# changelog

author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-15
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177
  - SUG:NA
  - DESC:fix CVE-2022-2906 CVE-2022-2881 CVE-2022-2795 CVE-2022-38178 CVE-2022-38177


author: jiangheng <jiangheng14@huawei.com> - 19.11-22
changelog:
  - gro: fix chain index for more than 2 packets
  - gro: trim tail padding bytes
  - gro: check payload length after trim


author: jiangheng12 <jiangheng14@huawei.com> - 1.0.1-68
changelog:
  - check return value of hugepage_init to avoid coredump when hugepage memory is insufficient
  - fix core dump when slave mac failed


author: hanchao<hanchao47@huawei.com> - 1.15.7-21
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405,CVE-2023-29403
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405,CVE-2023-29403


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2304.5.0.0199
changelog:
  - RDMA/hns: Add check for user-configured max_inline_data value
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
  - !430 [openEuler-1.0-LTS] ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
  - audit: fix a memleak caused by auditing load module
  - !595 [openEuler-1.0-LTS] iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - tcp: restrict net.ipv4.tcp_app_win
  - x86/speculation: Allow enabling STIBP with legacy IBRS
  - iommu/arm-smmu-v3: Fix UAF when handle evt during iommu group removing
  - ata: sata_zhaoxin: Update Zhaoxin Serial ATA product name


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.1.0.0200
changelog:
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - verify_pefile: relax wrapper length check
  - udp6: fix potential access to stale information
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - dm stats: check for and propagate alloc_percpu failure
  - dm thin: fix deadlock when swapping to thin device
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - Revert "genirq: Remove irqd_irq_disabled in __irq_move_irq"
  - Revert "config: enbale irq pending config for openeuler"
  - Revert "genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI"
  - Revert "irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ"
  - scsi: dpt_i2o: Remove obsolete driver
  - md: extend disks_mutex coverage
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - block: Only set bb->changed when badblocks changes
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - bonding: Fix memory leak when changing bond type to Ethernet
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry
  - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
  - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition
  - ovl: get_acl: Fix null pointer dereference at realinode in rcu-walk mode
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  - ext4: only update i_reserved_data_blocks on successful block allocation
  - mm: mem_reliable: Use zone_page_state to count free reliable pages
  - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
  - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
  - RDMA/core: Refactor rdma_bind_addr
  - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow"
  - fix kabi broken due to import new inode operation get_inode_acl
  - ovl: enable RCU'd ->get_acl()
  - vfs: add rcu argument to ->get_acl() callback


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.2.0.0201
changelog:
  - net: sctp: update stream->incnt after successful allocation of stream_in
  - !741 [openEuler-1.0-LTS] openeuler_defconfig: Add configuration items for zhaoxin
  - !752 arm64/mpam: modify mpam irq register error log
  - arm64/mpam: modify mpam irq register error log
  - !437 [openEuler-1.0-LTS] USB: HCD: Fix URB giveback issue in tasklet function
  - openeuler_defconfig: Add configuration items for zhaoxin
  - bluetooth: Perform careful capability checks in hci_sock_ioctl()
  - netrom: Fix use-after-free caused by accept on already connected socket
  - !689 Fix compile error in allyesconfigs
  - !441 [openEuler-1.0-LTS] Add support for Zhaoxin SM3 and SM4 instruction
  - !438 [openEuler-1.0-LTS] Add Zhaoxin I2C driver
  - i2c: Add Zhaoxin I2C driver
  - !432 [openEuler-1.0-LTS] Add Zhaoxin ACE driver
  - mm: memcontrol: switch to rcu protection in drain_all_stock()
  - !429 [openEuler-1.0.-LTS] ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - !428 [openEuelr-1.0-LTS] x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs
  - !687 [HUST CSE] fix a use-after-free bug in uncore_pci_remove()
  - scsi/hifc: Fix compile error in allyesconfigs
  - net/hinic: Fix compile error in allyesconfigs
  - x86/perf: fix use-after-free bug in uncore_pci_remove()
  - crypto: Driver for Zhaoxin GMI SM4 Block Cipher Algorithm
  - crypto: Driver for Zhaoxin GMI SM3 Secure Hash algorithm
  - !433 [openEuler-1.0-LTS] Add support of turbo boost control interface for Zhaoxin CPUs
  - !431 [openEuler-1.0-LTS] Add Zhaoxin rng driver
  - crypto: Add Zhaoxin ACE driver
  - cpufreq: ACPI: Add Zhaoxin/Centaur turbo boost control interface support
  - hwrng: Add Zhaoxin rng driver
  - USB: HCD: Fix URB giveback issue in tasklet function
  - ACPI, x86: Improve Zhaoxin processors support for NONSTOP TSC
  - x86/acpi/cstate: Optimize ARB_DISABLE on Centaur CPUs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.3.0.0202
changelog:
  - netfilter: nf_tables: deactivate anonymous set from preparation phase
  - x86/msr-index: make SPEC_CTRL_IBRS assembler-portable
  - xfs: verify buffer contents when we skip log replay
  - !586 [openEuelr-1.0-LTS] kvm: arm64: fix some pvsched bugs
  - kvm: arm64: fix some pvsched bugs


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2305.4.0.0203
changelog:
  - !841 【openEuler-1.0-LTS】cpufreq: conservative: Add a switch to enable fast mode
  - x86/pm: Fix false positive kmemleak report in msr_build_context()
  - drm: Lock pointer access in drm_master_release()
  - drm: Fix use-after-free read in drm_getunique()
  - cpufreq: conservative: Add a switch to enable fast mode
  - of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  - iommu/dma: Fix MSI reservation allocation
  - lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  - rcu: Use *_ONCE() to protect lockless ->expmask accesses
  - iommu: Don't print warning when IOMMU driver only supports unmanaged domains
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.1.0.0204
changelog:
  - !932 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - irqchip/gic-v3-its: Balance initial LPI affinity across CPUs
  - irqchip/gic-v3-its: Track LPI distribution on a per CPU basis
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - net: sched: fix NULL pointer dereference in mq_attach


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.3.0.0205
changelog:
  - arm64: Add AMPERE1 to the Spectre-BHB affected list
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct().
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - sched: smart grid: init sched_grid_qos structure on QOS purpose
  - sched: Introduce smart grid scheduling strategy for cfs
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi_ssif: Rename idle state and check
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - nohz: Add TICK_DEP_BIT_RCU
  - perf/core: Fix hardlockup failure caused by perf throttle
  - of: Fix modalias string generation
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - ring-buffer: Sync IRQ works before buffer destruction
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct().
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
  - lib/cmdline: fix get_option() for strings starting with hyphen
  - of: overlay: fix for_each_child.cocci warnings
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - block: Fix the partition start may overflow in add_partition()
  - block: refactor blkpg_ioctl
  - nbd: get config_lock before sock_shutdown
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - dm: add disk before alloc dax
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.4.0.0206
changelog:
  - sched: Adjust few parameters range for smart grid
  - sched: clear credit count in error branch
  - sched: Fix memory leak on error branch
  - sched: fix dereference NULL pointers
  - sched: Fix timer storm for smart grid
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - fbcon: Check font dimension limits
  - sched/rt: Fix possible warn when push_rt_task
  - !1152 pci: workaround multiple functions can be assigned to only one VM
  - pci: workaround multiple functions can be assigned to only one VM
  - sched: Fix negative count for jump label
  - sched: Fix possible deadlock in tg_set_dynamic_affinity_mode
  - sched: fix WARN found by deadlock detect
  - sched: fix smart grid usage count
  - sched: Add static key to reduce noise
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - !1134 【openEuler-1.0-LTS】cpufreq:conservative: Fix load in fast_dbs_update()
  - firewire: fix potential uaf in outbound_phy_packet_callback()
  - cpufreq: conservative: fix load in fast_dbs_update()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.5.0.0207
changelog:
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - config: enable CONFIG_QOS_SCHED_SMART_GRID by default
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - sched: Fix memory leak for smart grid
  - sched: Delete redundant updates to p->prefer_cpus
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size
  - relayfs: fix out-of-bounds access in relay_file_read
  - kernel/relay.c: fix read_pos error when multiple readers
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.7.0.0208
changelog:
  - sched: Fix null pointer derefrence for sd->span
  - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive()
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - drm/msm/dpu: Add check for pstates
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


