# changelog

author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.3.0.0127
changelog:
  - ixgbe: fix large MTU request from VF
  - block, bfq: move bfqq to root_group if parent group is offlined
  - io_uring: use bottom half safe lock for fixed file data
  - io_uring: fix soft lockup when call __io_remove_buffers
  - block: Fix fsync always failed if once failed
  - blk-mq: use the new flag to quiesce/unquiesce queue in block layer
  - blk-mq: add a new queue flag to quiesce/unquiesce queue
  - blk-mq: factor out some helps to quiesce/unquiesce queue
  - blk: Fix lock inversion between ioc lock and bfqd lock
  - bfq: Remove merged request already in bfq_requests_merged()
  - md: fix a warning caused by a race between concurrent md_ioctl()s
  - net: hns3: update hns3 version to 21.12.2
  - net: hns3: fix race condition in debugfs
  - kabi: fix kabi broken in struct sock
  - tracing: Have all levels of checks prevent recursion
  - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
  - mm, slub: fix mismatch between reconstructed freelist depth and cnt
  - vfs: check fd has read access in kernel_read_file_from_fd()
  - dma-debug: fix sg checks in debug_dma_map_sg()
  - acpi/arm64: fix next_platform_timer() section mismatch error
  - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
  - sched: Always inline is_percpu_thread()
  - perf/x86: Reset destroy callback on event init failure
  - net: prevent user from passing illegal stab size
  - netfilter: ip6_tables: zero-initialize fragment offset
  - rtnetlink: fix if_nlmsg_stats_size() under estimation
  - netlink: annotate data races around nlk->bound
  - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
  - net_sched: fix NULL deref in fifo_set_limit()
  - phy: mdio: fix memory leak
  - bpf, arm: Fix register clobbering in div/mod implementation
  - scsi: sd: Free scsi_disk device via put_device()
  - cred: allow get_cred() and put_cred() to be given NULL.
  - net: udp: annotate data race around udp_sk(sk)->corkflag
  - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
  - tty: Fix out-of-bound vmalloc access in imageblit
  - tcp: address problems caused by EDT misshaps
  - arm64: Mark __stack_chk_guard as __ro_after_init
  - md: fix a lock order reversal in md_alloc
  - irqchip/gic-v3-its: Fix potential VPE leak on error
  - scsi: iscsi: Adjust iface sysfs attr detection
  - serial: mvebu-uart: fix driver's tx_empty callback
  - cifs: fix incorrect check for null pointer in header_assemble


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.4.0.0128
changelog:
  - block, bfq: don't move oom_bfqq
  - blk-mq: fix abnormal free in single queue process
  - scsi: hisi_sas: Add support for sata disk I/O errors report to libsas
  - KVM: arm64: Allow vcpus running without HCR_EL2.FB
  - KVM: arm64: Set kvm_vcpu::pre_pcpu properly
  - KVM: arm64: Ensure I-cache isolation between vcpus of a same VM
  - arm64/tlbi: mark tlbi ipi as EXPERIMENTAL
  - arm64/tlb: restore no IPi code
  - arm64/configs: enable TLBI_IPI
  - arm64/tlbi: split disable_tlbflush_is to control flush
  - arm64/tlb: add CONFIG_ARM64_TLBI_IPI
  - arm64: tlb: Add boot parameter to disable TLB flush within the same inner shareable domain
  - arm64: mm: Restore mm_cpumask (revert commit 38d96287504a ("arm64: mm: kill mm_cpumask usage"))
  - audit: ensure userspace is penalized the same as the kernel when under pressure
  - audit: improve robustness of the audit queue handling
  - block/wbt: fix negative inflight counter when remove scsi device
  - nbd: Fix use-after-free in blk_mq_free_rqs
  - block, bfq: fix use after free in bfq_bfqq_expire
  - block, bfq: fix queue removal from weights tree
  - block, bfq: fix decrement of num_active_groups
  - block, bfq: fix asymmetric scenarios detection
  - block, bfq: improve asymmetric scenarios detection
  - fget: check that the fd still exists after getting a ref to it
  - config: Enable CONFIG_EXT4_PARALLEL_DIO_READ as default
  - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
  - Revert "Revert "ext4: remove EXT4_STATE_DIOREAD_LOCK flag""
  - Revert "Revert "ext4: Allow parallel DIO reads""
  - net: hns3: update hns3 version to 21.12.3
  - net: hns3: fix the VLAN of a vf cannot be added problem
  - net: hns3: fix pfc packet number incorrect after querying pfc parameters
  - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
  - usb: gadget: configfs: Fix use-after-free issue with udc_name
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
  - mm: share_pool: adjust sp_alloc behavior when coredump
  - mm: share_pool: adjust sp_make_share_k2u behavior when coredump
  - Revert "timekeeping: Fix ktime_add overflow in tk_set_wall_to_mono"
  - Revert "timekeeping: Avoid undefined behaviour in 'ktime_get_with_offset()'"
  - Revert "posix-cpu-timers: Avoid undefined behaviour in timespec64_to_ns()"
  - time: Normalize timespec64 before timespec64_compare()
  - iommu/arm-smmu-v3: remove unnecessary mpam enable procedure
  - fix kabi effect by change in md_rdev
  - Revert "dm space maps: don't reset space map allocation cursor when committing"
  - nvme-fabrics: fix kabi broken by "reject I/O to offline device"
  - nvme: fix NULL derefence in nvme_ctrl_fast_io_fail_tmo_show/store
  - nvme: export fast_io_fail_tmo to sysfs
  - nvme-fabrics: reject I/O to offline device
  - nvme: add a Identify Namespace Identification Descriptor list quirk
  - nvme: fix identify error status silent ignore
  - nvme: fix possible hang when ns scanning fails during error recovery
  - nvme: refactor nvme_identify_ns_descs error handling
  - nvme: Namepace identification descriptor list is optional
  - nvmet: use new ana_log_size instead the old one
  - nvme-multipath: fix double initialization of ANA state
  - nvme-core: use list_add_tail_rcu instead of list_add_tail for nvme_init_ns_head
  - nvme: make nvme_report_ns_ids propagate error back
  - nvme-multipath: avoid crash on invalid subsystem cntlid enumeration
  - nvme-multipath: split bios with the ns_head bio_set before submitting
  - nvme: add proper discard setup for the multipath device
  - fix kabi change
  - md: Fix undefined behaviour in is_mddev_idle
  - xfs: fix up non-directory creation in SGID directories
  - xfs: remove the kuid/kgid conversion wrappers
  - xfs: remove the icdinode di_uid/di_gid members
  - xfs: ensure that the inode uid/gid match values match the icdinode ones
  - configfs: fix a use-after-free in __configfs_open_file
  - share_pool: don't trace the invalid spa address
  - share_pool: Remove the redundant warning message


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.5.0.0129
changelog:
  - config: enable CONFIG_RAMAXEL_SPRAID by default
  - scsi:spraid: support Ramaxel's spraid driver
  - USB: gadget: bRequestType is a bitfield, not a enum
  - phonet: refcount leak in pep_sock_accep
  - USB: gadget: detect too-big endpoint 0 requests


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.6.0.0130
changelog:
  - watchdog: Fix check_preemption_disabled() error
  - btrfs: unlock newly allocated extent buffer after error
  - net/hinic: Fix call trace when the rx_buff module parameter is grater than 2
  - dt-bindings: mpam: add document for arm64 mpam
  - arm64/mpam: add device tree support for mpam initialization
  - arm64/mpam: remove __init macro to support driver probe
  - arm64/mpam: rmid: refine allocation and release process
  - arm64/mpam: resctrl: add tips when rmid modification failed
  - arm64/mpam: Fix mpam corrupt when cpu online
  - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
  - kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic
  - kprobes: Set unoptimized flag after unoptimizing code


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2112.8.0.0131
changelog:
  - mm/page_alloc: Use cmdline to disable "place pages to tail"
  - bpf: Remove MTU check in __bpf_skb_max_len
  - sctp: account stream padding length for reconf chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.1.0.0132
changelog:
  - mm: export collect_procs()
  - net: hns: update hns version to 21.12.1
  - net: hns: fix bug when two ports opened promisc mode both
  - net: hns3: update hns3 version to 21.12.4
  - net: hns3: fix the concurrency between functions reading debugfs
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
  - tee: handle lookup of shm with reference count 0
  - tee: don't assign shm id for private shms
  - tee: remove linked list of struct tee_shm
  - ext4: fix an use-after-free issue about data=journal writeback mode
  - ext4: Fix null-ptr-deref in '__ext4_journal_ensure_credits'
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
  - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
  - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
  - bpf: Add probe_read_{user, kernel} and probe_read_{user, kernel}_str helpers
  - bpf: Make use of probe_user_write in probe write helper
  - uaccess: Add strict non-pagefault kernel-space read function
  - bpf: fix script for generating man page on BPF helpers
  - bpf: Backport __BPF_FUNC_MAPPER and annotation from mainline
  - bpf: Fix up register-based shifts in interpreter to silence KUBSAN
  - xen/netback: don't queue unlimited number of packages
  - xen/netback: fix rx queue stall detection
  - xen/console: harden hvc_xen against event channel storms
  - xen/netfront: harden netfront against event channel storms
  - xen/blkfront: harden blkfront against event channel storms
  - xen/netfront: don't trust the backend response data blindly
  - xen/netfront: disentangle tx_skb_freelist
  - xen/netfront: don't read data from request on the ring page
  - xen/netfront: read response from backend only once
  - xen/blkfront: don't trust the backend response data blindly
  - xen/blkfront: don't take local copy of a request from the ring page
  - xen/blkfront: read response from backend only once
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version
  - xen/netback: avoid race in xenvif_rx_ring_slots_available()
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling
  - perf/core: Avoid put_page() when GUP fails
  - perf/core: Disable page faults when getting phys address
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  - ipc: WARN if trying to remove ipc object which is absent
  - tun: fix bonding active backup with arp monitoring
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  - PCI/MSI: Deal with devices lying about their MSI mask capability
  - PCI/MSI: Destroy sysfs before freeing entries
  - ext4: fix lazy initialization next schedule time computation in more granular unit
  - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
  - mm, oom: do not trigger out_of_memory from the #PF
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  - llc: fix out-of-bound array index in llc_sk_dev_hash()
  - zram: off by one in read_block_state()
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  - NFS: Fix deadlocks in nfs_scan_commit_list()
  - apparmor: fix error check
  - serial: 8250_dw: Drop wrong use of ACPI_PTR()
  - crypto: pcrypt - Delay write to padata->info
  - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
  - smackfs: Fix use-after-free in netlbl_catmap_walk()
  - signal: Remove the bogus sigkill_pending in ptrace_stop
  - bpf: Prevent increasing bpf_jit_limit above max
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
  - tpm: Check for integer overflow in tpm2_map_response_body()
  - scsi: core: Put LLD module refcnt after SCSI device is released
  - net: Prevent infinite while loop in skb_tx_hash()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.2.0.0133
changelog:
  - arm64/mpam: fix mpam dts init arm_mpam_of_device_ids error
  - arm64/mpam: fix mpam probe error for wrong init order


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.3.0.0134
changelog:
  - ip_gre: validate csum_start only on pull
  - hugetlbfs: fix issue of preallocation of gigantic pages can't work
  - hugetlbfs: extend the definition of hugepages parameter to support node allocation
  - mm: remove sharepool sp_unshare_uva current->mm NULL check
  - share pool: use rwsem to protect sp group exit
  - Add new module parameters:time out
  - virtio-blk: validate num_queues during probe
  - virtio-blk: Use blk_validate_block_size() to validate block size
  - block: Add a helper to validate the block size
  - Revert "virtio-blk: Add validation for block size in config space"
  - scsi: virtio_scsi: Rescan the entire target on transport reset when LUN is 0
  - Revert "svm: Add support to get svm mpam configuration"
  - Revert "svm: Add support to set svm mpam configuration"
  - Revert "svm: Add svm_set_user_mpam_en to enable/disable mpam for smmu"
  - cgroup: Use open-time cgroup namespace for process migration perm checks
  - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
  - cgroup: Use open-time credentials for process migraton perm checks
  - NFC: add necessary privilege flags in netlink layer
  - NFC: add NCI_UNREG flag to eliminate the race
  - NFC: reorder the logic in nfc_{un,}register_device
  - NFC: reorganize the functions in nci_request
  - ext4: Fix BUG_ON in ext4_bread when write quota data
  - PM: hibernate: use correct mode for swsusp_close()
  - Revert "watchdog: Fix check_preemption_disabled() error"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2201.4.0.0135
changelog:
  - net: bridge: clear bridge's private skb space on xmit
  - audit: bugfix for infinite loop when flush the hold queue
  - blk-throttle: enable hierarchical throttle in cgroup v1
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2202.1.0.0136
changelog:
  - config: enable CONFIG_MEMCG_MEMFS_INFO by default
  - mm/memcg_memfs_info: show files that having pages charged in mem_cgroup
  - ext4: fix e2fsprogs checksum failure for mounted filesystem
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy
  - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
  - perf vendor events amd: Add recommended events
  - perf vendor events amd: Add L2 Prefetch events for zen1
  - perf/amd/uncore: Fix sysfs type mismatch
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
  - tools/power turbostat: Support AMD Family 19h
  - perf/x86/amd/ibs: Support 27-bit extended Op/cycle counter
  - perf vendor events amd: Enable Family 19h users by matching Zen2 events
  - perf vendor events amd: Update Zen1 events to V2
  - perf vendor events amd: Add Zen2 events
  - perf vendor events amd: Restrict model detection for zen1 based processors
  - perf vendor events amd: Remove redundant '['
  - perf vendor events intel: Add Tremontx event file v1.02
  - perf vendor events intel: Add Icelake V1.00 event file
  - perf vendor events amd: Add L3 cache events for Family 17h
  - perf vendor events intel: Add uncore_upi JSON support
  - perf vendor events amd: perf PMU events for AMD Family 17h
  - perf/amd/uncore: Allow F19h user coreid, threadmask, and sliceid specification
  - perf/amd/uncore: Allow F17h user threadmask and slicemask specification
  - perf/amd/uncore: Prepare to scale for more attributes that vary per family
  - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
  - perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour
  - perf/x86/amd/ibs: Fix raw sample data accumulation
  - arch/x86/amd/ibs: Fix re-arming IBS Fetch
  - perf/amd/uncore: Add support for Family 19h L3 PMU
  - perf/amd/uncore: Make L3 thread mask code more readable
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h
  - EDAC/amd64: Handle three rank interleaving mode
  - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh
  - EDAC/amd64: Save max number of controllers to family type
  - EDAC/amd64: Gather hardware information early
  - EDAC/amd64: Make struct amd64_family_type global
  - EDAC/amd64: Set grain per DIMM
  - EDAC/amd64: Support asymmetric dual-rank DIMMs
  - EDAC/amd64: Cache secondary Chip Select registers
  - EDAC/amd64: Add PCI device IDs for family 17h, model 70h
  - EDAC/amd64: Find Chip Select memory size using Address Mask
  - EDAC/amd64: Adjust printed chip select sizes when interleaved
  - EDAC/amd64: Recognize x16 symbol size
  - EDAC/amd64: Set maximum channel layer size depending on family
  - EDAC/amd64: Support more than two Unified Memory Controllers
  - EDAC/amd64: Add Family 17h Model 30h PCI IDs
  - EDAC/amd64: Initialize DIMM info for systems with more than two channels
  - EDAC/amd64: Support more than two controllers for chip selects handling
  - EDAC/amd64: Use a macro for iterating over Unified Memory Controllers
  - x86/mce: Fix use of uninitialized MCE message string
  - x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType
  - x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types
  - x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units
  - x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types
  - EDAC/mce_amd: Always load on SMCA systems
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too
  - x86/amd_nb: Add Family 19h PCI IDs
  - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
  - x86/amd_nb: Add PCI device IDs for family 17h, model 30h
  - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
  - EDAC/amd64: Drop some family checks for newer systems
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  - KVM: mmu: Fix SPTE encoding of MMIO generation upper half
  - build_bug.h: add wrapper for _Static_assert
  - KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
  - KVM: x86: assign two bits to track SPTE kinds
  - KVM: Move the memslot update in-progress flag to bit 63
  - KVM: Remove the hack to trigger memslot generation wraparound
  - KVM: x86: clflushopt should be treated as a no-op by emulation
  - KVM: SVM: Clear the CR4 register on reset
  - KVM: SVM: Replace hard-coded value with #define
  - KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
  - KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  - KVM: x86: only do L1TF workaround on affected processors
  - kvm: x86: Fix L1TF mitigation for shadow MMU
  - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
  - KVM: SVM: Override default MMIO mask if memory encryption is enabled
  - KVM: x86/mmu: Add explicit access mask for MMIO SPTEs
  - kvm: x86: Fix reserved bits related calculation errors caused by MKTME
  - KVM: x86: Rename access permissions cache member in struct kvm_vcpu_arch
  - kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  - kvm/svm: PKU not currently supported
  - kvm: x86: Expose RDPID in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Refactor the MMIO SPTE generation handling
  - KVM: Explicitly define the "memslot update in-progress" bit
  - KVM: x86: Use a u64 when passing the MMIO gen around
  - KVM: x86: expose MOVDIR64B CPU feature into VM.
  - KVM: x86: expose MOVDIRI CPU feature into VM.
  - KVM: x86: Add requisite includes to hyperv.h
  - KVM: x86: Add requisite includes to kvm_cache_regs.h
  - KVM: nVMX: Allocate and configure VM{READ,WRITE} bitmaps iff enable_shadow_vmcs
  - x86/cpufeatures: Enumerate MOVDIR64B instruction
  - x86/cpufeatures: Enumerate MOVDIRI instruction
  - x86/pkeys: Don't check if PKRU is zero before writing it
  - x86/fpu: Only write PKRU if it is different from current
  - x86/pkeys: Provide *pkru() helpers
  - sysctl: returns -EINVAL when a negative value is passed to proc_doulongvec_minmax
  - arm64: move jump_label_init() before parse_early_param()
  - tcp: fix memleak when tcp internal pacing is used
  - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
  - ovl: fix warning in ovl_create_real()
  - fuse: annotate lock in fuse_reverse_inval_entry()
  - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
  - sit: do not call ipip6_dev_free() from sit_init_net()
  - net/packet: rx_owner_map depends on pg_vec
  - x86/sme: Explicitly map new EFI memmap table as encrypted
  - dm btree remove: fix use after free in rebalance_children()
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
  - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
  - net, neigh: clear whole pneigh_entry at alloc time
  - aio: fix use-after-free due to missing POLLFREE handling
  - aio: keep poll requests on waitqueue until completed
  - signalfd: use wake_up_pollfree()
  - wait: add wake_up_pollfree()
  - tracefs: Have new files inherit the ownership of their parent
  - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
  - udp: using datalen to cap max gso segments
  - bpf: Fix the off-by-two error in range markings
  - ipmi: msghandler: Make symbol 'remove_work_wq' static
  - serial: core: fix transmit-buffer reset and memleak
  - serial: pl011: Add ACPI SBSA UART match id
  - net: annotate data-races on txq->xmit_lock_owner
  - ipmi: Move remove_work to dedicated workqueue
  - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
  - scsi: iscsi: Unblock session then wake up error handler
  - shm: extend forced shm destroy to support objects from several IPC nses
  - fuse: release pipe buf after last use
  - tracing: Check pid filtering when creating events
  - ipv6: fix typos in __ip6_finish_output()
  - proc/vmcore: fix clearing user buffer by properly using clear_user()
  - tracing: Fix pid filtering when triggers are attached
  - fuse: fix page stealing
  - ipmi_si: Phytium S2500 workaround for MMIO-based IPMI
  - etmem: Add a scan flag to support specified page swap-out
  - etmem: add swapcache reclaim to etmem
  - etmem: add original kernel swap enabled options


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-9
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: yuanxin<yuanxin24@huawei.com> - 2:8.2-11
changelog:
  - Type:CVE
  - ID:CVE-2021-4166 CVE-2021-4192 CVE-2021-4193
  - SUG:NA
  - DESC:fix CVE-2021-4166 CVE-2021-4192 CVE-2021-4193


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-15
changelog:
  - Type:CVE
  - ID:CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413
  - SUG:NA
  - DESC:fix CVE-2022-0351 CVE-2022-0361 CVE-2022-0408 CVE-2022-0359 CVE-2022-0368 CVE-2022-0413


author: tianwei <tianwei12@h-partners.com> - 2:8.2-16
changelog:
  - Type:CVE
  - ID:CVE-2022-0443 CVE-2022-0392 CVE-2022-0417
  - SUG:NA
  - DESC:fix CVE-2022-0443 CVE-2022-0392 CVE-2022-0417


