# changelog

author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.2.0.0281
changelog:
  - !8895  net: fix out-of-bounds access in ops_init
  - !8694  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - !8858  PCI/PM: Drain runtime-idle callbacks before driver removal
  - !8626  fs/9p: only translate RWX permissions for plain 9P2000
  - !8490  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - !8777  memory: fsl_ifc: fix leak of IO mapping on probe failure
  - !8806  media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8664  mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - !8865  staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - !8888  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - !8825  watchdog: Fix possible use-after-free in wdt_startup()
  - !8654  nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8358  perf report: Fix memory leaks around perf_tip()
  - !8552  tipc: fix a possible memleak in tipc_buf_append
  - !8851  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8802  CVE-2021-47294
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8628  erspan: make sure erspan_base_hdr is present in skb->head
  - !8716  CVE-2024-35910
  - !8325  ocfs2: fix data corruption after conversion from inline format
  - !8729  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8636  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - watchdog: Fix possible use-after-free in wdt_startup()
  - !8773  sched: remove WARN_ON on checking rq->tmp_alone_branch
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8678  can: pch_can: pch_can_rx_normal: fix use after free
  - netrom: Fix use-after-free of a listening socket.
  - netrom: Decrease sock refcount when sock timers expire
  - !8676  net: tulip: de4x5: fix the problem that the array 'lp->phy[8
  - !8708  media: imon: fix access to invalid resource for the second interface
  - !8707  regmap: Fix possible double-free in regcache_rbtree_exit()
  - !8706  isdn: mISDN: Fix sleeping function called from invalid context
  - !8705  usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8357  nilfs2: fix underflow in second superblock position calculations
  - !8681  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - !8484  scsi: megaraid_sas: Fix resource leak in case of probe failure
  - memory: fsl_ifc: fix leak of IO mapping on probe failure
  - sched: remove WARN_ON on checking rq->tmp_alone_branch
  - !8620  CVE-2024-35896
  - !8526  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - !8336  tcp: fix page frag corruption on page fault
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8521  isofs: Fix out of bound access for corrupted isofs image
  - !7786  powerpc/powernv: Add a null pointer check in opal_event_init()
  - !8568  gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - tcp: properly terminate timers for kernel sockets
  - mptcp: add sk_stop_timer_sync helper
  - !8478  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !8366  net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - !8544  CVE-2021-47358
  - !8577  mmc: sdhci-msm: pervent access to suspended controller
  - !8579  net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - !8603  rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - media: imon: fix access to invalid resource for the second interface
  - regmap: Fix possible double-free in regcache_rbtree_exit()
  - isdn: mISDN: Fix sleeping function called from invalid context
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8516  CVE-2021-47409
  - !8465  drm/amd/display: Avoid NULL dereference of timing generator
  - !8500  pwm: Fix double shift bug
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - can: pch_can: pch_can_rx_normal: fix use after free
  - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
  - !8402  i40e: Fix freeing of uninitialized misc IRQ vector
  - !8398  comedi: ni_usb6501: fix NULL-deref in command paths
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8464  i2c: smbus: fix NULL function pointer dereference
  - !8434  iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - !8411  platform/x86: wmi: Fix opening of char device
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8307  s390/dasd: protect device queue against concurrent access
  - !8444  CVE-2021-47511
  - !8443 v2  ipack: ipoctal: fix module reference leak
  - !8611  smackfs: restrict bytes count in smk_set_cipso()
  - !8610  media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - !8609  can: peak_pci: peak_pci_remove(): fix UAF
  - !8430  drm/sched: Avoid data corruptions
  - !8557  net: cdc_eem: fix tx fixup skb leak
  - !8365  efi/capsule-loader: fix incorrect allocation size
  - !8333  soc: qcom: llcc: Handle a second device without data corruption
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: complete validation of user input
  - netfilter: validate user input for expected length
  - smackfs: restrict bytes count in smk_set_cipso()
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - can: peak_pci: peak_pci_remove(): fix UAF
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - mmc: sdhci-msm: pervent access to suspended controller
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - net: cdc_eem: fix tx fixup skb leak
  - tipc: fix a possible memleak in tipc_buf_append
  - staging: greybus: uart: fix tty use after free
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - isofs: Fix out of bound access for corrupted isofs image
  - usb: dwc2: Fix memory leak in dwc2_hcd_init
  - usb: dwc2: check return value after calling platform_get_resource()
  - pwm: Fix double shift bug
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - scsi: megaraid_sas: Fix resource leak in case of probe failure
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - drm/amd/display: Avoid NULL dereference of timing generator
  - i2c: smbus: fix NULL function pointer dereference
  - ALSA: pcm: oss: Fix negative period/buffer sizes
  - ALSA: pcm: oss: Fix a few more UBSAN fixes
  - ipack: ipoctal: fix module reference leak
  - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - drm/sched: Avoid data corruptions
  - platform/x86: wmi: Fix opening of char device
  - i40e: Fix freeing of uninitialized misc IRQ vector
  - comedi: ni_usb6501: fix NULL-deref in command paths
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - efi/capsule-loader: fix incorrect allocation size
  - perf report: Fix memory leaks around perf_tip()
  - nilfs2: fix underflow in second superblock position calculations
  - tcp: fix page frag corruption on page fault
  - soc: qcom: llcc: Handle a second device without data corruption
  - ocfs2: fix data corruption after conversion from inline format
  - s390/dasd: protect device queue against concurrent access
  - powerpc/powernv: Add a null pointer check in opal_event_init()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.3.0.0282
changelog:
  - !9086 v2  dhugetlb: use rcu lock to protect hpool
  - !8796  CVE-2023-52810
  - !8699  wifi: cfg80211: check A-MSDU format more carefully
  - !9123  staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - !9005  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !9113  IB/qib: Protect from buffer
  - !9119  PCI: aardvark: Fix kernel panic during PIO transfer
  - !9058  watchdog: Fix possible use-after-free by calling del_timer_sync()
  - !9053  soc: fsl: qbman: Use raw spinlock for cgr_lock
  - PCI: aardvark: Fix kernel panic during PIO transfer
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
  - PCI: aardvark: Don't rely on jiffies while holding spinlock
  - !9091  RDMA/cma: Fix rdma_resolve_route() memory leak
  - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
  - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
  - !9037  fix CVE-2021-47509
  - RDMA/cma: Fix rdma_resolve_route() memory leak
  - dhugetlb: use rcu lock to protect hpool
  - !8291 Fix CVE-2023-52836
  - !8574  net: ieee802154: fix null deref in parse dev addr
  - !9017  misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - !9045  ALSA: seq: Fix race of snd_seq_timer_open()
  - !9046  net: rds: fix memory leak in rds_recvmsg
  - !8632  phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - !8695  net: macb: fix use after free on rmmod
  - !4633 Add support for Hygon family 18h model 5h HD-Audio
  - !9057  CVE-2021-47261
  - !8637  dyndbg: fix old BUG_ON in >control parser
  - !8698  net: batman-adv: fix error handling
  - !8715  net/sched: act_skbmod: prevent kernel-infoleak
  - !8775  llc: verify mac len before reading mac header
  - watchdog: Fix possible use-after-free by calling del_timer_sync()
  - IB/mlx5: Fix initializing CQ fragments buffer
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9022  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - !8786  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - !8704  usb: fix various gadget panics on 10gbps cabling
  - !9013  net: encx24j600: check error in devm_regmap_init_encx24j600
  - net: rds: fix memory leak in rds_recvmsg
  - ALSA: seq: Fix race of snd_seq_timer_open()
  - !9036  IB/hfi1: Restore allocated resources on failed copyout
  - !4620 Some fixes for Hygon model 4h~6h processors
  - !4630 Add support for Hygon model 6h L3 PMU
  - ALSA: pcm: oss: Limit the period size to 16MB
  - ALSA: pcm: oss: Fix potential out-of-bounds shift
  - !8549  batman-adv: Avoid infinite loop trying to resize local TT
  - !8763  tipc: fix UAF in error path
  - IB/hfi1: Restore allocated resources on failed copyout
  - !8956  net: ti: fix UAF in tlan_remove_one
  - !8959  comedi: vmk80xx: fix bulk-buffer overflow
  - !8740  CVE-2024-36914
  - !8824  igb: Fix use-after-free error during reset
  - !8987  bna: ensure the copied buf is NUL terminated
  - !9026  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !8923  i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - !8961  nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - !8875  drm/vmwgfx: Fix invalid reads in fence signaled events
  - !8883  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - net: encx24j600: check error in devm_regmap_init_encx24j600
  - !8998  i2c: acpi: fix resource leak in reconfiguration device addition
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !8991  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - !8992  fix CVE-2024-36905
  - i2c: acpi: fix resource leak in reconfiguration device addition
  - !8868  ipv6: prevent NULL dereference in ip6_output()
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - !8737  ubifs: Set page uptodate in the correct place
  - !8668  phonet/pep: fix racy skb_queue_empty() use
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - bna: ensure the copied buf is NUL terminated
  - nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - comedi: vmk80xx: fix bulk-buffer overflow
  - net: ti: fix UAF in tlan_remove_one
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - ipv6: prevent NULL dereference in ip6_output()
  - igb: Fix use-after-free error during reset
  - fs/jfs: Add check for negative db_l2nbperpage
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - llc: verify mac len before reading mac header
  - tipc: fix UAF in error path
  - drm/amd/display: Skip on writeback when it's not applicable
  - ubifs: Set page uptodate in the correct place
  - net/sched: act_skbmod: prevent kernel-infoleak
  - usb: fix various gadget panics on 10gbps cabling
  - wifi: cfg80211: check A-MSDU format more carefully
  - net: batman-adv: fix error handling
  - net: macb: fix use after free on rmmod
  - phonet/pep: fix racy skb_queue_empty() use
  - dyndbg: fix old BUG_ON in >control parser
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - net: ieee802154: fix null deref in parse dev addr
  - batman-adv: Avoid infinite loop trying to resize local TT
  - locking/ww_mutex/test: Fix potential workqueue corruption
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.4.0.0283
changelog:
  - !9471  CVE-2021-47434
  - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
  - xhci: Fix command ring pointer corruption while aborting a command
  - !8935  wifi: nl80211: don't free NULL coalescing rule
  - !9444  CVE-2022-48737
  - !8493  rpmsg: virtio: Free driver_override when rpmsg_remove()
  - !8473  scsi: mpt3sas: Fix kernel panic during drive powercycle test
  - ASoC: ops: Fix bounds check for _sx controls
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
  - !9322  drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9366  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9392  drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - !9232  batman-adv: Avoid WARN_ON timing related checks
  - !9351  Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - !9393  net: lts v4.311 backport
  - !9286  mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - !9206 v2  sched: smart_grid: fix potential NULL pointer dereference
  - !9314  spi: Fix deadlock when adding SPI controllers on SPI buses
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
  - ipv6: fib6_rules: flush route cache when rule is changed
  - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - !8360 v2  loop: use lo->lo_disk for kobject_uevent
  - !9343  firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  - !9326  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9285  of: module: add buffer overflow check in of_modalias()
  - !9316  CVE-2022-48755
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - !9344  round lts patches
  - !8769  atl1c: Work around the DMA RX overflow issue
  - !9292  net: bridge: xmit: make sure we have at least eth header len bytes
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: mark racy access on sk->sk_rcvbuf
  - net l2tp: drop flow hash on forward
  - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9324 v2  Linux 4.19.312-313 LTS patches
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - udp: preserve the connected status if only UDP cmsg
  - vxlan: drop packets from invalid src-address
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
  - spi: fix kabi breakage in struct spi_controller
  - spi: Fix deadlock when adding SPI controllers on SPI buses
  - !9278  CVE-2021-47231
  - !8783 v2  arm64 mpam fix patch
  - !9270  inet_diag: fix kernel-infoleak for UDP sockets
  - !9140 v2  CVE-2024-36971
  - !8847  wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  - !9260 v3  ftrace: Fix possible use-after-free issue in ftrace_location()
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - of: module: add buffer overflow check in of_modalias()
  - !9061  iio: mma8452: Fix trigger reference couting
  - can: mcba_usb_start(): add missing urb->transfer_dma initialization
  - can: mcba_usb: fix memory leak in mcba_usb
  - inet_diag: fix kernel-infoleak for UDP sockets
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - !9227  kprobes: Fix possible use-after-free issue on kprobe registration
  - !9228  coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
  - !9225  can: sja1000: fix use after free in ems_pcmcia_add_card()
  - !8656  mm, slub: fix potential memoryleak in kmem_cache_open()
  - !8937  firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - !8691  Fix page corruption caused by racy check in __free_pages
  - batman-adv: Avoid WARN_ON timing related checks
  - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - can: sja1000: fix use after free in ems_pcmcia_add_card()
  - !9179  CVE-2021-47232
  - !9004  media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  - !8130 v2  CVE-2021-47493
  - !9006  media: tc358743: register v4l2 async device only after successful setup
  - !9144  serial: 8250_exar: Don't remove GPIO device on suspend
  - sched: smart_grid: fix potential NULL pointer dereference
  - can: j1939: fix Use-after-Free, hold skb ref while in use
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function
  - !8800  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !8798  hid: cp2112: Fix duplicate workqueue initialization
  - !8799  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - serial: 8250_exar: Don't remove GPIO device on suspend
  - net: fix kabi breakage in struct dst_ops
  - net: fix __dst_negative_advice() race
  - iio: mma8452: Fix trigger reference couting
  - media: tc358743: register v4l2 async device only after successful setup
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - wifi: nl80211: don't free NULL coalescing rule
  - wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - hid: cp2112: Fix duplicate workqueue initialization
  - arm64/mpam: Fix softlockup when reading mondata
  - arm64/mpam: Fix wrong seconds to jiffies conversion
  - arm64/mpam: change allocation mode from GFP_KERNEL to GFP_NOWAIT
  - mpam/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
  - mpam/resctrl: Clean up resctrl_group_rmdir_[ctrl/mon]()
  - mpam/resctrl: Clean up unused function parameter in mkdir path
  - mpam/resctrl: Fix a deadlock due to inaccurate reference
  - atl1c: Work around the DMA RX overflow issue
  - Fix page corruption caused by racy check in __free_pages
  - mm, slub: fix potential memoryleak in kmem_cache_open()
  - rpmsg: virtio: Free driver_override when rpmsg_remove()
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test
  - loop: use lo->lo_disk for kobject_uevent
  - jbd2: export jbd2_journal_[grab|put]_journal_head
  - ocfs2: fix a deadlock when commit trans
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.1.0.0284
changelog:
  - !9629  stm class: Fix a double free in stm_register_device()
  - !9646  phonet: fix rtm_phonet_notify() skb allocation
  - !9628  m68k: Fix spinlock race in kernel thread creation
  - !9623 v2  net/nfc/rawsock.c: fix a permission check bug
  - !9648 backport two patches from 5.10 to fix some bugs for GuestOS
  - !9617  mac80211: track only QoS data frames for admission control
  - !9637  ipv6: sr: fix invalid unregister error path
  - !9607  enic: Validate length of nl attributes in enic_set_vf_port
  - !9606  drm/nouveau: fix off by one in BIOS boundary checking
  - !9605  scsi: bfa: Ensure the copied buf is NUL terminated
  - irqchip: gic-v3: Collection table support muti pages
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids
  - phonet: fix rtm_phonet_notify() skb allocation
  - ipv6: sr: fix invalid unregister error path
  - stm class: Fix a double free in stm_register_device()
  - m68k: Fix spinlock race in kernel thread creation
  - !9076  RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - net/nfc/rawsock.c: fix a permission check bug
  - mac80211: track only QoS data frames for admission control
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau: fix off by one in BIOS boundary checking
  - !9600  CVE-2024-38597
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - !9409  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9452  jffs2: prevent xattr node from overflowing the eraseblock
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - !8163 v2  mmc: sdio: fix possible resource leaks in some error paths
  - !9535  igbvf: fix double free in `igbvf_probe`
  - !9590  s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9584  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9537  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9585  net/mlx5e: Avoid field-overflowing memcpy()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - net/mlx5e: Avoid field-overflowing memcpy()
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9534  rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
  - !9419  mm/migrate: set swap entry values of THP tail pages properly.
  - !9560  net: systemport: Add global locking for descriptor lifecycle
  - !9526  media: lgdt3306a: Add a check against null-pointer-def
  - !9539  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - net: systemport: Add global locking for descriptor lifecycle
  - !9340  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9330  ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  - !9382  serial: max3100: Update uart_driver_registered on driver removal
  - !9503 v2  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9464  quota: Fix rcu annotations of inode dquot pointers
  - !9530 v2  Backport LTS patches
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9435  fix CVE-2024-38621
  - igbvf: fix double free in `igbvf_probe`
  - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
  - !9381  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9497  netrom: fix possible dead-lock in nr_rt_ioctl()
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9505  CVE-2024-38587
  - !9473  um: Add winch to winch_handlers before registering winch IRQ
  - !9407  drm/arm/malidp: fix a possible null pointer dereference
  - !9400  Fix CVE-2024-31076
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - !9439  CVE-2022-48715
  - !9133  net: ethernet: fix potential use-after-free in ec_bhf_remove
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - !9265  ring-buffer: Fix a race between readers and resize checks
  - !9390  NFS: Fix an off by one in root_nfs_cat()
  - um: Add winch to winch_handlers before registering winch IRQ
  - quota: Fix rcu annotations of inode dquot pointers
  - fs/quota: erase unused but set variable warning
  - jffs2: prevent xattr node from overflowing the eraseblock
  - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - mm/migrate: set swap entry values of THP tail pages properly.
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - drm/arm/malidp: fix a possible null pointer dereference
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - NFS: Fix an off by one in root_nfs_cat()
  - serial: max3100: Update uart_driver_registered on driver removal
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  - ring-buffer: Fix a race between readers and resize checks
  - net: ethernet: fix potential use-after-free in ec_bhf_remove
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - mmc: sdio: fix possible resource leaks in some error paths


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.3.0.0285
changelog:
  - !9803 v2  x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
  - x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
  - !9797  sch_cake: do not call cake_destroy() from cake_init()
  - sch_cake: do not call cake_destroy() from cake_init()
  - !9786  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
  - !9777  CVE-2024-23848
  - media: cec: cec-api: add locking in cec_release()
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  - !9765  i40e: Fix queues reservation for XDP
  - !9760  CVE-2024-26816
  - !9754  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9367 v2  net: qcom/emac: fix UAF in emac_remove
  - !9512  drm: vc4: Fix possible null pointer dereference
  - !9755  wifi: ar5523: enable proper endpoint verification
  - i40e: Fix queues reservation for XDP
  - !9744  Fix CVE-2024-36949
  - !9741  scsi: qedf: Ensure the copied buf is NUL terminated
  - !9727  net: amd-xgbe: Fix skb data length underflow
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - x86, relocs: Ignore relocations in .notes section
  - !9743  USB: core: Fix hang in usb_kill_urb by adding memory barriers
  - wifi: ar5523: enable proper endpoint verification
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9674  ax25: Fix reference count leak issue of net_device
  - !9729  seg6: fix the iif in the IPv6 socket control block
  - !9725 v2  net: Fix CVE-2022-48757
  - !9737  net/9p: fix uninit-value in p9_client_rpc()
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdkfd: Rework kfd_locked handling
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/9p: fix uninit-value in p9_client_rpc()
  - !9710  CVE-2022-48738
  - !9568  media: mxl111sf: change mutex_init() location
  - !9570  net: ieee802154: ca8210: Stop leaking skb's
  - seg6: fix the iif in the IPv6 socket control block
  - !9700 v2  crypto: bcm - Fix pointer arithmetic
  - !9684  greybus: lights: check return of get_channel_from_mode
  - net: amd-xgbe: Fix skb data length underflow
  - !9666  ftrace: Fix rcu warn in ftrace_location()
  - net: fix kabi breakage in struct packet_type
  - net: fix information leakage in /proc/net/ptype
  - !9724  Fix CVE-2024-35915
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_rx_work
  - nfc: nci: Fix kcov check in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - !9658  KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
  - !9698  Fix CVE-2021-47270
  - !9699  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9550  scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
  - !9707  nilfs2: fix use-after-free of timer for log writer thread
  - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
  - nilfs2: fix use-after-free of timer for log writer thread
  - !9655  nfc: fix segfault in nfc_genl_dump_devices_done
  - !9654  mac80211: validate extended element ID is present
  - !9653  ecryptfs: Fix buffer size for tag 66 packet
  - !9652  ALSA: timer: Set lower bound of start tick time
  - !9697 v3  Fix CVE-2024-38567
  - !9633  CVE-2024-38582
  - !9692  netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - crypto: bcm - Fix pointer arithmetic
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
  - usb: fix various gadgets null ptr deref on 10gbps cabling.
  - wifi: carl9170: add a proper sanity check for endpoints
  - USB: core: Add routines for endpoint checks in old drivers
  - !9597  ASoC: max9759: fix underflow in speaker_gain_control_put()
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !9626  fix uaf when proc_cpuset_show
  - !9660  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - greybus: lights: check return of get_channel_from_mode
  - ax25: Fix reference count leak issue of net_device
  - ftrace: Fix rcu warn in ftrace_location()
  - !9553  CVE-2024-37356
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
  - nfc: fix segfault in nfc_genl_dump_devices_done
  - mac80211: validate extended element ID is present
  - ecryptfs: Fix buffer size for tag 66 packet
  - ALSA: timer: Set lower bound of start tick time
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - cgroup: fix uaf when proc_cpuset_show
  - ASoC: max9759: fix underflow in speaker_gain_control_put()
  - net: ieee802154: ca8210: Stop leaking skb's
  - media: mxl111sf: change mutex_init() location
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
  - drm: vc4: Fix possible null pointer dereference
  - net: qcom/emac: fix UAF in emac_remove


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.4.0.0286
changelog:
  - !9925  ocfs2: fix races between hole punching and AIO+DIO
  - !9874  crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - !9830  mmc: davinci: Don't strip remove function when driver is builtin
  - !9870  cifs: Fix deadlock in cifs_writepages during reconnect
  - !9895  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ocfs2: fix races between hole punching and AIO+DIO
  - !9891  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9856  btrfs: fix memory ordering between normal and ordered work functions
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9492  netlabel: fix out-of-bounds memory accesses
  - !9868  usb: musb: tusb6010: check return value after calling platform_get_resource()
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - usb: musb: tusb6010: check return value after calling platform_get_resource()
  - !9858  khugepaged: fix null-pointer dereference due to race
  - !9819  kdb: Fix buffer overflow during tab-complete
  - khugepaged: fix null-pointer dereference due to race
  - btrfs: fix memory ordering between normal and ordered work functions
  - !9842  net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
  - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
  - mmc: davinci: Don't strip remove function when driver is builtin
  - kdb: Fix buffer overflow during tab-complete
  - netlabel: fix out-of-bounds memory accesses


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.5.0.0287
changelog:
  - !10125  nvme-rdma: fix possible use-after-free in transport error_recovery work
  - !10112  ftrace: Fix use-after-free for dynamic ftrace_ops
  - !10276  net: ieee802154: at86rf230: Stop leaking skb's
  - net: ieee802154: at86rf230: Stop leaking skb's
  - !9917  powerpc/pseries: Enforce hcall result buffer validity and size
  - !10240  CVE-2024-41007
  - !10251  sctp: fix kernel-infoleak for SCTP sockets
  - !10241  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - sctp: fix kernel-infoleak for SCTP sockets
  - !10229  staging: gdm724x: fix use after free in gdm_lte_rx()
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - net: tcp: fix unexcepted socket die when snd_wnd is 0
  - tcp: refactor tcp_retransmit_timer()
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit
  - staging: gdm724x: fix use after free in gdm_lte_rx()
  - !10137  NFSD: Fix ia_size underflow
  - !10183 v3  ima: Fix use-after-free on a dentry's dname.name
  - !10121  usb: f_fs: Fix use-after-free for epfile
  - !10016  drm/exynos/vidi: fix memory leak in .get_modes()
  - !10211  fix CVE-2022-48865
  - !10206  gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
  - tipc: fix kernel panic when enabling bearer
  - tipc: fix NULL pointer dereference in tipc_disc_rcv()
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
  - !10186  vsock: remove vsock from connected table when connect is interrupted by a signal
  - !10190  Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  - vsock: remove vsock from connected table when connect is interrupted by a signal
  - !10141  vt_ioctl: fix array_index_nospec in vt_setactivate
  - ima: Fix use-after-free on a dentry's dname.name
  - !10152  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !10026  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10147  CVE-2022-48836
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - Input: aiptek - properly check endpoint type
  - Input: aiptek - fix endpoint sanity check
  - vt_ioctl: fix array_index_nospec in vt_setactivate
  - !10095  CVE-2024-40968
  - !10130  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - NFSD: Fix ia_size underflow
  - !10123  CVE-2022-48838
  - !10122  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10081  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - !10092  usb: host: ohci-tmio: check return value after calling platform_get_resource()
  - nvme-rdma: fix possible use-after-free in transport error_recovery work
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - usb: f_fs: Fix use-after-free for epfile
  - !10094  net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - ftrace: Fix use-after-free for dynamic ftrace_ops
  - !10054  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - MIPS: Octeon: Add PCIe link status check
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - usb: host: ohci-tmio: check return value after calling platform_get_resource()
  - !10033  ipv6: prevent possible NULL dereference in rt6_probe()
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !9996  netpoll: Fix race condition in netpoll_owner_active
  - !9948  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - netpoll: Fix race condition in netpoll_owner_active
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - powerpc/pseries: Enforce hcall result buffer validity and size


author: chenyi <chenyi211@huawei.com> - 4.19.90-2408.1.0.0288
changelog:
  - !10327  NFC: port100: fix use-after-free in port100_send_complete
  - !10325  kobject: Fix global-out-of-bounds in kobject_action_type()
  - !10337  drm/radeon: fix UBSAN warning in kv_dpm.c
  - !10368 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10227  MIPS: smp: fill in sibling and core maps earlier
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - !10324  BMA: Fix iBMA bug and change
  - NFC: port100: fix use-after-free in port100_send_complete
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !10315  jfs: xattr: fix buffer overflow for invalid xattr
  - BMA/cdev_veth_drv: Fix softlockup problem
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Fix soft interrupt loops and change the version number
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !10173  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - !10249  fbdev: savage: Handle err return when savagefb_check_var failed
  - !10306  mISDN: Fix memory leak in dsp_pipeline_build()
  - jfs: xattr: fix buffer overflow for invalid xattr
  - !10198  scsi: qedi: Fix crash while reading debugfs attribute
  - !10310  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10307  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10296  Backport dvb-usb bugfix
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - mISDN: Fix memory leak in dsp_pipeline_build()
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - USB: move snd_usb_pipe_sanity_check into the USB core
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - MIPS: smp: fill in sibling and core maps earlier
  - scsi: qedi: Fix crash while reading debugfs attribute
  - netrom: Fix a memory leak in nr_heartbeat_expiry()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2408.2.0.0289
changelog:
  - !10629 v2  hfsplus: fix uninit-value in copy_name
  - !10723  net/iucv: Avoid explicit cpumask var allocation on stack
  - !10646  net: dsa: mv88e6xxx: Correct check for empty list
  - !10609  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10608  CVE-2024-41044
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - !10693  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - !10571  ila: block BH in ila_output()
  - !10593  fix CVE-2024-41046
  - !10521  xfs: add bounds checking to xlog_recover_process_data
  - !10597  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - !10562  nilfs2: add missing check for inode numbers on directory entries
  - !10706  jfs: don't walk off the end of ealist
  - !10699  drm/amd/display: Skip finding free audio for unknown engine_id
  - !10672  inet_diag: Initialize pad field in struct inet_diag_req_v2
  - !10684  ocfs2: fix DIO failure due to insufficient transaction credits
  - !10565  gpio: davinci: Validate the obtained number of IRQs
  - !10389  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - jfs: don't walk off the end of ealist
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - !10641  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10601  IB/core: Implement a limit on UMAD receive List
  - net: dsa: mv88e6xxx: Correct check for empty list
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - hfsplus: fix uninit-value in copy_name
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - ppp: reject claimed-as-LCP but actually malformed packets
  - ppp: ensure minimum packet size in ppp_write()
  - IB/core: Implement a limit on UMAD receive List
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - net: ethernet: lantiq_etop: fix double free in detach
  - net: lantiq_etop: add blank line after declaration
  - !10320  thermal: Fix NULL pointer dereferences in of_thermal_ functions
  - !10529  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - ila: block BH in ila_output()
  - gpio: davinci: Validate the obtained number of IRQs
  - nilfs2: add missing check for inode numbers on directory entries
  - !10471  ALSA: emux: improve patch ioctl data validation
  - !10479  jffs2: Fix potential illegal address access in jffs2_free_inode
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - xfs: add bounds checking to xlog_recover_process_data
  - !10386  filelock: Fix fcntl/close race recovery compat path
  - !10485  fix CVE-2024-42086
  - !10492  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10400  Fix CVE-2024-41069
  - !10270  HID: core: remove unnecessary WARN_ON() in implement()
  - !10472 v2  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - !10359 v2  PCI/ROM: Fix PCI ROM header check bug
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - ALSA: emux: improve patch ioctl data validation
  - !10341  net/sched: initialize noop_qdisc owner
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Fix references to freed memory
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - filelock: Fix fcntl/close race recovery compat path
  - PCI/ROM: Fix PCI ROM header check bug
  - net/sched: initialize noop_qdisc owner
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions
  - HID: core: remove unnecessary WARN_ON() in implement()


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


