# changelog

author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.1.0.0255
changelog:
  - !3158  mm: don't let userspace spam allocations warnings
  - mm: don't let userspace spam allocations warnings
  - !2781  cpufreq: Abort show()/store() for half-initialized policies
  - !3118  sched: smart grid: check is active in affinity timer
  - sched: smart grid: check is active in affinity timer
  - !2977  Backport crypto bugfix
  - !3071  perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - !3038  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3031  x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - !3030  x86/mce/inject: Fix a wrong assignment of i_mce.status
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - x86/mce/inject: Fix a wrong assignment of i_mce.status
  - crypto: fix kabi broken in struct crypto_instance
  - crypto: api - Use work queue in crypto_destroy_instance
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.3.0.0256
changelog:
  - !3347  tun: avoid double free in tun_free_netdev
  - tun: avoid double free in tun_free_netdev
  - !3239  net: hns: fix fake link up
  - !3113 KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - !3281  LTS patch backport
  - !3122  nvme: retain split access workaround for capability reads
  - !3262  icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: fix kabi broken in struct netns_xfrm
  - xfrm: fix a data-race in xfrm_gen_index()
  - !3276  linux-4.19.y inclusion
  - !3263  workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - !3267  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - can: dev: can_restart(): don't crash kernel if carrier is OK
  - can: dev: move driver related infrastructure into separate subdir
  - ipv6: avoid atomic fragment on GSO packets
  - tcp_metrics: do not create an entry from tcp_init_metrics()
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
  - tcp_metrics: add missing barriers on delete
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  - ext4: move 'ix' sanity check to corrent position
  - vfs: fix readahead(2) on block devices
  - overlayfs: set ctime when setting mtime and atime
  - quota: Fix slow quotaoff
  - mcb: remove is_added flag from mcb_device struct
  - sched,idle,rcu: Push rcu_idle deeper into the idle path
  - cgroup: Remove duplicates in cgroup v1 tasks file
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: hns: update hns version to 23.12.1
  - net: hns: fix fake link up on xge port
  - !3021  fix CFS bandwidth vs. hrtimer self deadlock
  - !3202  regmap: fix NULL deref on lookup
  - regmap: fix NULL deref on lookup
  - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - arm64: cpufeature: Extract capped perfmon fields
  - nvme: retain split access workaround for capability reads
  - cpu/hotplug: fix kabi breakage in enum cpuhp_state
  - hrtimers: Push pending hrtimers away from outgoing CPU earlier


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.4.0.0257
changelog:
  - !3426  Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.6.0.0258
changelog:
  - !3607  Fix CVE-2023-6546
  - !3606  perf/core: Fix CVE-2023-6931
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - tty: n_gsm: fix restart handling via CLD command
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()
  - !3417  SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - !3531 Fix kernel panic occurs during ISO installation on the 20.03 SP3/SP4
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - i2c: hisi: Only use the completion interrupt to finish the transfer
  - i2c: hisi: Avoid redundant interrupts
  - !3483  net: Remove acked SYN flag from packet in the transmit queue correctly
  - net: Remove acked SYN flag from packet in the transmit queue correctly
  - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.1.0.0259
changelog:
  - !3660  atm: Fix Use-After-Free in do_vcc_ioctl
  - !3687  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - !3672  smb: client: fix potential OOB in smb2_dump_detail()
  - !3671  smb: client: fix OOB in smbCalcSize()
  - !3627  jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - !3189  fs: don't audit the capability check in simple_xattr_list()
  - smb: client: fix potential OOB in smb2_dump_detail()
  - smb: client: fix OOB in smbCalcSize()
  - !3555  net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - atm: Fix Use-After-Free in do_vcc_ioctl
  - !3592  CVE-2023-35827 patchset
  - !3449  Fix data-races around
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc.
  - ip: Fix data-races around sysctl_ip_fwd_update_priority.
  - fs: don't audit the capability check in simple_xattr_list()


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.3.0.0260
changelog:
  - !3768  iomap: add support to track dirty state of sub pages
  - !3845  netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3847  nvmet: nul-terminate the NQNs passed in the connect command
  - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2
  - team: Fix use-after-free when an option instance allocation fails
  - packet: Move reference count in packet_sock to atomic_long_t
  - tcp: do not accept ACK of bytes we never sent
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - ipv6: fix potential NULL deref in fib6_add()
  - ipv4: Correct/silence an endian warning in __ip_do_redirect
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: Don't propagate promisc change to lower dev in passthru
  - ppp: limit MRU to 64K
  - tty: Fix uninit-value access in ppp_sync_receive()
  - net: annotate data-races around sk->sk_dst_pending_confirm
  - net: annotate data-races around sk->sk_tx_queue_mapping
  - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1
  - ring-buffer: Fix memory leak of free page
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - x86/CPU/AMD: Check vendor in the AMD microcode callback
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - audit: don't take task_lock() in audit_exe_compare() code path
  - nvmet: nul-terminate the NQNs passed in the connect command
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3823 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3803  net/sched: cbs: Fix not adding cbs instance to list
  - net/sched: cbs: Fix not adding cbs instance to list
  - !3770  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - iomap: add support to track dirty state of sub pages
  - !3757  Fix bugs from LTS patches
  - devcoredump: Send uevent once devcd is ready
  - devcoredump : Serialize devcd_del work
  - driver core: Release all resources during unbind before updating device links
  - !3716  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3667  net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - net/rose: Fix Use-After-Free in rose_ioctl


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.4.0.0261
changelog:
  - !4006  crypto: hisilicon/sec2: fix memory use-after-free issue
  - crypto: hisilicon/sec2: fix memory use-after-free issue
  - !3923  net: bridge: multicast: fix UAF of net_bridge
  - net: bridge: multicast: fix UAF of net_bridge


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2401.5.0.0262
changelog:
  - !4101  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !2954 spi: phytium: fix phytium_spi_irq panic on boot
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4067  fix CVE-2022-48619
  - !4080  rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
  - !4065  smb: client: fix OOB in receive_encrypted_standard()
  - !4021  netfilter: nf_tables: Reject tables of unsupported family
  - Input: add bounds checking to input_set_capability()
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4039  crypto: hisilicon/qm: fix several issues
  - !4025  crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - !3980  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - crypto: hisilicon/qm: fix several issues
  - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - netfilter: nf_tables: Reject tables of unsupported family
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - spi: phytium: fix phytium_spi_irq panic on boot


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.1.0.0263
changelog:
  - !4277  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4288  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4299  smb: client: fix NULL deref in asn1_ber_decoder()
  - smb: client: fix NULL deref in asn1_ber_decoder()
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4228  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4235  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4255  drm/amdgpu: Fix potential fence use-after-free v2
  - !4209  dhugetlb: skip unexpected migration
  - drm/amdgpu: Fix potential fence use-after-free v2
  - !4231  crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - !4212  netlink: fix potential sleeping issue in mqueue_flush_file
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - dhugetlb: skip unexpected migration
  - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function
  - !3944  time: Handle negative seconds correctly in timespec64_to_ns()
  - !3943  timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - !3942  efi/x86: Map the entire EFI vendor string before copying it
  - !4166  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !4137  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - time: Handle negative seconds correctly in timespec64_to_ns()
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - efi/x86: Map the entire EFI vendor string before copying it


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.4.0.0264
changelog:
  - !4454  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4411 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4412 v3  Save and restore msg_namelen in sock_sendmsg
  - net: Save and restore msg_namelen in sock_sendmsg
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - !4399  net: dst: Optimized route gc
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4392 linux-4.19.y inclusion
  - !4369  mm/filemap: avoid buffered read/write race to read inconsistent data
  - net/dst: use a smaller percpu_counter batch for dst entries accounting
  - net: add a route cache full diagnostic message
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - mm: fix unmap_mapping_range high bits shift bug
  - x86/alternatives: Sync core before enabling interrupts
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4360  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - !4320  io_uring/af_unix: disable sending io_uring over sockets
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - io_uring/af_unix: disable sending io_uring over sockets


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


