026-21937,
    CVE-2026-21941,CVE-2026-21948,CVE-2026-21964,CVE-2026-21968)


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: gaihuiying <eaglegai@163.com> - 1:5.9.3-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Customized the anti-attacki/reset-last_engineTime function for IdeaUI
         change the permissions of passtest


author: xingwei <xingwei14@h-partners.com> - 1:5.9.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Migration patch from upstream, add compatibility to parse
  Linux 6.7 Ip header while keep support for previous versions.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.2.8-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0000-netcf-call-aug_load-at-most-once-per-second.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-netcf-optimize-aug_match-query-for-all-ifcfg-files-related.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-netcf-linux-include-bond-element-for-bonds-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0003-netcf-Properly-classify-bond-devices-with-no-slaves.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-memory-leak-in-aug-match-mac.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: lingsheng <lingsheng1@h-partners.com> - 1:1.0.8-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:datatype: don't return a const string from cgroupv2_get_path()
  datatype: fix leak and cleanup reference counting for struct datatype
  datatype: initialize TYPE_CT_EVENTBIT slot in datatype array
  datatype: initialize TYPE_CT_LABEL slot in datatype array
  evaluate: do not remove anonymous set with protocol flags and single element
  evaluate: don't crash if object map does not refer to a value
  evaluate: error out when expression has no datatype
  evaluate: error out when store needs more than one 128bit register of align fixup
  evaluate: fix check for truncation in stmt_evaluate_log_prefix()
  evaluate: fix double free on dtype release
  evaluate: fix memleak in prefix evaluation with wildcard interface name
  evaluate: reject set in concatenation
  evaluate: revisit anonymous set with single element optimization
  evaluate: skip anonymous set optimization for concatenations
  evaluate: stmt_nat: set reference must point to a map
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: validate chain max length
  evaluate: validate maximum log statement prefix length
  exthdr: prefer raw_type instead of desc->type
  json: expose dynamic flag
  json: fix use after free in table_flags_json()
  libnftables: Drop cache in -c/--check mode
  meta: fix tc classid parsing out-of-bounds access
  netlink: don't crash if prefix for < byte is requested
  netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set()
  netlink: handle invalid etype in set_make_key()
  parser_bison: fix ct scope underflow if ct helper section is duplicated
  parser_bison: fix memleak in meta set error handling
  parser_bison: make sure obj_free releases timeout policies
  parser_json: Catch nonsense ops in match statement
  parser_json: Default meter size to zero
  parser_json: Fix flowtable prio value parsing
  parser_json: Fix synproxy object mss/wscale parsing
  parser_json: Fix typo in json_parse_cmd_add_object()
  parser_json: Proper ct expectation attribute parsing
  parser_json: Wrong check in json_parse_ct_timeout_policy()
  py: fix exception during cleanup of half-initialized Nftables
  rule: fix sym refcount assertion


author: liweigang <liweiganga@uniontech.com> - 1:1.0.8-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: evaluate: guard against NULL basetype
  evaluate: error out if basetypes are different
  evaluate: reject attempt to update a set
  evaluate: release mpz type in expr_evaluate_list() error path
  expression: missing line in describe command with invalid expression
  evaluate: handle invalid mapping expressions in stateful object statements gracefully


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: disable meta set with ranges
         src: reject large raw payload and concat expressions
         evaluate: fix stack overflow with huge priority string
         tcpopt: don't create exthdr expression without datatype
         src: do not allow to chain more than 16 binops
         rule: fix ASAN errors in chain priority to textual names
         tests: shell: add regression test for double-free crash bug
         evaluate: handle invalid mapping expressions in stateful object
         evaluate: Fix incorrect checking the `base` variable in case of IPV6


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ct expectation: fix 'list object x' vs. 'list objects in table' confusion
         tests: shell: connect chains to hook point


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         parser_json: release buffer returned by json_dumps
         parser_json: fix crash in json_parse_set_stmt_list
         parser_json: fix handle memleak from error path
         parser_json: fix several expression memleaks from error path
         libnftables: Zero ctx->vars after freeing it


author: eaglegai <eaglegai@163.com> - 1:1.0.8-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         evaluate: don't allow nat map with specified protocol
         rule: return error if table does not exist
         json: make sure timeout list is initialised
         evaluate: don't update cache for anonymous chains
         json: return error if table does not exist
         json: don't BUG when asked to list synproxies
         evaluate: compact STMT_F_STATEFUL checks
         evaluate: only allow stateful statements in set and map definitions
         optimize: expand expression list when merging into concatenation
         netlink: fix stack overflow due to erroneous rounding
         netlink: bogus concatenated set ranges with netlink message overrun
         netlink: fix crash when ops doesn't support udata
         netlink: Catch unknown types when deserializing objects
         netlink: Avoid potential NULL-ptr deref parsing set elem expressions
         netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY
         evaluate: don't BUG on unexpected base datatype
         src: BASECHAIN flag no longer implies presence of priority expression
         parser_bison: only reset by name is supported by now


author: gaihuiying <eaglegai@163.com> - 1:1.0.8-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patches
         segtree: fix string data initialisation
         src: netlink: netlink_delinearize_table() may return NULL
         src: ensure chain policy evaluation when specified
         src: fix memory leak in anon chain error handling
         mnl: silence compiler warning
         datatype: Increase symbolic constant printer robustness
         evaluate: follow prefix expression recursively if needed


author: yixiangzhike <yixiangzhike007@163.com> - 0.9.12-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Move temporary files from /var/run to /run to delete warning in installing


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-8
changelog:
  - Type:CVE
  - ID:CVE-2023-26551
  - SUG:NA
  - DESC:make sure the buffer has enough room for the input extra characters


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-10
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:change the patch of CVE-2023-26551 and fix CVE-2023-26555


author: andy <liuyang01@kylinos.cn> - 2.0.16-12
changelog:
  - backport patches from upstream
  - libnuma: Make numa_available respect EPERM
  - libnuma: fix nodemask allocation size for get_mempolicy


author: yanglongkang <yanglongkang@h-partners.com> - 0.34.7-4
changelog:
  - Replace SELinux deprecated functions
  - Replace deprecated libxml2 calls
  - Fix implicit cast from const to non const


author: Kai Liu <kai.liu@windriver.com> - 0.3.25-5
changelog:
  - Don't run make tasks in background sub-shell, as this causes
    severe issue. Use the _smp_mflags macro instead. See issue
    IB3EV0 for more detail.


author: Funda Wang <fundawang@yeah.net> - 0.23.0-7
changelog:
  - fix CVE-2024-8443, CVE-2024-45615, CVE-2024-45616,
    CVE-2024-45617, CVE-2024-45618, CVE-2024-45619, CVE-2024-45620


author: chenyanpanHW <chenyanpan@huawei.com> - 2.0.0-26
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-multicast-set.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-notify-systemd-of-start-up.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-null-pointer-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-openssl-1.1-fix.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2016-7567.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openslp-2.0.0-cve-2017-17833.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2012-4428-fix-handling-of-string-list-in-slp_common-c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-slp_iface-c-comma-expression-so-it-works-as-designed.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Daemon-sends-wrong-service-reply-when-security-is-enabled.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-DAAddresses-hostname-resolution-issue.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Change-default-slpreg-connection-from-UDP-to-TCP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-interface-parsing-code-to-look-for-null-ifc-addrs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-broadcast-functionality.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Properly-initialize-xcastsocks-for-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Fix-xrealloc-to-properly-free-original-pointer-on-resize.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2019-5544.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: xingwei <xingwei14@h-partners.com> - 2.0.0-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Introduce epoch command to slove package upgrade failure problem


author: renmingshuai<renmingshuai@huawei.com> - 9.3p1-3
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: bitianyuan <bitianyuan@huawei.com> - 9.3p2-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the missing member of the struct Authmethod method_gsskeyex


author: fly_fzc <2385803914@qq.com> - 1:3.0.12-24
changelog:
  - fix CVE-2025-15467,CVE-2025-69418,
        CVE-2025-69419,CVE-2025-69420,
        CVE-2025-69421,CVE-2026-22795,
        CVE-2026-22796


author: xulei <xulei@xfusion.com> - 2.17.5-2
changelog:
  - enhance some behavior: 
    1、add control group system-ovs.slice
    2、OVS_USER_ID change to root:root
    3、add user group openvswith and user openvswith


author: zhangpan <zhangpan103@h-partners.com> - 3.2.1-3
changelog:
  - fix openvswitch-ipsec servive failure when selinux is on
  - fix the problem that openvswitch-ipsec.service causes ipsec.service to fail when starting


author: baiguo <baiguo@kylinos.cn> - 0.4.34-2
changelog:
  - Use vasprintf() if available for error messages and otherwise vsnprintf();orccompiler, orcparse: Use secure UCRT printing functions on Windows


author: jiangchuangang <jiangchuangang@huawei.com> - 2022.7-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update to 2022.7
    add skip-if-etc-mtab-is-not-a-symlink-of-proc-self-mounts.patch for test failed


author: liweigang <liweiganga@uniontech.com> - 3.6-2
changelog:
  - remove patch support gpt_sync_mbr
  - file: huawei-bugfix-add-support-of-gpt_sync_mbr.patch
  - file: add support for gpt_sync_mbr and fix failure of it.


author: wangkai <13474090681@163.com> - 6.2.2-4
changelog:
  - Fix CVE-2024-45769,CVE-2024-45770
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: hugel <gengqihu2@h-partners.com> - 10.42-12
changelog:
  - DESC:sync patches from upstream
         backport-Further-ASCII-tests-and-minor-bugfix-plus-ChangeLog-.patch
         backport-avoid-inconsistency-between-d-and-digit-when-using-a.patch
         backport-Fix-the-lookahead-after-d-or-posix-to-skip-whitespac.patch
         backport-Improve-error-offsets-for-character-classes-548.patch
         backport-Non-recursive-scan-prefix-in-JIT-560.patch


author: tangyuchen <tangyuchen5@huawei.com> - 2.0.0-1
changelog:
  - update to 2.0.0
    - Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR
    - Add '--disable-polkit' option
    - Reset eventCounter when a reader is removed
    - Add "polkit" in "pcscd -v" output if enabled
    - Doxygen: document SCARD_E_INVALID_VALUE for some functions
    - use secure_getenv(3) if available
    - Some other minor improvements


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: chenyanpanHW <chenyanpan@huawei.com> - 4.050-2
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-DBD-mysql-4.050-Remove-a-useless-shebang-from-DBD-mysql.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:3.51-1
changelog:
  - upgrade vertion to 3.51:
    - fix OVERLOAD and FALLBACK handling
    - fix ExtUtils::ParseXS compatibility with perl < 5.8.8
    - add support for elifdef and elifndef
    - allow symbolic alias of default function
    - better support for duplicate ALIASes
    - make versions in ExtUtils-ParseXS consistent


author: dongyuzhen <dongyuzhen@h-partners.com> - 1:2.57-1
changelog:
  - upgrade version to 2.57:
    - fix long standing bug that duplicate options were not detected when the options differ in case while ignore_case is in effect
    - allow periods in option names
    - move Getopt::Long::Parser to a separate module and add documentation
    - do not use Getopt::Long to establish Getopt::Long::Parser version
    - adapt tests for perl core


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.206-1
changelog:
  - upgrade version to 2.206:
    - fix version checks to use correct method
    - drop rt.cpan from SUPPORT section


author: dongyuzhen <dongyuzhen@h-partners.com> - 0.42-1
changelog:
  - upgrade version to 0.42:
    - updated for Perl v5.14 - use `package NAME VERSION` syntax
    - fix typo 'behvior'
    - fix for DragonflyBSD and IPV6_V6ONLY from core perl


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.084-1
changelog:
  - upgrade version to 2.084:
    - various fixes for edge cases
    - update documentation to reflect default SSL_version


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.084-2
changelog:
  - Passing NO_NETWORK_TESTING=1 as an environment variable
    solves the interactive issue required for using rpmbuild locally


author: zhangyao <zhangyao108@huawei.com> - 1:20231213-1
changelog:
  - Upgrade version to 20231213
  - Update certificates
  - Stop installing mk-ca-bundle.pl script
  - Switched tests from Test to Test::More


author: woody2918 <wudi1@uniontech.com> - 1.94-1
changelog:
  - update version to 1.94
  - supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8.
  - Enhancements to the API.


author: huyubiao <huyubiao@huawei.com> - 2:3.48-1
changelog:
  - update version to 3.48
    - Accept TAP version 14
    - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env
    - Color the "ok"s as well.
    - Skip symlink tests on msys2
    - Use use absolute path for executable tests
    - Space-quote executable if has spaces
    - Avoid using Errno::EINTR directly for platforms without it
    - stop calling import on App::Prove plugins


author: zhangyao <zhangyao108@huawei.com> - 2:2.36-1
changelog:
  - DESC: Upgrade version to 2.36, test code modify, build optimization, avoid the use of magic numbers, deal compilation warning


author: gaihuiying <eaglegai@163.com> - 0.9.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add macros to control if need libdrm, pango, libpng and if need to exclude bootlog


author: wangyu <wangqingsan@huawei.com> - 123-1
changelog:
  - update to 123
    - duktape:prevent wrongful termination of runway thread
    - harden the security features of the systemd service
    - add packit build tool
    - systemd:set User/Group and don't change uid/gid if already set
    - stop installing /usr/share/polkit-1/rules.d as 700/polkitd
    - moving the 50-default.rules file location


author: Funda Wang <fundawang@yeah.net> - 2.15-2
changelog:
  - fix build with latest gettext
  - harden systemd service file from openSUSE
  - add patch regarding risc-v arch support


author: gaihuiying <eaglegai@163.com> - 2.5.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:pre-created upstream default lock dir
         Openssl engine API is deprecated for a while thus disable it


author: gaihuiying <eaglegai@163.com> - 2.5.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream
         Fixing up parsing in radiusclient.conf
         Add configure check to see if we have struct sockaddr_ll


author: chenyanpanHW <chenyanpan@huawei.com> - 3.22-52
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-rhconfig.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.15.1-man.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.22-truncate.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/procmail-3.24-ipv6.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Zhu Jin <zhujin18@huawei.com> - 4.0.4-8
changelog:
  - library: address a potential race resulting in a fault and avoid strdup() calls in sd2proc() if possible


author: dongyuzhen <dongyuzhen@h-partners.com> - 25.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: Funda Wang <fundawang@yeah.net> - 25.1-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix build with wrong permission
  - DESC: fix conflicts with protobuf2
  - DESC: revert:distinguish between statically and dynamically compiled pc files and cmake dir to prevent BEP binary differences


author: liuchao <liuchao173.huawei.com> - 1.5.0-1
changelog:
  - upgrade to 1.5.0:
    - Makefile.am: change link order
    - GitHub actions fail on Windows due to missing unzip command
    - Export and install CMake targets
    - Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR
    - remove deprecated functionality
    - Avoid "unused variable" compiler warning
    - Update autotools
    - Support for new Google protobuf 22.x, 23.x releases
    - Miscellaneous fixes
    - Remove protobuf 2.x support
    - Silence some compiler diagnostics
    - Fixing MSVC build for Msbuild and Makefile generators


author: gengqihu <gengqihu2@h-partners.com> - 23.3.1-1
changelog:
  - update version to 23.3.1
  - Fix parallel pip cache downloads causing crash (#12364)
  - Upgrade urllib3 to 1.26.17 (#12343)
  - Fix zsh completion script (#12173)
  - Fix #12166
  - Move the setuptools settings into pyproject.toml
  - Use `-r=...` instead of `-r ...` for hg
  - Drop isort and flake8 settings from setup.cfg
  - Follow imports for more vendored dependencies
  - Enable mypy's strict equality checks (#12209)
  - Fixed argument name in docstring
  - Allow truststore to not import on Python 3.9 and earlier
  - Vendor truststore
  - Fix formatting, combine numbers not strings!
  - Remove uses of `utcnow` in non-vendored code (#12006)
  - Fix issues raised in code review
  - move test_download_metadata mock pypi index utilities to conftest.py
  - Use strict optional checking in req_install.py (#11379)
  - Fix 'force' remove file without write permissions
  - Dropped unused attribute
  - Fix Pytest --use-venv init
  - Limit the double download fix to wheels
  - Fix slowness on Python 3.11 when updating an existing large environment.
  - Fix `pip completion --zsh`


author: lipengyu <lipengyu@kylinos.cn> - 3.11.6-18
changelog:
  - Type:CVE
  - CVE:CVE-2025-13836 CVE-2025-13837 CVE-2025-12084
  - SUG:NA
  - DESC:fix CVE-2025-13836 CVE-2025-13837 CVE-2025-12084


author: Weifeng Su <suweifeng1@huawei.com> - 5.0.8-1
changelog:
  - upgrade to 5.0.8
    -fix a regression error in 5.0.7
    -update testing to validate against python version 2.7 and 3.5-3.11
    -update broken links / no-existent services and references


author: xu_ping <707078654@qq.com> - 7.0.0-1
changelog:
  - Upgrade version to 7.0.0
  - Python 3.12 support and python 3.7 no longer supported
  - Add support bind mount propagation.


author: xuchenchen <xuchenchen@kylinos.cn> - 3.1.3-2
changelog:
  - Type: CVE
  - CVE: CVE-2024-34064
  - SUG: NA
  - DESC: fix disallow invalid characters in keys to xmlattr filter


author: chenhuihan <chenhuihan@huawei.com> - 2.8.0-1
changelog:
  - Update package to version 2.8.0:
    - export PyJWKClientConnectionError class
    - pre-autoupdate mirrors-mypy blacken-docs black
    - allows passing of ssl.SSLContext to PyJWKClient


author: dongyuzhen <dongyuzhen@h-partners.com> - 5.1.0-1
changelog:
  - upgrade version to 5.1.0:
    - some incorrect declarations were removed from ``python.pxd``
    - built with Cython 3.0.7
    - some redundant and long deprecated methods were removed
    - character escaping in ``C14N2`` serialisation now uses a single pass over the text instead of searching for each unescaped character separately
    - early support for Python 3.13a2 was added
    - support for Python 2.7 and Python versions < 3.6 was removed
    - parsing ASCII strings is slightly faster
    - some bugs fixes


author: shixuantong <shixuantong1@huawei.com> - 1:1.24.3-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove f2py form python3-numpy package. It is in python3-numpy-f2py
         Do not pack open-source test case files


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 23.2-1
changelog:
  - Update package with version 23.2
    Add python 3.12 support.
    Add types for packaging.version._Version.
    Add platform tag support for LoongArch.
    Update pyupgrade to Python 3.7+
    Support enriched metadata.


author: zhaojingyu <zhaojingyu@kylinos.cn> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - Avoid issuing a spurious DeprecationWarning when a custom DataFrame or Series subclass method is called


author: zhengxiaoxiao<zhengxiaoxiao2@huawei.com> - 24.0.0-1
changelog:
  - Upgrade version to 24.0.0
    - Dropped support for Python 3.6.
    - The minimum cryptography version is now 41.0.5.
    - Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years.
    - Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers.
    - Deprecated OpenSSL.crypto.PKCS12,OpenSSL.crypto.NetscapeSPKI,OpenSSL.crypto.CRL,OpenSSL.crypto.Revoked,OpenSSL.crypto.load_crl,OpenSSL.crypto.dump_crl,OpenSSL.crypto.sign,OpenSSL.crypto.verify,OpenSSL.crypto.X509Extension
    - Changed OpenSSL.crypto.X509Store.add_crl to also accept cryptography's x509.CertificateRevocationList arguments in addition to the now deprecated OpenSSL.crypto.CRL arguments
    - Fixed test_set_default_verify_paths test so that it is skipped if no network connection is available
    - Add ``OpenSSL.SSL.Connection.get_selected_srtp_profile`` to determine which SRTP profile was negotiated


author: yixiangzhike <yixiangzhike007@163.com> - 3.1.1-1
changelog:
  - update version to 3.1.1
    - Fixed bug in NotAny where expr parse action was not being run
    - Fix regex matching for Python quoted strings
    - Make create_diagram() code compatible with latest version of railroad-diagrams
    - Support Python 3.12
    - Small perf optimization for `expr | ""` mapping to `Optional(expr)`
    - Redo QuotedString '\' escape handling as a state machine
    - Add ParseResults.deepcopy()
    - Remove ^ and $ tags from pp.common.url regex
    - Added DelimitedList class, for better handling of naming and diagramming
    - Deprecate ParserElement.validate()
    - Added new class method ParserElement.using_each
    - Fix bug in delimited_list
    - Added python_quoted_string; fixed exception messages for ParseElementEnhance subclasses
    - Enable packrat in verilogParse.py by default
    - Add embed argument to create_diagram
    - Add support for slice in expr[] notation
    - Fixed bug in srange
    - Added Lox language parser


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 7.4.4-1
changelog:
  - Update package with version 7.4.4
    Fix non-string constants at the top of file being detected as docstrings on Python>=3.8.
    Removed unhelpful error message from assertion rewrite mechanism
    Updated documentation to refer to hyphenated options
    Markers are now considered in the reverse mro order to ensure base class markers are considered first
    Improved disclaimer on pytest plugin reference page to better indicate this is an automated
    Added ExceptionInfo.from_exception() <pytest.ExceptionInfo.from_exception>


author: chengyechun <chengyechun1@huawei.com> - 1.26.18-2
changelog:
  - Type:CVE
  - CVE:CVE-2024-37891
  - SUG:NA
  - DESC:fix CVE-2024-37891 Strip Proxy-Authorizatioin header on redirects


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-42
changelog:
  - util/timer: fix -Werror=maybe-uninitialized false-positive
  - hw/qxl: fix -Werror=maybe-uninitialized false-positives
  - nbd: fix -Werror=maybe-uninitialized false-positive
  - block/mirror: fix -Werror=maybe-uninitialized false-positive
  - hw/ahci: fix -Werror=maybe-uninitialized false-positive
  - hw/sdhci: fix -Werror=maybe-uninitialized false-positive
  - migration: fix -Werror=maybe-uninitialized false-positive
  - qemu-img: improve queue depth validation in img_bench


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-43
changelog:
  - qemu-img: fix division by zero in bench_cb() for zero-sized images
  - target/i386: cpu: set correct supported XCR0 features for TCG
  - target/i386: do not rely on ExtSaveArea for accelerator-supported XCR0 bits
  - target/i386: return bool from x86_cpu_filter_features
  - target/i386: add AVX10 feature and AVX10 version property
  - target/i386: add CPUID.24 features for AVX10
  - target/i386: Add feature dependencies for AVX10
  - target/i386: Add AVX512 state when AVX10 is supported
  - target/i386: Introduce GraniteRapids-v2 model
  - i386/cpu: Mark avx10_version filtered when prefix is NULL
  - target/i386: add avx-vnni-int16 feature
  - block/stream: fix -Werror=maybe-uninitialized false-positives
  - migration: fix -Werror=maybe-uninitialized false-positives
  - hw/ssi/xilinx_spips: Fix flash erase assert in dual parallel configuration
  - hw/nvme: cap MDTS value for internal limitation
  - accel/kvm: Make kvm_has_guest_debug static
  - vtarget/arm/tcg: Including missing 'exec/exec-all.h' header
  - system/qtest: Include missing 'hw/core/cpu.h' header
  - qemu-options: Clarify handling of commas in options parameters


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-44
changelog:
  - tests/unit/test-qmp-event: Drop superfluous mutex
  - configure: use a native non-cross compiler for linux-user
  - target/riscv/kvm: do not use non-portable strerrorname_np()
  - qemu-options: Unify the help entries for cocoa
  - virtio: rng: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
  - vhost-scsi: fix usage of error_reportf_err()
  - esp: check for NULL result from scsi_device_find()
  - migration: fix coverity migrate_mode finding
  - hw/core/cpu: Remove final vestiges of dynamic state tracing
  - target/riscv: Fix mcycle/minstret increment behavior
  - chardev/char.c: fix "abstract device type" error message
  - hw/net: cadence_gem: Fix MDIO_OP_xxx values


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-46
changelog:
  - vdpa: Allow vDPA to work on big-endian machine
  - vfio/container: Replace basename with g_path_get_basename
  - vfio/migration: Report only stop-copy size in vfio_state_pending_exact()
  - vfio/pci: Clear MSI-X IRQ index always
  - hw/arm boot.c: Enforce CCA and virtCCA isolation.
  - block/qed: fix use-after-free by nullifying timer pointer after free
  - hw/gpio: npcm7xx: fixup out-of-bounds access
  - pci/msix: Fix msix pba read vector poll end calculation
  - physmem: fix qemu_ram_alloc_from_fd size calculation
  - s390x/s390-virtio-ccw: don't crash on weird RAM sizes
  - ssh: Do not switch session to non-blocking mode
  - target/ppc: Fix mtDPDES targeting SMT siblings
  - target/ppc: Fix non-maskable interrupt while halted
  - elfload: Fix alignment when unmapping excess reservation


author: Junqi Ma <majunqi1@huawei.com> - 11:8.2.0-47
changelog:
  - target/s390x: Fix MVC not always invalidating translation blocks
  - target/sparc: Fix gdbstub incorrectly handling registers f32-f62
  - virtio-net: Fix size check in dhclient workaround
  - vdpa: Fix endian bugs in shadow virtqueue
  - x86/loader: only patch linux kernels
  - target/ppc: Fix e200 duplicate SPRs
  - vfio/container: For CSV3 VM, only register listener to shared_memory_listener list in vfio_connect_container()
  - target/riscv/kvm: update the KVM regs to Linux rvck-6.6
  - target/riscv/kvm: Fix exposure of Zkr
  - hw/arm/virt: Introduce a IPIV machine option
  - hw/vfio/migration: Fix vfio migration isn't aborted in a corner case


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-48
changelog:
  - common-user/host/riscv: use tail pseudoinstruction for calling tail
  - meson: Remove CONFIG_STATX and CONFIG_STATX_MNT_ID
  - qga: fix potentially not initialized nr_volumes in qga_vss_fsfreeze()
  - hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint(CVE-2024-8354)
  - hw/usb/hcd-xhci: Unmap canceled packet
  - meson: Use has_header_symbol() to check getcpu()
  - hw/intc/arm_gicv3_cpuif: Don't downgrade monitor traps for AArch32 EL3
  - migration: fix SEEK_CUR offset calculation in qio_channel_block_seek


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-49
changelog:
  - Revert "hw/arm/virt: Introduce a IPIV machine option"
  - target/arm: add ipiv=on/off option
  - arm/cpu: Add sysreg definitions in cpu-sysregs.h
  - arm/cpu: Store aa64isar0/aa64zfr0 into the idregs arrays
  - arm/cpu: Store aa64isar1/2 into the idregs array
  - arm/cpu: Store aa64pfr0/1 into the idregs array
  - arm/cpu: Store aa64mmfr0-2 into the idregs array
  - arm/cpu: Store aa64dfr0/1 into the idregs array
  - arm/cpu: Store aa64smfr0 into the idregs array
  - arm/cpu: Store id_isar0-7 into the idregs array
  - arm/cpu: Store id_pfr0/1/2 into the idregs array
  - arm/cpu: Store id_dfr0/1 into the idregs array
  - arm/cpu: Store id_mmfr0-5 into the idregs array
  - arm/cpu: Add generated sysreg properties
  - arm/cpu: Add sysreg properties generation
  - arm/cpu: Add infra to handle generated ID register definitions
  - kvm: kvm_get_writable_id_regs
  - arm/kvm: use fd instead of fdarray[2]
  - arm/cpu: switch to a generated cpu-sysregs.h.inc
  - arm/cpu: Add sysreg generation scripts
  - arm/cpu: Store aa64dfr0/1 into the idregs array
  - arm/cpu: Store aa64mmfr0-2 into the idregs array
  - arm/cpu: Store aa64pfr0/1 into the idregs array
  - arm/cpu: Store aa64isar1/2 into the idregs array
  - arm/cpu: Store aa64isar0/aa64zfr0 into the idregs arrays
  - arm/cpu: Add sysreg definitions in cpu-sysregs.h
  - arm/cpu: more customization for the kvm host cpu model
  - arm/kvm: write back modified ID regs to KVM
  - arm/kvm: Allow reading all the writable ID registers
  - arm/cpu-features: document ID reg properties
  - arm/qmp-cmds: introspection for ID register props
  - arm/cpu: manually make MIDR/REVIDR/AIDR writable
  - arm/cpu: enable MIDR writable
  - target/arm/kvm: Add SMMC hypercall definitions
  - hw/arm/virt: Initial support to set target_impl CPUs
  - target/arm/kvm: Use PSCI_VERSION for version info
  - target/arm/kvm: Set DISCOVER_IMPL_* hypercalls
  - Fix the compilation of target arm-softmmu


author: huangyan <huangyan@cdjrlc.com> - 11:8.2.0-50
changelog:
  - Add qemu-user package for arm, aarch64, riscv32, riscv64 targets
  - Add user-static, user-binfmt package for statically-linked QEMU user emulator


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-51
changelog:
  - trace: Add trace to measure hot migrate downtime
  - backends: Add support of one guest numa node alloc memory from multi host nodes


author: lifeifei <lifeifei@kylinos.cn> - 2.19-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add the socket option IPV6_MULTICAST_LOOP to prevent the interface from autoconfiguring using RA messages sent by itself.


author: luoshengwei <luoshengwei@huawei.com> - 0.8.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix cpu isolate errors when some cpus are offline
    before the service started


author: wangjiang <app@cameyan.com> - 0.8.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add some improvements and add new modules to HiSilicon common section


author: andy <liuyang01@kylinos.cn> - 0.8.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patches
         Use the right dev_t decoding for diskerror handler


author: shixuantong <shixuantong1@huawei.com> - 8.2-4
changelog:
  - Add shell command to switch bracketed-paste mode from on to off to keep consistent with realine-8.0


author: sunsuwan <sunsuwan3@huawei.com> - 1.2.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add a user directory when the rpc user directory does not exist


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.18-5
changelog:
  - revert: remove the require to rpm-build.For consistency with other community-released dependencies


author: Funda Wang <fundawang@yeah.net> - 3.2.7-6
changelog:
  - fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
    CVE-2024-12088, CVE-2024-12747


author: zhangyaqi <zhangyaqi@kylinos.cn> - 8.2312.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 8.2312.0-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix passing the value to EscapeChar
         Do not free the uninitialized cstring
         Keep original free pattern
         network subsystem: improve connection failure error message
         Fix runConf NULL pointer refence
         rainerscript: do not try to call a function if it does not exist
         nsd_ptcp regression fix: remove debugging messages emited to stderr
         Fix legacy $ActionQueueDiscardMark parameter


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:gnutls bugfix: Avoid blocking sockets during TLS handshake
         gnutls bugfix: Add timeout to GnuTLS handshake
         core: fix potential NULL ptr access on HUP in very early startup phase
         omfwd: fix segfault in UDP freeaddrinfo
         gnutls TLS driver: fix small memory leak
         rsyslog startup bugfix: cosmetic memory leak
         core: fix potential misadressing in sigmask
         covscan: remove defect type of RESOURCE_LEAK
         Fix a buffer overflow when the argument to replace is empty


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 8.2312.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:omusrmsg bugfix: potential null pointer dereference causes segfault
         omusrmsg bugfix: potential double free, which can cause segfault
         imjournal: fix double sd_journal_close() during thread cancellation
         imuxsock: Add statistics counter for discarded messages
         omjournal: Fix priority value
         fix stringop-overread warning in omusrmsg
         fix hashtable realloc memset range
         fix off-by-one buffer overflow


author: jinlun<jinlun@huawei.com> - 40.7-1
changelog:
  - update version to 40.7
    - Allow chronyd-restricted read chronyd key files
    - Allow systemd-sleep set attributes of efivarfs files
    - Make name_zone_t and named_var_run_t a part of the mountpoint attribute
    - Update cifs interfaces to include fs_search_auto_mountpoints()
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Add map_read map_write to kernel_prog_run_bpf
    - Add policy for nvme-stas
    - Make new virt drivers permissive
    - Allow named and ndc use the io_uring api
    - Allow sssd send SIGKILL to passket_child running in ipa_otpd_t


author: xinghe <xinghe2@h-partners.com> - 8.17.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:extending the certificate validate period
         remove redundant patches


author: zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2:4.14.3-1
changelog:
  - update version to 4.14.3
    -Avoid null pointer dereference
    -Update utmp at an initial login
    -Merge libshadow and libmisc into a single libshadow
    -Adding the userdel and groupdel hooks to release tarball


author: liuqingtao <liu.qingtao2@zte.com.cn> -1.1.10-3
changelog:
  - optimized-RV-FindMatchLength-improving-compress-speed--upstream-accepted
  - DESC:Use-high-performance-FindMatchLength-to-Optimize for RV


author: zhangxianting <zhangxianting@uniontech.com> - 0.9-64
changelog:
  - Type:patch
  - CVE:NA
  - SUG:NA
  - DESC:patch hunk FAILED bacause of the arch judgement of sw_64 and loongarch64


author: laokz <zhangkai@iscas.ac.cn> - 0.9-67
changelog:
  - Type:fix
  - CVE:NA
  - SUG:NA
  - DESC:riscv64: reverse -static-pie patch due to unsupported tool-chains


author: lingsheng <lingsheng1@h-partners.com> - 6.04-16
changelog:
  - update libpng 1.6.36 to fix CVE-2011-2501 CVE-2011-2690 CVE-2011-2691
  - CVE-2011-2692 CVE-2011-3045 CVE-2011-3048 CVE-2012-3425 CVE-2015-7981
  - CVE-2015-8126 CVE-2015-8472 CVE-2015-8540 CVE-2016-10087 CVE-2017-12652


author: wjiang <app@cameyan.com> - 255-52
changelog:
  - backport community patches and skip bios_version test:
        backport-login-user-runtime-dir-free-ignored-sd_bus_error-avo.patch
        backport-login-user-runtime-dir-use-STRLEN-where-appropriate.patch
        backport-systemctl-gracefully-adjust-bus-transport-and-runtim.patch
        backport-journal-do-not-rotate-journal-when-MaxRetentionSec-i.patch
        backport-nspawn-use-strv_extend-and-friends-to-build-director.patch
        backport-nspawn-only-remount-usr-with-idmap-when-volatile-yes.patch
        backport-nspawn-mount-var-after-remount_idmap-when-volatile-s.patch
        backport-compress-avoid-a-bunch-of-div-by-zeroes.patch


author: Linux_zhang <244695981@qq.com> - 255-53
changelog:
  - sync community patches
    backport-journal-use-EBADMSG-for-invalid-data-in-file-mmap.patch
    backport-journal-replace-a-bunch-of-assert-with-friendlier-ch.patch


author: langfei<langfei@huawei.com> - 4.5-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Resolve stap-exporter.service chenge to disable when upgraded systemtap-stap-exporter package


author: langfei<langfei@huawei.com> - 4.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix some test cases fail to be executed, Resolve the sc2168 warning detected by the shellcheck tool.


author: liuchao <liuchao173@huawei.com> - 5.0-1
changelog:
  - Upgrade to 5.0:
    - Performance improvements in uprobe registration and module startup.
    - More probe point process details are printed in "-L" list mode with more "-v".
    - For the case where newer kernels may break systemtap runtime APIs, better pass-4 failure diagnostics are printed.
    - Tapset function print_ubacktrace_fileline() now understands DWARF5.
    - The target(s) of process probes may be specified by path name globs,  as located selected debuginfod servers.
    - The kernel-user message transport system added framing codes, making the transport more reliable, but becoming incompatible across pre-5.0 versions. Use matching versions of stap and staprun.
    - The testsuite Makefile has been simplified to remove concurrency, so "parallel" and "resume" modes are gone.
    - New runtime macro STP_TIMING_NSECS is now supported for reporting probe timing stats in nsecs instead of cycles.  This may become default later.
    - Add new runtime macro STP_FORCE_STDOUT_TTY to override STP_STDOUT_NOT_ATTY.


author: Yu Peng <yupeng@kylinos.cn> - 1:0.17-81
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix telnet crashes on stack overflow due to infinite recursion.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com>- 0.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:The "cc:No such file or directroy" error message is displayed during compilation.Therefore,add buildrequires gcc.
         The macro unitdir is used.Therefore,add buildrequires systemd


author: jinlun <jinlun@huawei.com> - 4.0.1-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:update version to 4.0.1
    - Fix CVE-2023-22745
    - TPM version 1.59 support
    - libmu soname from 0:0:0 to 0:1:0.
    - tss2-sys soname from 1:0:0 to 1:1:0
    - FAPI ignores vendor properties on Fapi_GetInfo
    - FAPI Event Logging JSON format
    - Dead struct TPMS_ALGORITHM_DESCRIPTION
    - Dead field intelPttProperty from TPMU_CAPABLITIES
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Marshal
    - Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal


author: liuchao <liuchao173@huawei.com> - 2.21.0-1
changelog:
  - upgrade to 2.21.0:
    - api: fixed stop method not to require any parameter
    - plugin_scheduler: fix perf fd leaks
    - allow skipping rollback when restarting TuneD or switching profile
    - function_calc_isolated_cores: no errors for offline CPUs
    - sap-hana: new profile sap-hana-kvm-guest
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
    - fixed possible traceback on SIGHUP
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - plugin_cpu: added support for intel_pstate scaling driver
    - plugin_scheduler: do not leak FDs from the perf
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - throughput-performance: set net.core.somaxconn to at least 2048
    - API: added support for moving devices between instances
    - added support for the API access through the Unix Domain Socket
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - do not exit on duplicate config lines


author: ZhaoYu Jiang <jiangzhaoyu@kylinos.cn> - 2.24.1-1
changelog:
  - Upgrade to 2.24.1:
    - fixed privileged execution of arbitrary scripts by active local user. (CVE-2024-52336)
    - added sanity checks for API methods parameters. (CVE-2024-52337)
    - tuned-ppd: fixed controller init to correctly set_on_battery


author: tianmuyang <tianmuyang@huawei.com> - 2.24.1-4
changelog:
  - profiles: add programmable scheduling based on eBPF
  - package:  change package tuned to architecture-dependent


author: langfei<langfei@huawei.com> - 2022g-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: langfei <langfei@huawei.com> - 2024a-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Aysén Region moves from -04/-03 to -03; new zone;
  -	Improve recent commentary for Chilean decrees;
  -	No need for America/Coyhaique in zonenow.tab.


author: liuchao <liuchao173@huawei.com> - 1.90.2-1
changelog:
  - Update to 1.90.2:
    - Fix wireless devices not disappearing from Settings when disconnected
    - Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes
    - Add installed-tests files for use with gnome-desktop-testing
    - Fix integration test to work with system installed upower binary and under jhbuild
    - Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute)
    - Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries)
    - Hide duplicate Logitech wireless devices when they get connected through USB as well
    - Fix Bluetooth device names not synchronising, and use user-chosen names when available
    - Handle the "present" sysfs attribute changing
    - Fix iDevices not appearing
    - Fix reading capacity_level with newer libgudev
    - Fix OpenBSD backend
    - Refactor internal battery handling into separate classes
    - Guess charging/discharging state based on energy rate (#196)
    - Fix polling after resume (#198)
    - Fix battery state guessing (#146)
    - Reload history when battery ID changes
    - Test fixes
    - Move state guessing into DisplayDevice
    - Always use 90% threshold to consider a battery full
    - Various test improvements
    - Fix mice showing up as keyboards (#189)
    - Allow unit test inspector to fail (#187)
    - Fix test cases when daemon shuts down too slowly (#188)
    - Remove broken wakeup DBus API
    - Tag UPS hid devices using hwdb and update list from upstream
    - Only permit Refresh method when in debug mode
    - Refactor device polling
    - Refactor udev device discovery and sibling detection
    - Improved testing and CI
    - Handle SIGTERM to trigger a clean shutdown
    - Improve polling of batteries after line-power "online" status change
    - Multiple wacom tablet detection fixes
    - Fix updates after a BT hid power supply moves in sysfs
    - Fix enumeration of "Whats Up!" devices on startup
    - Accept USB power supplies without warning
    - Allow building without gtk-doc


author: zhanghongtao <zhanghongtao22@huawei.com> - 017-1
changelog:
  - update package to usbutils-017
  - lsusb: add fallback names for 'lsusb -v' output
  - Honor system libdir and includedir
  - usbutils: lsusb-t: print entries for devices with no interfaces
  - lsusb -t: sort in bus order, not reverse order
  - susb-t: if a driver is not bound to an interface, report "[none]"
  - Generate usbutils.pc pkgconfig file
  - usbreset: Allow idProduct and idVendor to be 0
  - susb: Add function that sorts the output by device ID.
  - lsusb: Additional sorting by bus number.
  - lsusb: This is a more compact implementation of the device list sort implemented within this pull request. The output remains the same as the one demonstrated in the previous commit.


author: liuchao <liuchao173@huawei.com> - 0.14.0-1
changelog:
  - upgrade to 0.14.0:
    - Fix: urcu-bp: only teardown call-rcu worker in destructor
    - Fix: rculfhash: urcu_die() takes positive error value
    - Fix: call_rcu: teardown default call_rcu worker on application exit
    - Fix: join worker thread in call_rcu_data_free
    - Docs: clarify grace period polling API
    - Document grace period polling in rcu-api.md
    - Implement poll rcu stress test in rcutorture
    - urcu-memb,mb,signal: Implement grace period polling
    - Fix: auto-resize hash table destroy deadlock
    - Fix building on MSYS2
    - rculfhash: Include rculfhash-internal.h from local directory
    - Remove "Darwin" from "should also work on list"
    - Merge branch 'adah1972-improve-md'
    - Add semicolons at the end of function prototypes
    - Wrap a file name in backticks
    - Wrap command-line options in backticks
    - Fix a wrong format
    - Wrap URLs in angle brackets
    - Fix Markdown issues
    - Fix: Always check pthread_create for failures
    - Disable signals in URCU background threads
    - Fix: futex.h: include headers outside extern C
    - Fix: add missing unused attribute to _rcu_dereference
    - Fix: change method used by _rcu_dereference to strip type constness
    - Fix: remove type constness in URCU_FORCE_CAST's C++ version
    - Move extern "C" down in include/urcu/urcu-bp.h
    - fix: ifdef linux specific cpu count compat
    - Add unit tests for possible_cpus_array_len
    - fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id
    - Fix: revise obsolete command in README.md
    - Fix: workqueue: remove unused variable "ret"
    - Fix: urcu-qsbr: futex wait: handle spurious futex wakeups
    - Fix: urcu: futex wait: handle spurious futex wakeups
    - Fix: urcu-wait: futex wait: handle spurious futex wakeups
    - Fix: defer_rcu: futex wait: handle spurious futex wakeups
    - Fix: call_rcu: futex wait: handle spurious futex wakeups
    - Fix: workqueue: futex wait: handle spurious futex wakeups
    - Fix: Use %lu rather than %ld to print count
    - Update ABI definition files
    - Bump version current and age
    - alpha: allocate membarrier system call number
    - Bump version to 0.14.0-pre
    - Improved test framework
    - rculfhash: introduce cds_lfht_node_init_deleted
    - Fix: changelog: v0.13.0 was released in 2021
    - cleanup: i386 arch detection
    - fix: properly detect 'cmpxchg' on x86-32
    - fix: use urcu-tls compat with c++ compiler
    - Fix typo
    - fix: remove autoconf features default value in help message
    - fix: add missing pkgconfig file for memb flavour lib
    - Cleanup: Tests: Remove useless pre-C99 compatibility code from tap.h
    - Document C99 and C++11 requirement in README.md
    - Always use '__thread' for Thread local storage except on MSVC
    - Fix: powerpc32: transparent unions alter calling convention
    - fix: don't use C++ thread_local on MacOs
    - wfcqueue API: implement overloaded wrappers with templates
    - wfcqueue: combine C++ API cds_wfcq_head_cast with overloading
    - wfstack C++ API: implement overloaded wrappers with templates
    - lfstack C++ API: implement overloaded wrappers with templates
    - wfstack: combine C++ API cds_wfs_stack_cast with overloading
    - lfstack: combine C++ API cds_lfs_stack_cast with overloading
    - fix: test_build tap plan
    - Test C++ build of list head init
    - Fix order of initializers in CDS_LIST_HEAD_INIT
    - unit tests: test wfcqueue, wfstack, lfstack empty check functions in C++
    - wfcqueue: implement C++ API based on function overloading
    - wfstack: implement C++ API based on function overloading
    - lfstack: implement C++ API based on function overloading
    - Fix tap.h: remove extra semicolon in pass/fail macros
    - Add C++ build tests
    - Build and run regression and unit tests as C++ programs
    - Add --enable-Werror configure switch
    - Add `urcu_posix_assert()` as `assert()` replacement
    - Rename `urcu_assert()` to `urcu_assert_debug()`
    - cleanup: spelling fixes in comments
    - Make temporary variable in _rcu_dereference non-const
    - (tls-ie2) Fix: x86 and s390: uatomic __hp() macro C++ support
    - Fix: x86 and s390: uatomic __hp() macro clang support
    - Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11


