# changelog

author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-256
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir


author: yexiao<yexiao7@huawei.com> - 202002-17
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202002-19
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: Jiabo Feng<fengjiabo1@huawei.com> - 202002-21
changelog:
  - update release. commit(2723c0159f0f84e2169b124dca9f4eb0dc6863f9) has been merged into commit(a8c3711f01ae9a152f0e8cede2547b4c54712400)


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.15.7-39
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.4.0.0264
changelog:
  - !4454  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4411 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4412 v3  Save and restore msg_namelen in sock_sendmsg
  - net: Save and restore msg_namelen in sock_sendmsg
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - !4399  net: dst: Optimized route gc
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4392 linux-4.19.y inclusion
  - !4369  mm/filemap: avoid buffered read/write race to read inconsistent data
  - net/dst: use a smaller percpu_counter batch for dst entries accounting
  - net: add a route cache full diagnostic message
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - mm: fix unmap_mapping_range high bits shift bug
  - x86/alternatives: Sync core before enabling interrupts
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4360  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - !4320  io_uring/af_unix: disable sending io_uring over sockets
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - io_uring/af_unix: disable sending io_uring over sockets


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.5.0.0266
changelog:
  - !4601 v2  xen-netback: don't produce zero-size SKB frags
  - xen-netback: don't produce zero-size SKB frags
  - !4583  net: hns3: fix a bug and modify the hns3 driver version
  - net: hns3: update hns3 version to 24.2.1
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - !4552 v4  CVE-2023-52340
  - !4526 v2  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - ipv6: fix kabi broken in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - !4538  fix kprobe reenter bug
  - arm64/openeuler_defconfig: add not set config to fix compiling error
  - tracing/kprobes: Do the notrace functions check without kprobes on ftrace
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.6.0.0267
changelog:
  - !4701 v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - !4684 v3  CVE-2023-52435
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - !4643  f2fs: explicitly null-terminate the xattr list
  - f2fs: explicitly null-terminate the xattr list


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.1.0.0268
changelog:
  - !4947  powerpc/64s: Fix pte update for kernel memory on radix
  - !4932  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - powerpc/64s: Fix pte update for kernel memory on radix
  - !4874 v2  net: openvswitch: limit the number of recursions from action sets
  - !4920  ARM: footbridge: remove personal server platform
  - !4887  KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - !4918 v3  usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4936  i2c: validate user data in compat ioctl
  - i2c: validate user data in compat ioctl
  - !4898  platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4879  KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - !4869  Fix CVE-2021-46941
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4904  i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4859  hfsplus: prevent corruption in shrinking truncate
  - !4877  i2c: Fix a potential use after free
  - ARM: footbridge: fix PCI interrupt mapping
  - !4888 v3  media: dvbdev: Fix memory leak in dvb_media_device_free()
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4825  sched/membarrier: reduce the ability to hammer on sys_membarrier
  - !4882  Input: appletouch - initialize work before device registration
  - !4876  backport patch to fix CVE-2021-47077
  - !4899  net: qualcomm: rmnet: fix global oob in rmnet_policy
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4892  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !4881  i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4865  Input: powermate - fix use-after-free in powermate_config_complete
  - !4860  apparmor: avoid crash when parsed profile name is empty
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - media: dvbdev: Fix memory leak in dvb_media_device_free()
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - Input: appletouch - initialize work before device registration
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - i2c: Fix a potential use after free
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - net: openvswitch: limit the number of recursions from action sets
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: balance phy init and exit
  - usb: dwc3: core: Do core softreset when switch mode
  - Input: powermate - fix use-after-free in powermate_config_complete
  - !4856  bus: qcom: Put child node before return
  - apparmor: avoid crash when parsed profile name is empty
  - hfsplus: prevent corruption in shrinking truncate
  - bus: qcom: Put child node before return
  - !4828  Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4806 v2  media: pvrusb2: fix use after free on context disconnection
  - !4777  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4819 v2  fix CVE-2020-36782
  - !4833  openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - !4677  f2fs: fix to avoid dirent corruption
  - !4804  CVE-2023-52451 backport to 4.19 v2
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4778 v3  Revert "memcg: fix a UAF problem in drain_all_stock()"
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - !4812  parisc: Clear stale IIR value on instruction access rights trap
  - parisc: Clear stale IIR value on instruction access rights trap
  - media: pvrusb2: fix use after free on context disconnection
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - !4758  binder: signal epoll threads of self-work
  - !4746  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - Revert "memcg: fix a UAF problem in drain_all_stock()"
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to  fifo depth - 1
  - !4707  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - !4686  mlxsw: spectrum_acl_tcam: Fix stack corruption
  - binder: signal epoll threads of self-work
  - !4710  CVE-2021-46904 for openEuler1.0
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - !4671  uio: Fix use-after-free in uio_open
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - net: hso: fix NULL-deref on disconnect regression
  - net: hso: fix null-ptr-deref during tty device unregistration
  - usb: hso: check for return value in hso_serial_common_create()
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - f2fs: fix to avoid dirent corruption
  - uio: Fix use-after-free in uio_open


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.2.0.0269
changelog:
  - !5133  CVE-2021-46926
  - !5136  NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - !5052 v3  Remove WQ_FLAG_BOOKMARK flag
  - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - soundwire: intel: filter SoundWire controller device search
  - !5114  fix CVE-2023-52578
  - !5119  crypto: scomp - fix req->dst buffer overflow
  - !5101  EDAC/thunderx: Fix possible out-of-bounds string access
  - !5094  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - crypto: scomp - fix req->dst buffer overflow
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - !5092  wifi: mac80211: fix potential key use-after-free
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2
  - !5090  drm: bridge/panel: Cleanup connector on bridge detach
  - !5088  uio_hv_generic: Fix a memory leak in error handling paths
  - !4952  scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - !5076 v3  CVE-2021-47074
  - netfilter: nft_compat: reject unused compat flag
  - ppp_async: limit MRU to 64K
  - inet: read sk->sk_family once in inet_recv_error()
  - bonding: remove print in bond_verify_device_path
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - net: ipv4: fix a memleak in ip_setup_cork
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - virtio_net: Fix Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - SUNRPC: Fix a suspicious RCU usage warning
  - tcp: Add memory barrier to tcp_push()
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - md: Whenassemble the array, consult the superblock of the freshest device
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - !5073  RDMA/rxe: Clear all QP fields if creation failed
  - !5077  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - wifi: mac80211: fix potential key use-after-free
  - drm: bridge/panel: Cleanup connector on bridge detach
  - uio_hv_generic: Fix a memory leak in error handling paths
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: unittest: Fix compile in the non-dynamic case
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - nvme-loop: don't put ctrl on nvme_init_ctrl error
  - !5060  net: fix possible store tearing in neigh_periodic_work()
  - RDMA/rxe: Clear all QP fields if creation failed
  - net: fix possible store tearing in neigh_periodic_work()
  - of: Fix double free in of_parse_phandle_with_args_map
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - audit: Send netlink ACK before setting connection in auditd_set
  - crypto: scompress - return proper error code for allocation failure
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - !5046  usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - !4929  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !4752  block: add check that partition length needs to be aligned with block size
  - !4735  blk-mq: fix IO hang from sbitmap wakeup race
  - !3864  nvme: sanitize metadata bounce buffer for reads
  - !4946  NFC: st21nfca: Fix memory leak in device probe and remove
  - !4999  CVE-2021-46984
  - !4938  crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - !4990  vt: fix memory overlapping when deleting chars in the buffer
  - !4978  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5018  ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4992  bnxt_en: Fix RX consumer index logic in the error path.
  - !4997  Fixed CVE-2023-52504
  - !4982  i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - !4983  net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - !4995  mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - !4974  arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !4975  arm64/mpam: support resctrl fs to show mounting option
  - !4973  arm64/mpam: Skip updates of unrelated ctrl type
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4996  soundwire: stream: fix memory leak in stream config error path
  - !4817 v2  io_uring: fix overflows checks in provide buffers
  - kyber: fix kabi broken in ->bio_merge()
  - kyber: fix out of bounds access when preempted
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - soundwire: stream: fix memory leak in stream config error path
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - bnxt_en: Fix RX consumer index logic in the error path.
  - !4969  CVE-2021-46990
  - vt: fix memory overlapping when deleting chars in the buffer
  - !4945  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4944  perf/x86/lbr: Filter vsyscall addresses
  - !4967  i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - !4970  binder: fix async_free_space accounting for empty parcels
  - !4919 v2  HID: usbhid: fix info leak in hid_submit_ctrl
  - !4980  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4949  CVE-2021-47024
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - arm64/mpam: Skip updates of unrelated ctrl type
  - binder: fix async_free_space accounting for empty parcels
  - powerpc/64s: Fix crashes when toggling entry flush barrier
  - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - vsock/virtio: free queued packets when closing socket
  - vsock/virtio: discard packets only when socket is really closed
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - NFC: st21nfca: Fix memory leak in device probe and remove
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - perf/x86/lbr: Filter vsyscall addresses
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - HID: usbhid: fix info leak in hid_submit_ctrl
  - io_uring: fix overflows checks in provide buffers
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - nvme: sanitize metadata bounce buffer for reads


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.3.0.0270
changelog:
  - !5306  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5347  s390/ptrace: handle setting of fpc register correctly
  - !5309  drm/msm/dpu: Add mutex lock in control vblank irq
  - s390/ptrace: handle setting of fpc register correctly
  - !5267  llc: call sock_orphan() at release time
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5241  powerpc/lib: Validate size for vector operations
  - !5246  ceph: fix deadlock or deadcode of misusing dget()
  - !5268  crypto: algif_aead - fix uninitialized ctx->init
  - crypto: algif_aead - fix uninitialized ctx->init
  - llc: call sock_orphan() at release time
  - !5220  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5196  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - ceph: fix deadlock or deadcode of misusing dget()
  - powerpc/lib: Validate size for vector operations
  - !5210 v2  Fix CVE-2022-48629 and CVE-2022-48630
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5175  arm64/mpam: Fix use-after-free when deleting resource groups
  - !5163  nfc: nci: assert requested protocol is valid
  - !5172  CVE-2023-52502 for openEuler-1.0-LTS
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - crypto: qcom-rng - ensure buffer for generate is completely filled
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5177  net: nfc: llcp: Add lock when modifying device list
  - !5157  RDMA/srp: Do not call scsi_done() from srp_abort()
  - net: nfc: llcp: Add lock when modifying device list
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - !5142  arm64/mpam: Expand the monitor number of the resctrl root
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: constify several pointers to u8, char and sk_buff
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - arm64/mpam: Expand the monitor number of the resctrl root


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.4.0.0271
changelog:
  - !5539  spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5542  round lts patches
  - !5520  scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - l2tp: pass correct message length to ip6_append_data
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5514 CVE-2021-47110
  - !5497  llc: Drop support for ETH_P_TR_802_2.
  - !5498  llc: make llc_ui_sendmsg() more robust against bonding changes
  - !5490  tcp: add sanity checks to rx zerocopy
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - x86/kvm: Disable kvmclock on all CPUs on shutdown
  - !5502  pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5477  Fixed CVE-2021-47112
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - tcp: add sanity checks to rx zerocopy
  - !5479  jfs: fix cve-2023-52600
  - !5478  jfs: fix array-index-out-of-bounds in diNewExt
  - !5485  nfsd: fix use-after-free due to delegation race
  - nfsd: fix use-after-free due to delegation race
  - !5281  printk: avoid deadlock in panic
  - jfs: fix uaf in jfs_evict_inode
  - JFS: fix memleak in jfs_mount
  - jfs: fix array-index-out-of-bounds in diNewExt
  - x86/kvm: Teardown PV features on boot CPU as well
  - !5465  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5361  btrfs: abort in rename_exchange if we fail to insert the second ref
  - !5254  tomoyo: fix UAF write bug in tomoyo_write_control()
  - !5321  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5455  CVE-2021-47114
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5320  jfs: fix slab-out-of-bounds Read in dtSearch
  - ocfs2: issue zeroout to EOF blocks
  - ocfs2: fix zero out valid data
  - ocfs2: fix data corruption by fallocate
  - !5374  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !5418 [sync] PR-5317:  KVM: s390: fix setting of fpc register
  - !5272  net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - !5274  phonet/pep: refuse to enable an unbound pipe
  - !5359  CVE-2021-47121 and CVE-2021-47122
  - KVM: s390: fix setting of fpc register
  - !5358 v5  CVE-2023-52595
  - !5336  binder: fix race between mmput() and do_exit()
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - btrfs: abort in rename_exchange if we fail to insert the second ref
  - net: caif: fix memory leak in caif_device_notify
  - net: caif: fix memory leak in cfusbl_device_notify
  - net: caif: add proper error handling
  - net: caif: added cfserl_release function
  - rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - wifi: rt2x00: restart beacon queue when hardware reset
  - rt2x00: clear up IV's on key removal
  - rt2x00: clear IV's on start to fix AP mode regression
  - rt2800: add pre_reset_hw callback
  - rt2800: do not nullify initialization vector data
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - printk: avoid deadlock in panic
  - phonet/pep: refuse to enable an unbound pipe
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - tomoyo: fix UAF write bug in tomoyo_write_control()


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2404.1.0.0272
changelog:
  - !5874  scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - !5841  fixup CVE-2024-26751
  - !5834  CVE-2021-47144
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - drm/amd/amdgpu: fix refcount leak
  - !5796  netfilter: nft_limit: reject configurations that cause integer overflow
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - !5755  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5767 v5  net: fec: fix the potential memory leak in fec_enet_init()
  - !5718  CVE-2024-26654
  - net: fec: fix the potential memory leak in fec_enet_init()
  - !5722  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5727  fix CVE-2021-47101
  - !5531  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - !5715  net: hns3: updates 2024.04.02
  - !5710 v2  ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - !5700  sr9800: Add check for usbnet_get_endpoints
  - !5680  USB: usbfs: Don't WARN about excessively large memory allocations
  - !5679  fix CVE-2023-52587
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - ALSA: aica: Fix a long-time build breakage
  - !5713 v2  tipc: wait and exit until all work queues are done
  - net: hns3: update hns3 version to 24.3.1
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5696  NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: wait and exit until all work queues are done
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - !5702  ext4: Validate inode pa before using preallocation blocks
  - !5694  tipc: skb_linearize the head skb when reassembling msgs
  - ext4: Validate inode pa before using preallocation blocks
  - !5674  mac80211: fix locking in ieee80211_start_ap error path
  - !5672  arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - sr9800: Add check for usbnet_get_endpoints
  - !5528  btrfs: do not BUG_ON in link_to_fixup_dir
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: skb_linearize the head skb when reassembling msgs
  - !5522  md/raid5: fix atomicity violation in raid5_cache_count
  - USB: usbfs: Don't WARN about excessively large memory allocations
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - mac80211: fix locking in ieee80211_start_ap error path
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5581  CVE-2023-52622
  - !5658 v2  CVE-2021-47131
  - !5645 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5559  fix CVE-2021-47173
  - !5575  net: dsa: fix a crash if ->get_sset_count() fails
  - net/tls: Use RCU API to access tls_ctx->netdev
  - net/tls: Remove the context from the list in tls_device_down
  - tls: Fix context leak on tls_device_down
  - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131
  - net/tls: Fix use-after-free after the TLS device goes down and up
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
  - !5625  i2c: i801: Don't generate an interrupt on bus reset
  - !5517  dm: revert partial fix for redundant bio-based IO accounting
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5481  jfs: fix array-index-out-of-bounds in dbAdjTree
  - !5572  mld: fix panic in mld_newpack()
  - !5565  tracing: Ensure visibility when inserting an element into tracing_map
  - !5571 v2  mm/mlock: return EINVAL for illegal user memory range in mlock
  - i2c: i801: Don't generate an interrupt on bus reset
  - !5587  Fix CVE-2021-47171
  - !5579  mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5573  Fix CVE-2021-47160
  - !5564  serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5560  drm/amdgpu: Fix a use-after-free
  - net: usb: fix possible use-after-free in smsc75xx_bind
  - net: usb: fix memory leak in smsc75xx_bind
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5558  net: fujitsu: fix potential null-ptr-deref
  - !5556  NFC: nci: fix memory leak in nci_allocate_device
  - net: dsa: fix a crash if ->get_sset_count() fails
  - net: dsa: mt7530: fix VLAN traffic leaks again
  - net: dsa: mt7530: fix VLAN traffic leaks
  - mld: fix panic in mld_newpack()
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - tracing: Ensure visibility when inserting an element into tracing_map
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5552  net/smc: remove device from smcd_dev_list after failed device_add()
  - !5290  crypto: algif_aead - Only wake up when ctx->more is zero
  - !5446  keys: safe concurrent user->{session,uid}_keyring access
  - drm/amdgpu: Fix a use-after-free
  - !5550  pciehp: clear p_slot->work.data after powering off a slot
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - misc/uss720: fix memory leak in uss720_probe
  - !5515  netfilter: nf_tables: disallow timeout for anonymous sets
  - !5538  netfilter: nf_tables: disallow anonymous set with timeout flag
  - net: fujitsu: fix potential null-ptr-deref
  - NFC: nci: fix memory leak in nci_allocate_device
  - net/smc: remove device from smcd_dev_list after failed device_add()
  - pciehp: clear p_slot->work.data after powering off a slot
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - btrfs: do not BUG_ON in link_to_fixup_dir
  - md/raid5: fix atomicity violation in raid5_cache_count
  - dm: revert partial fix for redundant bio-based IO accounting
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - keys: safe concurrent user->{session,uid}_keyring access
  - crypto: af_alg - Work around empty control messages without MSG_MORE
  - crypto: af_alg - Fix regression on empty requests
  - crypto: algif_aead - Only wake up when ctx->more is zero


author: chenyi <chenyi211@huawei.com> - 4.19.90-2404.2.0.0273
changelog:
  - !6231 v2  drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6083  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - !6160  net/sched: act_mirred: don't override retval if we already lost the skb
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6152  Fix CVE-2024-26812
  - !6139  iavf: free q_vectors before queues in iavf_disable_vf
  - !6164  CVE-2021-47194
  - !6123  xen/events: close evtchn after mapping cleanup
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
  - net/sched: act_mirred: don't override retval if we already lost the skb
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - !6053  net: ip_tunnel: prevent perpetual headroom growth
  - !6002  KVM: s390: vsie: fix race during shadow creation
  - iavf: free q_vectors before queues in iavf_disable_vf
  - !6102  Fix CVE-2024-27437
  - !6070  Fix CVE-2024-26686
  - !6049  wifi: mac80211: fix race condition on enabling fast-xmit
  - !5916  ext4: fix double-free of blocks due to wrong extents moved_len
  - xen/events: close evtchn after mapping cleanup
  - !6099  vfio/pci: Lock external INTx masking ops
  - !6032  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5899  dm-crypt: don't modify the data when using authenticated encryption
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
  - vfio/pci: Lock external INTx masking ops
  - !6042  nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6030  Fix CVE-2024-26685
  - !6015  btrfs: don't drop extent_map for free space inode on write error
  - !5963  btrfs: dev-replace: properly validate device names
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - fs/proc: do_task_stat: use __for_each_thread()
  - exit: Use the correct exit_code in /proc/<pid>/stat
  - net: ip_tunnel: prevent perpetual headroom growth
  - wifi: mac80211: fix race condition on enabling fast-xmit
  - !5999  mm/swap: fix race when skipping swapcache
  - nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6019  net/sched: act_mirred: use the backlog for mirred ingress
  - !6010  PM / devfreq: Synchronize devfreq_monitor_[start/stop
  - !5846  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5994  ipv6: sr: fix possible use-after-free and null-ptr-deref
  - nilfs2: fix potential bug in end_buffer_async_write
  - nilfs2: fix buffer corruption due to concurrent device reads
  - !5951  RDMA/qedr: Fix qedr_create_user_qp error flow
  - net/sched: act_mirred: use the backlog for mirred ingress
  - btrfs: don't drop extent_map for free space inode on write error
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  - !5961  fbdev: savage: Error out if pixclock equals zero
  - KVM: s390: vsie: fix race during shadow creation
  - mm/swap: fix race when skipping swapcache
  - ipv6: sr: fix possible use-after-free and null-ptr-deref
  - !5875 v3  CVE-2024-26771
  - !5926  RDMA/srpt: Support specifying the srpt_service_guid parameter
  - btrfs: dev-replace: properly validate device names
  - fbdev: savage: Error out if pixclock equals zero
  - !5778  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - RDMA/qedr: Fix qedr_create_user_qp error flow
  - !5830  fbdev: sis: Error out if pixclock equals zero
  - RDMA/srpt: Support specifying the srpt_service_guid parameter
  - ext4: fix double-free of blocks due to wrong extents moved_len
  - dm-crypt: don't modify the data when using authenticated encryption
  - !5807  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - dmaengine: ti: edma: Fix error return code in edma_probe()
  - dmaengine: ti: edma: add missed operations
  - dmaengine: ti: edma: fix missed failure handling
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - fbdev: sis: Error out if pixclock equals zero
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


