# changelog

author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.1.0.0157
changelog:
  - ext4: correct the misjudgment in ext4_iget_extra_inode
  - ext4: correct max_inline_xattr_value_size computing
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
  - tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
  - swiotlb: skip swiotlb_bounce when orig_addr is zero
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
  - mm/sharepool: Fix using uninitialized sp_flag
  - mm/sharepool: Add a task_struct parameter for sp_get_local_group()
  - mm/sharepool: Don't check the DVPP address space range before merging
  - mm/sharepool: Configure the DVPP range for process
  - mm/sharepool: Introduce SPG_NON_DVPP flag for sp_group_add_task
  - mm/sharepool: Update sp_mapping structure
  - mm/sharepool: Clear the initialization of sp-associated structure for a process
  - mm/sharepool: Unify the memory allocation process
  - mm/sharepool: Use vm_private_data to store the spa
  - mm/sharepool: Share pool statistics adaption
  - mm/sharepool: Release the sp addr based on the id
  - mm/sharepool: Add an interface to obtain an id
  - mm/sharepool: Address space management for sp_group
  - mm/sharepool: Create global normal and dvpp mapping
  - mm/sharepool: Delete single-group mode
  - io_uring: io_close: Set owner as current->files if req->work.files uninitialized


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.2.0.0158
changelog:
  - x86: Fix return value of __setup handlers
  - x86/delay: Fix the wrong asm constraint in delay_loop()
  - ACPI: sysfs: Fix BERT error region memory mapping
  - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
  - nbd: fix io hung while disconnecting device
  - nbd: fix race between nbd_alloc_config() and module removal
  - nbd: call genl_unregister_family() first in nbd_cleanup()
  - ip_gre: test csum_start instead of transport header
  - net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
  - af_unix: Fix a data-race in unix_dgram_peer_wake_me().
  - NFSv4: Don't hold the layoutget locks across multiple RPC calls
  - tcp: tcp_rtx_synack() can be called from process context
  - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
  - md: fix an incorrect NULL check in md_reload_sb
  - md: fix an incorrect NULL check in does_sb_need_changing
  - ext4: avoid cycles in directory h-tree
  - ext4: verify dir block before splitting it
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net
  - drivers/base/node.c: fix compaction sysfs file leak
  - fsnotify: fix wrong lockdep annotations
  - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
  - fat: add ratelimit to fat*_ent_bread()
  - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
  - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
  - dm stats: add cond_resched when looping over entries
  - zsmalloc: fix races between asynchronous zspage free and page migration
  - netfilter: conntrack: re-fetch conntrack after insertion
  - assoc_array: Fix BUG_ON during garbage collect
  - net: af_key: check encryption module availability consistency
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  - block:Fix kabi broken
  - block: Fix warning in bd_link_disk_holder()
  - block: move the NEED_PART_SCAN flag to struct gendisk
  - block: rename bd_invalidated
  - scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs
  - scsi: hisi_sas: enable use_clustering
  - scsi: hisi_sas: Change DMA setup lock timeout to 2.5s
  - x86/speculation/mmio: Print SMT warning
  - KVM: x86/speculation: Disable Fill buffer clear within guests
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - x86/speculation/srbds: Update SRBDS mitigation selection
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - x86/speculation: Add a common function for MD_CLEAR mitigation update
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  - Documentation: Add documentation for Processor MMIO Stale Data
  - x86/cpu: Add another Alder Lake CPU to the Intel family
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
  - x86/cpu: Add Jasper Lake to Intel family
  - cpu/speculation: Add prototype for cpu_show_srbds()
  - x86/cpu: Add Elkhart Lake to Intel family
  - block: open accurate iostat account by default
  - block: use "precise_iostat" to switch accurate iostat account
  - block/diskstats: more accurate approximation of io_ticks for slow disks
  - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.3.0.0159
changelog:
  - block: fix that part scan is disabled in device_add_disk()
  - Revert "block: rename bd_invalidated"
  - Revert "block: move the NEED_PART_SCAN flag to struct gendisk"
  - Revert "block:Fix kabi broken"
  - rcu/tree: Mark functions as notrace
  - netfilter: nf_tables: stricter validation of element data
  - net: rose: fix UAF bugs caused by timer handler
  - xen/arm: Fix race in RB-tree based P2M accounting
  - vt: drop old FONT ioctls
  - dm thin: Fix crash in dm_sm_register_threshold_callback()
  - xen/blkfront: force data bouncing when backend is untrusted
  - xen/netfront: force data bouncing when backend is untrusted
  - xen-netfront: fix potential deadlock in xennet_remove()
  - xen/netfront: fix leaking data in shared pages
  - xen/blkfront: fix leaking data in shared pages
  - xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
  - tmpfs: fix the issue that the mount and remount results are inconsistent.
  - tmpfs: fix undefined-behaviour in shmem_reconfigure()
  - mm/sharepool: Check sp_is_enabled() before show spa_stat


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.4.0.0160
changelog:
  - inotify: show inotify mask flags in proc fdinfo
  - io_uring: always grab file table for deferred statx
  - bpf: Don't redirect packets with invalid pkt_len
  - config: enable CONFIG_QOS_SCHED_DYNAMIC_AFFINITY by default
  - sched: Add statistics for scheduler dynamic affinity
  - sched: Adjust cpu range in load balance dynamicly
  - sched: Adjust wakeup cpu range according CPU util dynamicly
  - cpuset: Introduce new interface for scheduler dynamic affinity
  - sched: Introduce dynamic affinity for cfs scheduler
  - crypto: hisilicon/sec - don't sleep when in softirq
  - video: fbdev: sm712fb: Fix crash in smtcfb_write()
  - video: fbdev: sm712fb: Fix crash in smtcfb_read()
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - block: don't delete queue kobject before its children
  - etmem:fix kernel stack overflow in do_swapcache_reclaim
  - etmem:fix kasan slab-out-of-bounds in do_swapcache_reclaim
  - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
  - blk-throttle: fix io hung due to configuration updates
  - block: fix NULL pointer dereference in disk_release()
  - block, bfq: make bfq_has_work() more accurate
  - blk-mq: fix panic during blk_mq_run_work_fn()
  - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()
  - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
  - ext4: fix race condition between ext4_ioctl_setflags and ext4_fiemap


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.1.0.0161
changelog:
  - fbcon: Prevent that screen size is smaller than font size
  - fbcon: Disallow setting font bigger than screen size
  - fbmem: Check virtual screen sizes in fb_set_var()
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  - scsi: core: Fix race between handling STS_RESOURCE and completion
  - block: prevent lockdep false positive warning about 'bd_mutex'
  - dm verity: allow only one error handling mode
  - dm verity: Fix compilation warning
  - dm verity: add root hash pkcs#7 signature verification
  - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  - dm btree spine: show warning if node_check failed in node_prep_for_write()
  - dm btree spine: remove paranoid node_check call in node_prep_for_write()
  - ext4: Fix race when reusing xattr blocks
  - ext4: Unindent codeblock in ext4_xattr_block_set()
  - ext4: Remove EA inode entry from mbcache on inode eviction
  - mbcache: Add functions to delete entry if unused
  - mbcache: Don't reclaim used entries
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.2.0.0162
changelog:
  - netfilter: nf_queue: do not allow packet truncation below transport header offset
  - openvswitch: fix OOB access in reserve_sfa_size()
  - dm thin: use refcount_t for thin_c reference counting
  - exec: Force single empty string when argv is empty
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
  - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
  - serial: 8250: fix return error code in serial8250_request_std_resource()
  - ipv4: Fix data-races around sysctl_ip_dynaddr.
  - icmp: Fix a data-race around sysctl_icmp_ratemask.
  - icmp: Fix a data-race around sysctl_icmp_ratelimit.
  - icmp: Fix data-races around sysctl.
  - net: Fix data-races around sysctl_mem.
  - inetpeer: Fix data-races around sysctl.
  - usbnet: fix memory leak in error case
  - esp: limit skb_page_frag_refill use to a single page
  - net: tun: avoid disabling NAPI twice
  - net: bonding: fix use-after-free after 802.3ad slave unbind
  - net: bonding: fix possible NULL deref in rlb code
  - usbnet: fix memory allocation in helpers
  - net: tun: stop NAPI when detaching queues
  - net: tun: unlink NAPI from device on destruction
  - virtio-net: fix race between ndo_open() and virtio_device_ready()
  - SUNRPC: Fix READ_PLUS crasher
  - virtio_net: fix xdp_rxq_info bug after suspend/resume
  - erspan: do not assume transport header is always set
  - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
  - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
  - ext4: make variable "count" signed
  - serial: 8250: Store to lsr_save_flags after lsr read
  - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
  - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
  - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
  - io_uring: add missing item types for various requests
  - net/sched: cls_u32: fix possible leak in u32_init_knode()
  - fq_codel: reject silly quantum parameters
  - net: sched: sch_teql: fix null-pointer dereference
  - rcu: Set a maximum limit for back-to-back callback invocation
  - mm: Fix page counter mismatch in shmem_mfill_atomic_pte
  - scsi: mpt3sas: Fix unlock imbalance
  - io-wq: Switch io_wqe_worker's fs before releasing request
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  - Revert "iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.4.0.0163
changelog:
  - Revert "x86/unwind/orc: Change REG_SP_INDIRECT"
  - Phytium/S2500: kdump: Avoid vmcore saving failure across multi-socket
  - PCI: Add config control for phytium ACS quirks
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
  - sched: Fix null-ptr-deref in free_fair_sched_group
  - RDMA/ib_srp: Fix a deadlock
  - mm/slub: add missing TID updates on slab deactivation
  - block: fix regression for dm
  - blk-mq: handle bio after queue is initialized
  - x86: Clear .brk area at early boot
  - signal/seccomp: Dump core when there is only one live thread
  - x86/unwind/orc: Recheck address range after stack info was updated
  - x86/unwind/orc: Silence warnings caused by missing ORC data
  - x86/unwind/orc: Change REG_SP_INDIRECT


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.5.0.0164
changelog:
  - x86/speculation: Add LFENCE to RSB fill sequence
  - x86/speculation: Add RSB VM Exit protections
  - Revert "blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite"
  - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite
  - arm64: Avoid premature usercopy failure for __arch_copy_to_user_generic_read
  - net_sched: cls_route: remove from list when handle is 0


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.6.0.0165
changelog:
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
  - tty: drop tty_schedule_flip()
  - tty: the rest, stop using tty_schedule_flip()
  - tty: drivers/tty/, stop using tty_schedule_flip()
  - can: bcm/raw/isotp: use per module netdevice notifier
  - CIFS: Fix retry mid list corruption on reconnects
  - KVM: arm64: vgic-its: Change default outer cacheability for {PEND, PROP}BASER
  - xhci: Fix a logic issue when display Zhaoxin XHCI root hub speed
  - dm verity: set DM_TARGET_IMMUTABLE feature flag
  - scsi: hisi_sas: Add SATA_DISK_ERR bit handling for v3 hw
  - Revert "scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs"
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  - netfilter: nf_tables: do not allow SET_ID to refer to another table


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2209.1.0.0166
changelog:
  - dm-thin: Resume failed in FAIL mode
  - tpm: fix reference counting for struct tpm_chip
  - af_key: Do not call xfrm_probe_algs in parallel
  - net: usb: ax88179_178a: Fix packet receiving
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  - net: usb: ax88179_178a: fix packet alignment padding


