# changelog

author: lunankun <lunankun@huawei.com> - 9.11.21-2
changelog:
  - Type:CVE
  - ID:CVE-2020-8622CVE-2020-8623 CVE-2020-8624
  - SUG:NA
  - DESC:fix CVE-2020-8622 CVE-2020-8623 CVE-2020-8624


author: gaihuiying <gaihuiying1@huawei.com> - 9.11.21-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output unexpected information when install bind-sdb or bind-sdb-chroot


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: openEuler Buildteam <buildteam@openeuler.org> - 0.26-19
changelog:
  - Type:cves
  - ID:CVE-2019-13109
  - SUG:NA
  - DESC:fix CVE-2019-13109
         fix ICC profile in PNG images


author: jiangpengf<jiangpengfei9@huawei.com> - 1.11.1-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix del-iface doesn't delete the tap interface in the host problem


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:restart
  - DESC:directly copy kata binary files instead of building them


author: yangfeiyu<yangfeiyu2@huawei.com> - 1.11.1-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert the kata-containers.spec to still build kata-containers components into one package


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2004.1.0.0037
changelog:
  - net: hns3: update hns3 version to 1.9.37.8
  - net: hns3: optimize FD tuple inspect
  - net: hns3: fix unsupported config for RSS
  - net: hns3: disable auto-negotiation off with 1000M setting in ethtool
  - net: hns3: update VF mac list configuration as PF
  - net: hns3: modify magic number in hclge_dbg_dump_ncl_config
  - net: hns3: do mac configuration instead of rollback when malloc mac node fail
  - net: hns3: update the device mac address asynchronously
  - net: hns3: add one parameter for function hns3_nic_maybe_stop_tx()
  - net: hns3: delete unnecessary logs after kzalloc fails
  - net: hns3: fix some coding style found by codereview
  - net: hns3: use uniform format "failed to xxx" to print fail message
  - net: hns3: add debug information for flow table when failed
  - net: hns3: modify hclge_restore_fd_entries()'s return type to void
  - net: hns3: splice two "if" logic as one
  - net: hns3: clean up some coding style issue
  - net: hns3: modify definition location of struct hclge_mac_ethertype_idx_rd_cmd
  - net: hns3: modify comment of macro HNAE3_MIN_VECTOR_NUM
  - net: hns3: modify one macro into unsigned type
  - net: hns3: delete unused macro HCLGEVF_MPF_ENBALE
  - net: hns3: modify definition location of struct hclge_vf_vlan_cfg
  - net: hns3: remove unnecessary 'ret' variable in hclge_misc_err_recovery()
  - net: hns3: remove unnecessary register info in hclge_reset_err_handle()
  - net: hns3: misc cleanup for VF reset
  - net: hns3: merge mac state HCLGE_MAC_TO_DEL and HCLGE_MAC_DEL_FAIL
  - net: hns3: update hns3 version to 1.9.37.7
  - scsi: hisi_sas: do not reset the timer to wait for phyup when phy already up
  - net: hns3: add suspend/resume function for hns3 driver
  - btrfs: tree-checker: Enhance chunk checker to validate chunk profile
  - net/hinic: fix the problem that out-of-bounds access
  - scsi: sg: fix memory leak in sg_build_indirect
  - scsi: sg: add sg_remove_request in sg_common_write
  - btrfs: Don't submit any btree write bio if the fs has errors
  - btrfs: extent_io: Handle errors better in extent_write_full_page()
  - net/hinic: Delete useless header files
  - powerpc/powernv/idle: Restore AMR/UAMOR/AMOR after idle
  - media: xirlink_cit: add missing descriptor sanity checks
  - Input: add safety guards to input_set_keycode()
  - f2fs: fix to avoid memory leakage in f2fs_listxattr
  - media: stv06xx: add missing descriptor sanity checks
  - media: ov519: add missing endpoint sanity checks
  - btrfs: tree-checker: Verify inode item
  - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
  - net: hns3: update hns3 version to 1.9.37.6
  - net: hns3: ignore the send mailbox failure by VF is unalive
  - net: hns3: update hns3 version to 1.9.37.5
  - net: hns3: fix "tc qdisc del" failed issue
  - net: hns3: rename two functions from periodical to periodic
  - net: hns3: modify some print messages for cleanup and keep style consistent
  - net: hns3: add some blank lines for cleanup
  - net: hns3: sync some code from linux mainline
  - net: hns3: fix mailbox send to VF failed issue
  - net: hns3: disable phy loopback setting in hclge_mac_start_phy
  - net: hns3: delete some useless code
  - net: hns3: remove the limitation of MAC address duplicate configuration
  - net: hns3: delete the unused struct hns3_link_mode_mapping
  - net: hns3: rename one parameter in hclge_add_fd_entry_by_arfs()
  - net: hns3: modify the location of macro HCLGE_LINK_STATUS_MS definition
  - net: hns3: modify some unsuitable parameter type of RSS
  - net: hns3: move some definition location
  - net: hns3: add judgement for hclgevf_update_port_base_vlan_info()
  - net: hns3: check null pointer in function hclge_fd_config_rule()
  - net: hns3: optimize deletion of the flow direction table
  - net: hns3: fix a ipv6 address copy problem in hclge_fd_get_flow_tuples()
  - net: hns3: fix VF bandwidth does not take effect in some case
  - net: hns3: synchronize some print relating to reset issue
  - net: hns3: delete unnecessary 5s delay judgement in hclgevf_reset_event()
  - net: hns3: delete unnecessary reset handling judgement in hclgevf_reset_tqp()
  - net: hns3: delete unnecessary judgement in hns3_get_regs()
  - net: hns3: delete one variable in hclge_get_sset_count() for optimization
  - net: hns3: optimize return process for phy loop back
  - net: hns3: fix "mac exist" problem
  - net: hns3: add one printing information in hnae3_unregister_client() function
  - slcan: Don't transmit uninitialized stack data in padding
  - mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  - livepatch/core: fix kabi for klp_rel_state
  - livepatch/core: support jump_label
  - arm64: entry: SP Alignment Fault doesn't write to FAR_EL1
  - arm64: mark (__)cpus_have_const_cap as __always_inline
  - arm64/module: revert to unsigned interpretation of ABS16/32 relocations
  - arm64/module: deal with ambiguity in PRELxx relocation ranges
  - i2c: designware: Add ACPI HID for Hisilicon Hip08-Lite I2C controller
  - ACPI / APD: Add clock frequency for Hisilicon Hip08-Lite I2C controller
  - qm: fix packet loss for acc
  - net/hinic: Solve the problem that 1822 NIC reports 5d0 error
  - net: hns3: Rectification of driver code review
  - net: hns3: update hns3 version to 1.9.37.4
  - net: hns3: additional fix for fraglist handling
  - net: hns3: fix for fraglist skb headlen not handling correctly
  - net: hns3: update hns3 version to 1.9.37.3
  - sec: modify driver to adapt dm-crypt
  - qm: reinforce reset failure scene
  - zip: fix decompress a empty file
  - hpre: dfx for IO operation and delay
  - RDMA/hns: optimize mtr management and fix mtr addressing bug
  - RDMA/hns: fix bug of accessing null pointer
  - sec: Overall optimization of sec code
  - qm: optimize the maximum number of VF and delete invalid addr
  - qm: optimize set hw_reset flag logic for user
  - qm: fixup the problem of wrong judgement of used parameter
  - qm: Move all the same logic functions of hisilicon crypto to qm
  - drivers : localbus cleancode
  - drivers : sysctl cleancode
  - drivers : sfc cleancode
  - kretprobe: check re-registration of the same kretprobe earlier
  - vhost: Check docket sk_family instead of call getname
  - btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
  - block: fix possible memory leak in 'blk_prepare_release_queue'
  - Revert "dm-crypt: Add IV generation templates"
  - Revert "dm-crypt: modify dm-crypt to rely on IV generation templates"


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2005.1.0.0038
changelog:
  - perf: Make perf able to build with latest libbfd
  - nbd: use blk_mq_queue_tag_inflight_iter()
  - blk-mq: use blk_mq_queue_tag_inflight_iter() in debugfs


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2005.2.0.0039
changelog:
  - signal: fix kabi changes in struct task_struct
  - signal: Extend exec_id to 64bits
  - livepatch/core: Fix compile error when CONFIG_JUMP_LABEL closed
  - net/hinic: Adjust AEQ interrupt retransmission settings
  - net/hinic: Number of VF queues cleared during initialization
  - net/hinic: Reduce VF EQ queue depth in SDI mode
  - net/hinic: Disable the CSUM offload capability of TUNNEL in SDI mode
  - net/hinic: VF does not display firmware statistics
  - net/hinic: SDI bare metal VF supports dynamic queue
  - net/hinic: Support doorbell BAR size of 256K in SDI mode
  - net/hinic: Supports variable SDI master host ppf_id
  - net/hinic: Optimize SDI interrupt aggregation parameters
  - netlabel: cope with NULL catmap
  - netprio_cgroup: Fix unlimited memory leak of v2 cgroups
  - net: hns3: update hns3 version to 1.9.38.0
  - net: hns3: solve the unlock 2 times when rocee init fault
  - scsi: sg: add sg_remove_request in sg_write
  - KVM: SVM: Fix potential memory leak in svm_cpu_init()
  - ptp: free ptp device pin descriptors properly
  - spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
  - drivers sfc: Fix cross page write error
  - drivers sysctl: add read and write interface of pmbus
  - net/hinic: Fix TX timeout under ipip tunnel packet
  - xsk: Add missing check on user supplied headroom size
  - fs/namespace.c: fix mountpoint reference counter race
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary
  - block, bfq: fix use-after-free in bfq_idle_slice_timer_body
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  - scsi: mptfusion: Fix double fetch bug in ioctl
  - mt76: fix array overflow on receiving too many fragments for a packet
  - net: hns3: change the order of reinitializing RoCE and VF during reset
  - net: hns3: update hns3 version to 1.9.37.9
  - Revert "scsi: fix failing unload of a LLDD module"
  - s390/mm: fix page table upgrade vs 2ndary address mode accesses
  - pcie_cae support getting chipnums of this system
  - net: hns3: remove the unnecessary ccflags


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2007.2.0.0041
changelog:
  - mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo
  - kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
  - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
  - scsi: qedf: remove memset/memcpy to nfunc and use func instead
  - ext4: Send ext4_handle_error message after set sb->s_flags
  - tcp: refine rule to allow EPOLLOUT generation under mem pressure
  - netfilter: nf_tables: fix flowtable list del corruption
  - netfilter: nf_tables: store transaction list locally while requesting module
  - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
  - netfilter: nft_tunnel: fix null-attribute check
  - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
  - netfilter: fix a use-after-free in mtype_destroy()
  - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment
  - mm/huge_memory.c: make __thp_get_unmapped_area static
  - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
  - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid
  - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment
  - iommu: Remove device link to group on failure
  - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
  - netfilter: conntrack: dccp, sctp: handle null timeout argument
  - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
  - tty: always relink the port
  - tty: link tty and port before configuring it as console
  - chardev: Avoid potential use-after-free in 'chrdev_open()'
  - net: hns3: update hns3 version to 1.9.38.5
  - net: hns3: fix the number of queues
  - net: hns3: fixes a promoiscuous mode
  - net: hns3: fix driver bug
  - net: hns3: fix for VLAN config when reset
  - net: hns3: fix bug when calculating the
  - net: hns3: fix speed unknown issue in bond
  - net: hns3: fix a missing return in hclge_set_vlan_filter()
  - net: hns3: update hns3 version to 1.9.38.3
  - net: hns3: remove redundant codes entered by mistake
  - net/hinic: Fix out-of-bounds when receiving mbox messages
  - RDMA/hns: Modify the code based on the review comments
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
  - config: set CONFIG_CAN_DEBUG_DEVICES for arm64 hulk_defconfig
  - config: add CONFIG_CAN_J1939 in defconfigs
  - can: j1939: fix address claim code example
  - can: j1939: j1939_sk_bind(): take priv after lock is held
  - can: j1939: warn if resources are still linked on destroy
  - can: j1939: j1939_can_recv(): add priv refcounting
  - can: j1939: transport: j1939_cancel_active_session(): use hrtimer_try_to_cancel() instead of hrtimer_cancel()
  - can: j1939: make sure socket is held as long as session exists
  - can: j1939: transport: make sure the aborted session will be deactivated only once
  - can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
  - can: j1939: main: j1939_ndev_to_priv(): avoid crash if can_ml_priv is NULL
  - can: j1939: move j1939_priv_put() into sk_destruct callback
  - can: af_can: export can_sock_destruct()
  - can: j1939: transport: j1939_xtp_rx_eoma_one(): Add sanity check for correct total message size
  - can: j1939: transport: j1939_session_fresh_new(): make sure EOMA is send with the total message size set
  - can: j1939: fix memory leak if filters was set
  - can: j1939: fix resource leak of skb on error return paths
  - can: add support of SAE J1939 protocol
  - can: af_can: use spin_lock_bh() for &net->can.can_rcvlists_lock
  - can: af_can: remove NULL-ptr checks from users of can_dev_rcv_lists_find()
  - can: make use of preallocated can_ml_priv for per device struct can_dev_rcv_lists
  - can: af_can: can_pernet_exit(): no need to iterate over and cleanup registered CAN devices
  - can: af_can: can_rx_register(): use max() instead of open coding it
  - can: af_can: give variable holding the CAN receiver and the receiver list a sensible name
  - can: af_can: rename find_dev_rcv_lists() to can_dev_rcv_lists_find()
  - can: af_can: rename find_rcv_list() to can_rcv_list_find()
  - can: proc: give variable holding the CAN per device receive lists a sensible name
  - can: af_can: give variable holding the CAN per device receive lists a sensible name
  - can: proc: give variables holding CAN statistics a sensible name
  - can: af_can: give variables holding CAN statistics a sensible name
  - can: af_can: can_pernet_init(): Use preferred style kzalloc(sizeof()) usage
  - can: extend sockaddr_can to include j1939 members
  - can: add socket type for CAN_J1939
  - can: introduce CAN_REQUIRED_SIZE macro
  - can: introduce CAN midlayer private and allocate it automatically
  - net: hns3: update hns3 version to 1.9.38.3
  - net: hns3: clean code for security
  - net: hns3: modify an incorrect type in
  - net: hns3: check queue id range before
  - net: hns3: fix error handling for desc filling
  - net: hns3: fix for not calculating tx BD send size correctly
  - net: hns3: fix for not unmapping tx buffer correctly
  - net: hns3: fix desc filling bug when skb is expanded or lineared
  - net: hns3: drop the WQ_MEM_RECLAIM flag when allocating wq
  - net: hns3: optimize the parameter of hclge_update_port_base_vlan_cfg and ignore the send mailbox failure when VF is unalive
  - net: hns3: use netif_tx_disable to stop the transmit queue
  - net: hns3: add support of dumping mac reg in debugfs
  - net: hns3: fix a fake tx timeout issue
  - net: hns3: fix use-after-free when doing self test
  - net: hns3: add a log for switching VLAN filter state
  - net: hns3: fix problem of missing updating port information
  - net: hns3: add vlan list lock to protect vlan list and fix duplicate node in vlan list
  - net: hns3: fix bug for port base vlan configuration
  - net: hns3: skip periodic service task if reset failed
  - net: hns3: check reset pending after FLR prepare
  - net: hns3: fix for mishandle of asserting VF reset fail
  - net: hns3: fix for missing uninit debugfs when unload driver
  - net: hns3: unify format of failed print information for clean up
  - net: hns3: modify location of one print information
  - net: hns3: fix return value error when query mac link status fail
  - net: hns3: remove unnecessary mac enable in app loopback
  - net: hns3: remove some useless code
  - net: hns3: fix an inappropriate type assignment
  - net: hns3: update hns3 version to 1.9.38.2
  - net: hns3: fix reset bug
  - sdei_watchdog: fix compile error when CONFIG_HARDLOCKUP_DETECTOR is not set
  - net/hinic: Add support for 128 qps
  - net/hinic: Add support for X86 Arch
  - fs/filescontrol: add a switch to enable / disable accounting of open fds
  - usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking
  - signal: Export tracepoint symbol signal_generate
  - x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS.
  - x86/speculation: Add support for STIBP always-on preferred mode
  - x86/speculation: Change misspelled STIPB to STIBP
  - x86/speculation: Prevent rogue cross-process SSBD shutdown
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
  - vfio-pci: Fault mmaps to enable vma tracking
  - vfio/type1: Support faulting PFNMAP vmas
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
  - vfio_pci: Enable memory accesses before calling pci_map_rom
  - net/hinic: Fix copying out of bounds when using tools to get statistics
  - uacce: fix problem of parameter check
  - net: hns3: update hns3 version to 1.9.38.1
  - net: hns3: add device name valid check
  - ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers
  - Revert "ext4, jbd2: switch to use completion variable instead of JBD2_REC_ERR"
  - x86/speculation: Add Ivy Bridge to affected list
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation
  - x86/cpu: Add 'table' argument to cpu_matches()
  - x86/cpu: Add a steppings field to struct x86_cpu_id
  - ext4: stop overwrite the errcode in ext4_setup_super
  - panic/printk: fix zap_lock
  - vt: keyboard: avoid signed integer overflow in k_ascii
  - ext4: Fix block bitmap corruption when io error
  - mm: Fix mremap not considering huge pmd devmap
  - net-sysfs: Call dev_hold always in rx_queue_add_kobject
  - net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  - net-sysfs: fix netdev_queue_add_kobject() breakage
  - net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
  - SUNRPC: Fix xprt->timer use-after-free
  - printk/panic: Avoid deadlock in printk()
  - block: Fix use-after-free in blkdev_get()
  - ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function
  - media: go7007: fix a miss of snd_card_free
  - vt: fix unicode console freeing with a common interface
  - vt: don't use kmalloc() for the unicode screen buffer
  - scsi: Fix kabi change due to add offline_already member in struct scsi_device
  - scsi: core: avoid repetitive logging of device offline messages
  - hfs: fix null-ptr-deref in hfs_find_init()
  - ext4, jbd2: switch to use completion variable instead of JBD2_REC_ERR
  - jbd2: clean __jbd2_journal_abort_hard() and __journal_abort_soft()
  - jbd2: make sure ESHUTDOWN to be recorded in the journal superblock
  - vt: vt_ioctl: fix use-after-free in vt_in_use()
  - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
  - vt: vt_ioctl: remove unnecessary console allocation checks
  - vt: switch vt_dont_switch to bool
  - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines
  - vt: selection, introduce vc_is_sel
  - ALSA: proc: Avoid possible leaks of snd_info_entry objects
  - net/hinic: update hinic version to 2.3.2.14
  - net/hinic: Fix memleak when create_singlethread_workqueue() is failed
  - net/hinic: Fix VF driver loading failure during the firmware hot upgrade process
  - net/hinic: Fix data inconsistency in the forwarding scenario when DCB is turned on
  - net/hinic: Fix reboot -f stuck for a long time
  - net/hinic: Add tx timeout dfx information
  - net/hinic: Add a lock when registering the driver's global netdevice notifier
  - net/hinic: Fix VF has a low probability of network failure on the virtual machine
  - net/hinic: Fix the firmware compatibility bug in the MAC reuse scenario
  - irqchip/gic-v3-its: Probe ITS page size for all GITS_BASERn registers
  - selinux: properly handle multiple messages in selinux_netlink_send()
  - media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
  - arm64/mpam: Supplement err tips in info/last_cmd_status
  - arm64/mpam: Fix unreset resources when mkdir ctrl group or umount resctrl
  - MPAM / ACPI: Refactoring MPAM init process and set MPAM ACPI as entrance
  - ACPI 6.x: Add definitions for MPAM table
  - ACPI / PPTT: cacheinfo: Label caches based on fw_token
  - ACPI / PPTT: Filthy hack to find _a_ backwards reference in the PPTT [ROTTEN]
  - ACPI / PPTT: Add helper to validate cache nodes from an offset [dead]
  - ACPI / processor: Add helper to convert acpi_id to a phys_cpuid
  - ext4: report error to userspace by netlink
  - pcie_cae add judgement about chip type
  - Enable trust mode control for SR-IOV ports
  - Added ethtool_ops interface to query optical module information
  - Revert "consolemap: Fix a memory leaking bug in drivers/tty/vt/consolemap.c"
  - ext4: fix support for inode sizes > 1024 bytes
  - ext4: validate the debug_want_extra_isize mount option at parse time
  - sunrpc: clean up properly in gss_mech_unregister()
  - sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations.
  - sunrpc: check that domain table is empty at module unload.
  - arm64: smp: Increase secondary CPU boot timeout value
  - KVM: arm64: Only flush VM for the first and the last vcpu
  - media: remove videobuf-core.c
  - ext4: mark block bitmap corrupted when found instead of BUGON
  - bcache: fix potential deadlock problem in btree_gc_coalesce
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
  - USB: gadget: fix illegal array access in binding with UDC


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2008.3.0.0042
changelog:
  - x86/mm: split vmalloc_sync_all()
  - kexec/uefi: copy secure_boot flag in boot params across kexec reboot
  - x86/config: enable CONFIG_HINIC by default
  - cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
  - Revert "cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()"
  - cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
  - ext4: Correctly restore system zone info when remount fails
  - ext4: Handle add_system_zone() failure in ext4_setup_system_zone()
  - ext4: Fold ext4_data_block_valid_rcu() into the caller
  - ext4: Check journal inode extents more carefully
  - ext4: Don't allow overlapping system zones
  - ext4: Handle error of ext4_setup_system_zone() on remount
  - nfs: set invalid blocks after NFSv4 writes
  - cgroup1: don't call release_agent when it is ""
  - cgroup-v1: cgroup_pidlist_next should update position index
  - cgroup: Iterate tasks that did not finish do_exit()
  - cgroup: cgroup_procs_next should increase position index
  - mm/vmscan.c: don't round up scan size for online memory cgroup
  - cgroup: saner refcounting for cgroup_root
  - cgroup: Prevent double killing of css when enabling threaded cgroup
  - mm: memcg/slab: fix memory leak at non-root kmem_cache destroy
  - mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock
  - mm/memcg: fix refcount error while moving and swapping
  - memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event
  - mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps()
  - random32: move the pseudo-random 32-bit definitions to prandom.h
  - random32: remove net_rand_state from the latent entropy gcc plugin
  - random: fix circular include dependency on arm64 after addition of percpu.h
  - ARM: percpu.h: fix build error
  - random32: update the net random state on interrupt and activity
  - vgacon: Fix for missing check in scrollback handling
  - memcg: fix memcg_kmem_bypass() for remote memcg charging
  - arm64/numa: cdm: Cacheline aligned cdmmask to improve performance
  - mm/page_alloc.c: ratelimit allocation failure warnings more aggressively
  - iomap: fix sub-page uptodate handling
  - net/hinic: Add dfx information
  - net/hinic: Add read chip register interface
  - net/hinic: Synchronize time to firmware every hour
  - net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
  - net: avoid possible false sharing in sk_leave_memory_pressure()
  - sctp: add chunks to sk_backlog when the newsk sk_socket is not set
  - netfilter: ctnetlink: honor IPS_OFFLOAD flag
  - fork, memcg: alloc_thread_stack_node needs to set tsk->stack
  - net/udp_gso: Allow TX timestamp with UDP GSO
  - inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
  - netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  - netfilter: nft_flow_offload: add entry to flowtable after confirmation
  - perf/core: Fix the address filtering fix
  - netfilter: nft_set_hash: bogus element self comparison from deactivation path
  - fs/nfs: Fix nfs_parse_devname to not modify it's argument
  - ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit
  - net/mlx5: Take lock with IRQs disabled to avoid deadlock
  - xfs: Sanity check flags of Q_XQUOTARM call
  - cgroup: fix KABI broken by "cgroup: fix cgroup_sk_alloc() for sk_clone_lock()"
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
  - net: memcg: fix lockdep splat in inet_csk_accept()
  - net: memcg: late association of sock to memcg
  - cgroup: memcg: net: do not associate sock with unrelated cgroup
  - net/hinic: Retry to get ack after VF message timeout
  - net/hinic: Fix register_chrdev_region fails for major number 921
  - net/hinic: Fix mgmt message timeout during firmware hot upgrade
  - net/hinic: Correct return and features from set_features callback
  - net/hinic: Hinic only supports csum offloading of vxlan/ipip tunnel packets
  - net/hinic: Set net device link down when the chip fault
  - net/hinic: Delete unused UFO codes
  - net/hinic: Delete the remaining old linux kernel adaptation interface
  - net/hinic: Delete the old kernel version adaptation interface in netdev ops
  - net/hinic: Delete the old kernel version adaptation interface in ethtool ops
  - net/hinic: Delete useless linux adaptation functions
  - net/hinic: Delete unused functions and macro definitions in ossl
  - netfilter: nat: check the bounds of nf_nat_l3protos and nf_nat_l4protos


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2008.6.0.0043
changelog:
  - arm64/config: enable TIPC module for openEuler
  - net: hns3: update hns3 version to 1.9.38.6
  - net: hns3: add support for dumping MAC umv counter in debugfs
  - net: hns3: fix bug when PF set the duplicate MAC address for VFs
  - net/hinic: Check the legality of out_size in nictool
  - net/hinic: Fix out-of-bounds access when setting ets
  - net/hinic: Rename camelCase used in nictool
  - net/hinic: Fix alignment and code style
  - net/hinic: Delete unused heartbeat enhancement feature
  - net/hinic: Delete the unused chip fault handling process
  - net/hinic: Delete unused microcode back pressure feature
  - net/hinic: Fix misspelled word and wrong print format
  - net/hinic: update hinic version to 2.3.2.15
  - net/hinic: Add the maximum value of the module parameter poll_weight
  - net/hinic: Add pause/pfc mutual exclusion protection
  - net/hinic: Add lock for mgmt channel event_flag
  - net/hinic: Fix signed integer overflow
  - nfsd: apply umask on fs without ACL support
  - arm64/ascend: use ascend_enable_full to enable ascend platform
  - sbsa_gwdt: Enable ARM_SBSA_WATCHDOG_PANIC_NOTIFIER in hulk_defconfig
  - sbsa_gwdt: Introduce a panic notifier
  - memcg/ascend: Support not account pages of cdm for memcg
  - dt-bindings: iommu: Add Message Based SPI for hisilicon
  - iommu: support message based spi for smmu
  - nbd_genl_status: null check for nla_nest_start
  - config: Add default value for CONFIG_ASCEND_INIT_ALL_GICR
  - irq-gic-v3: Add support to init ts core GICR
  - ascend: mm/hugetlb: Enable ASCEND_CHARGE_MIGRAGE_HUGEPAGES for hulk_defconfig
  - ascend: mm/hugetlb: Enable charge migrate hugepages
  - config: Add default value for CONFIG_SERIAL_ATTACHED_MBIGEN
  - serial: amba-pl011: Fix serial port discard interrupt when interrupt signal line of serial port is connected to mbigen.
  - iommu: fix a mistake for iommu_unregister_device_fault_handler
  - printk: Export a symbol.
  - arm64/ascend: Enable ASCEND_IOPF_HIPRI for hulk_defconfig
  - arm64/ascend: Enable iopf hipri feature for Ascend Platform
  - mm: Check numa node hugepages enough when mmap hugetlb
  - arm64/ascend: Enable CONFIG_ASCEND_OOM for hulk_defconfig
  - arm64/ascend: Add new enable_oom_killer interface for oom contrl
  - svm: add support for allocing memory which is within 4G physical address in svm_mmap
  - suspend: export cpu_suspend/cpu_resume/psci_ops
  - printk: export log_buf_addr_get/log_buf_len_get
  - arm64/ascend: fix memleak when remove svm
  - iommu: fix NULL pointer when release iopf queue
  - arm64/ascend: Enable ASCEND_DVPP_MMAP for hulk_defconfig
  - arm64/ascend: Don't use the DvPP mmap space for svm.
  - arm64/ascend: Enable DvPP mmap features for Ascend Platform
  - usb: xhci: Add workaround for phytium
  - arm64: topology: Support PHYTIUM CPU
  - arm64: mm: define NET_IP_ALIGN to 0
  - arm64: ilp32: fix kabi change
  - config: add CONFIG_ARM64_ILP32 in defconfigs
  - arm64: ilp32: fix compile warning cause by 'VA_BITS'
  - arm64:ilp32: add ARM64_ILP32 to Kconfig
  - arm64:ilp32: add vdso-ilp32 and use for signal return
  - arm64: ptrace: handle ptrace_request differently for aarch32 and ilp32
  - arm64: ilp32: introduce ilp32-specific sigframe and ucontext
  - arm64: signal32: move ilp32 and aarch32 common code to separated file
  - arm64: signal: share lp64 signal structures and routines to ilp32
  - arm64: ilp32: introduce syscall table for ILP32
  - arm64: ilp32: share aarch32 syscall handlers
  - arm64: ilp32: introduce binfmt_ilp32.c
  - arm64: change compat_elf_hwcap and compat_elf_hwcap2 prefix to a32
  - arm64: introduce binfmt_elf32.c
  - arm64: ilp32: add is_ilp32_compat_{task, thread} and TIF_32BIT_AARCH64
  - arm64: introduce is_a32_compat_{task, thread} for AArch32 compat
  - arm64: uapi: set __BITS_PER_LONG correctly for ILP32 and LP64
  - arm64: rename functions that reference compat term
  - arm64: rename COMPAT to AARCH32_EL0
  - arm64: ilp32: add documentation on the ILP32 ABI for ARM64
  - thread: move thread bits accessors to separated file
  - asm-generic: Drop getrlimit and setrlimit syscalls from default list
  - 32-bit userspace ABI: introduce ARCH_32BIT_OFF_T config option
  - compat ABI: use non-compat openat and open_by_handle_at variants
  - ptrace: Add compat PTRACE_{G, S}ETSIGMASK handlers
  - arm64: signal: Make parse_user_sigframe() independent of rt_sigframe layout
  - scsi: libsas: Check link status in ATA prereset()
  - scsi: libsas: Remove postreset from sas_sata_ops


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2009.3.0.0045
changelog:
  - acpi/arm64: check the returned logical CPU number of 'acpi_map_cpuid()'
  - staging: most: net: fix buffer overflow
  - block: Do not discard buffers under a mounted filesystem
  - block: refactor bd_start_claiming
  - fs: Don't invalidate page buffers in block_write_full_page()
  - ilp32: fix compile problem when ARM64_ILP32 and UBSAN are both enabled
  - locking/percpu-rwsem: use this_cpu_{inc|dec}() for read_count
  - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
  - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference
  - drm/ttm: fix incrementing the page pointer for huge pages
  - drm/ttm: fix start page for huge page check in ttm_put_pages()
  - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
  - fbcon: remove now unusued 'softback_lines' cursor() argument
  - fbcon: remove soft scrollback code
  - mm/hugetlb: fix a race between hugetlb sysctl handlers
  - nfs: Fix getxattr kernel panic and memory overflow
  - net/packet: fix overflow in tpacket_rcv
  - net/packet: make tp_drops atomic
  - ext4: fix potential negative array index in do_split()
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping
  - xfs: fix boundary test in xfs_attr_shortform_verify
  - xfs: use the latest extent at writeback delalloc conversion time
  - xfs: validate writeback mapping using data fork seq counter
  - xfs: create delalloc bmapi wrapper for full extent allocation
  - xfs: refactor AGI unlinked bucket updates
  - xfs: add xfs_verify_agino_or_null helper
  - xfs: clean up iunlink functions
  - arm64/ascend: enable ascend features for Ascend910 platform
  - arm64/ascend: Add auto tuning hugepage module
  - arm64/ascend: Enable CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE for hulk_defconfig
  - arm64/ascend: Notifier will return a freed val to indecate print logs
  - arm64/ascend: Add hugepage flags change interface
  - arm64/ascend: Add set hugepage number helper function
  - arm64/ascend: Add mmap hook when alloc hugepage
  - arm64/ascend: Add new CONFIG for auto-tuning hugepage
  - dm thin metadata: Fix use-after-free in dm_bm_set_read_only
  - dm thin metadata: Avoid returning cmd->bm wild pointer on error
  - dm cache metadata: Avoid returning cmd->bm wild pointer on error
  - watchdog: Enable CONFIG_ASCEND_WATCHDOG_SYSFS_CONFIGURE in hulk_defconfig
  - watchdog: Add interface to config timeout and pretimeout in sysfs
  - mm/swapfile: fix and annotate various data races
  - serial: 8250: fix null-ptr-deref in serial8250_start_tx()
  - timekeeping: Prevent 32bit truncation in scale64_check_overflow()
  - lib : kobject: fix refcount imblance on kobject_rename
  - genirq/debugfs: Add missing sanity checks to interrupt injection
  - ovl: fix WARN_ON nlink drop to zero
  - ovl: fix some xino configurations
  - ovl: fix corner case of non-constant st_dev; st_ino
  - ovl: fix corner case of conflicting lower layer uuid
  - ovl: generalize the lower_fs[] array
  - ovl: simplify ovl_same_sb() helper
  - ovl: generalize the lower_layers[] array
  - ovl: fix lookup failure on multi lower squashfs
  - fat: don't allow to mount if the FAT length == 0
  - serial: amba-pl011: Make sure we initialize the port.lock spinlock
  - perf top: Fix wrong hottest instruction highlighted
  - xfs: prohibit fs freezing when using empty transactions
  - xfs: Use scnprintf() for avoiding potential buffer overflow
  - xfs: use bitops interface for buf log item AIL flag check
  - xfs: fix some memory leaks in log recovery
  - xfs: convert EIO to EFSCORRUPTED when log contents are invalid
  - xfs: fix inode fork extent count overflow
  - nvme: fix memory leak caused by incorrect subsystem free
  - nvme: fix possible deadlock when nvme_update_formats fails
  - dm verity: don't prefetch hash blocks for already-verified data
  - arm64: kprobes: Recover pstate.D in single-step exception handler
  - nbd: fix possible page fault for nbd disk
  - nbd: rename the runtime flags as NBD_RT_ prefixed
  - jbd2: flush_descriptor(): Do not decrease buffer head's ref count
  - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
  - ACPICA: Win OSL: Replace get_tick_count with get_tick_count64
  - ext4: avoid fetching btime in ext4_getattr() unless requested
  - mm: pagewalk: fix termination condition in walk_pte_range()
  - mm/huge_memory.c: use head to check huge zero page
  - mm/page-writeback.c: improve arithmetic divisions
  - mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide
  - PCI: PM/ACPI: Refresh all stale power state data in pci_pm_complete()
  - ACPI: PM: Fix regression in acpi_device_set_power()
  - ACPI: PM: Allow transitions to D0 to occur in special cases
  - ACPI: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold
  - iommu/arm-smmu: Mark expected switch fall-through
  - efi/memreserve: Register reservations as 'reserved' in /proc/iomem
  - compat_ioctl: handle SIOCOUTQNSD
  - mm: slub: fix conversion of freelist_corrupted()
  - khugepaged: retract_page_tables() remember to test exit
  - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
  - ftrace: Setup correct FTRACE_FL_REGS flags for module
  - mm/page_counter.c: fix protection usage propagation
  - driver core: Avoid binding drivers to dead devices
  - genirq/affinity: Make affinity setting if activated opt-in
  - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
  - sched: correct SD_flags returned by tl->sd_flags()
  - sched/fair: Fix NOHZ next idle balance
  - xattr: break delegations in {set, remove}xattr
  - firmware: Fix a reference count leak.
  - ext4: fix direct I/O read error
  - arm64: csum: Fix handling of bad packets
  - arm64/alternatives: move length validation inside the subsection
  - bpf: Fix map leak in HASH_OF_MAPS map
  - dm integrity: fix integrity recalculation that is improperly skipped
  - io-mapping: indicate mapping failure
  - vt: Reject zero-sized screen buffer size.
  - fuse: fix weird page warning
  - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
  - genirq/affinity: Handle affinity setting on inactive interrupts correctly
  - sched/fair: handle case of task_h_load() returning 0
  - sched: Fix unreliable rseq cpu_id for new tasks
  - timer: Fix wheel index calculation on last level
  - timer: Prevent base->clk from moving backward
  - uio_pdrv_genirq: fix use without device tree and no interrupt
  - fuse: Fix parameter for FS_IOC_{GET, SET}FLAGS
  - ovl: fix unneeded call to ovl_change_flags()
  - ovl: relax WARN_ON() when decoding lower directory file handle
  - ovl: inode reference leak in ovl_is_inuse true case.
  - arm64/alternatives: don't patch up internal branches
  - arm64/alternatives: use subsections for replacement sequences
  - block: release bip in a right way in error path
  - cifs: update ctime and mtime during truncate
  - dm zoned: assign max_io_len correctly
  - virtio-blk: free vblk-vqs in error path of virtblk_probe()
  - mm/slub: fix stack overruns with SLUB_STATS
  - mm/slub.c: fix corrupted freechain in deactivate_slab()
  - mm: fix swap cache node allocation mask
  - dm writecache: add cond_resched to loop in persistent_memory_claim()
  - dm writecache: correct uncommitted_block when discarding uncommitted entry
  - ring-buffer: Zero out time extend if it is nested and not absolute
  - mm/slab: use memzero_explicit() in kzfree()
  - sched/core: Fix PI boosting between RT and DEADLINE tasks
  - sched/deadline: Initialize ->dl_boosted
  - efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
  - loop: replace kill_bdev with invalidate_bdev
  - fanotify: fix ignore mask logic for events on child and on dir
  - md: add feature flag MD_FEATURE_RAID0_LAYOUT
  - kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
  - ext4: avoid race conditions when remounting with options that change dax
  - ext4: fix partial cluster initialization when splitting extent
  - selinux: fix double free
  - arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
  - lib/zlib: remove outdated and incorrect pre-increment optimization
  - vfio/mdev: Fix reference count leak in add_mdev_supported_type
  - PCI: dwc: Fix inner MSI IRQ domain registration
  - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone
  - ipmi: use vzalloc instead of kmalloc for user creation
  - PCI: Fix pci_register_host_bridge() device_register() error handling
  - drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish
  - scsi: sr: Fix sr_probe() missing deallocate of device minor
  - vfio/pci: fix memory leaks in alloc_perm_bits()
  - PCI: Allow pci_resize_resource() for devices on root bus
  - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user->release_barrier
  - Revert "ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user->release_barrier"
  - kernel/cpu_pm: Fix uninitted local in cpu_pm
  - ext4: fix race between ext4_sync_parent() and rename()
  - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
  - mm: initialize deferred pages with interrupts enabled
  - cpuidle: Fix three reference count leaks
  - spi: dw: Return any value retrieved from the dma_transfer callback
  - PCI: Don't disable decoding when mmio_always_on is set
  - sched/core: Fix illegal RCU from offline CPUs
  - audit: fix a net reference leak in audit_list_rules_send()
  - audit: fix a net reference leak in audit_send_reply()
  - spi: dw: Fix Rx-only DMA transfers
  - spi: dw: Enable interrupts in accordance with DMA xfer mode
  - arm64: insn: Fix two bugs in encoding 32-bit logical immediates
  - spi: dw: Zero DMA Tx and Rx configurations on stack
  - perf: Add cond_resched() to task_function_call()
  - mm/slub: fix a memory leak in sysfs_slab_add()
  - proc: Use new_inode not new_inode_pseudo
  - ovl: initialize error in ovl_copy_xattr
  - spi: Fix controller unregister order
  - spi: No need to assign dummy value in spi_unregister_controller()
  - spi: dw: Fix controller unregister order
  - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
  - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
  - efi/efivars: Add missing kobject_put() in sysfs entry creation error path
  - aio: fix async fsync creds
  - mm: add kvfree_sensitive() for freeing sensitive data objects
  - sched/fair: Don't NUMA balance for kthreads
  - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()
  - tun: correct header offsets in napi frags mode
  - spi: dw: use "smp_mb()" to avoid sending spi data error
  - Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race window"
  - iommu: Fix reference count leak in iommu_group_alloc.
  - mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
  - exec: Always set cap_ambient in cap_bprm_set_creds
  - padata: purge get_cpu and reorder_via_wq from padata_do_serial
  - padata: initialize pd->cpu with effective cpumask
  - padata: Replace delayed timer with immediate workqueue in padata_reorder
  - fix multiplication overflow in copy_fdtable()
  - exec: Move would_dump into flush_old_exec
  - cifs: fix leaked reference on requeued write
  - arm64: fix the flush_icache_range arguments in machine_kexec
  - NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
  - nfs: fscache: use timespec64 in inode auxdata
  - NFS: Fix fscache super_cookie index_key from changing after umount
  - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
  - net: phy: fix aneg restart in phy_ethtool_set_eee
  - virtio-blk: handle block_device_operations callbacks after hot unplug
  - shmem: fix possible deadlocks on shmlock_user_lock
  - ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
  - coredump: fix crash when umh is disabled
  - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
  - arm64: hugetlb: avoid potential NULL dereference
  - cifs: protect updating server->dstaddr with a spinlock
  - vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
  - propagate_one(): mnt_set_mountpoint() needs mount_lock
  - ext4: check for non-zero journal inum in ext4_calculate_overhead
  - ext4: convert BUG_ON's to WARN_ON's in mballoc.c
  - ext4: increase wait time needed before reuse of deleted inode numbers
  - ext4: use matching invalidatepage in ext4_writepage
  - mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
  - perf/core: fix parent pid/tid in task exit events
  - vt: don't hardcode the mem allocation upper bound
  - audit: check the length of userspace generated audit records
  - tpm/tpm_tis: Free IRQ if probing fails
  - mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
  - mm/hugetlb: fix a addressing exception caused by huge_pte_offset
  - vmalloc: fix remap_vmalloc_range() bounds checks
  - KEYS: Avoid false positive ENOMEM error on key read
  - loop: Better discard support for block devices
  - ipc/util.c: sysvipc_find_ipc() should increase position index
  - scsi: iscsi: Report unbind session event when the target has been removed
  - watchdog: reset last_hw_keepalive time at start
  - ext4: fix extent_status fragmentation for plain files
  - bpf: fix buggy r0 retval refinement for tracing helpers
  - NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
  - percpu_counter: fix a data race at vm_committed_as
  - cifs: Allocate encryption header through kmalloc
  - ext4: do not commit super on read-only bdev
  - NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
  - irqchip/mbigen: Free msi_desc on device teardown
  - ext4: use non-movable memory for superblock readahead
  - mm/vmalloc.c: move 'area->pages' after if statement
  - ext4: do not zeroout extents beyond i_disksize
  - tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation
  - keys: Fix proc_keys_next to increase position index
  - ext4: fix incorrect inodes per group in error message
  - ext4: fix incorrect group count in ext4_fill_super error message
  - ovl: fix value of i_ino for lower hardlink corner case
  - dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
  - ipmi: fix hung processes in __get_guid()
  - libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
  - kmod: make request_module() return an error when autoloading is disabled
  - NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
  - dm verity fec: fix memory leak in verity_fec_dtr
  - dm writecache: add cond_resched to avoid CPU hangs
  - mm: Use fixed constant in page_frag_alloc instead of size + 1
  - tpm: tpm2_bios_measurements_next should increase position index
  - tpm: tpm1_bios_measurements_next should increase position index
  - tpm: Don't make log failures fatal
  - PCI/ASPM: Clear the correct bits when enabling L1 substates
  - md: check arrays is suspended in mddev_detach before call quiesce operations
  - irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
  - block: Fix use-after-free issue accessing struct io_cq
  - genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
  - libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
  - sched: Avoid scale real weight down to zero
  - block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
  - firmware: arm_sdei: fix double-lock on hibernate with shared events
  - arm64: Fix size of __early_cpu_boot_status
  - random: always use batched entropy for get_random_u{32, 64}
  - padata: always acquire cpu_hotplug_lock before pinst->lock
  - bpf: Explicitly memset some bpf info structures declared on the stack
  - bpf: Explicitly memset the bpf_attr structure
  - libfs: fix infoleak in simple_attr_read()
  - bpf/btf: Fix BTF verification of enum members in struct/union
  - genirq: Fix reference leaks on irq affinity notifiers
  - scsi: sd: Fix optimal I/O size for devices that change reported values
  - scsi: ipr: Fix softlockup when rescanning devices in petitboot
  - nfs: add minor version to nfs_server_key for fscache
  - arm64: smp: fix crash_smp_send_stop() behaviour
  - arm64: smp: fix smp_send_stop() behaviour
  - mm, slub: prevent kmalloc_node crashes and memory leaks
  - mm: slub: be more careful about the double cmpxchg of freelist
  - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group()
  - mm: slub: add missing TID bump in kmem_cache_alloc_bulk()
  - driver core: Fix creation of device links with PM-runtime flags
  - driver core: Remove device link creation limitation
  - driver core: Add device link flag DL_FLAG_AUTOPROBE_CONSUMER
  - driver core: Make driver core own stateful device links
  - driver core: Fix adding device links to probing suppliers
  - driver core: Remove the link if there is no driver with AUTO flag
  - jbd2: fix data races at struct journal_head
  - signal: avoid double atomic counter increments for user accounting
  - cifs_atomic_open(): fix double-put on late allocation failure
  - workqueue: don't use wq_select_unbound_cpu() for bound works
  - virtio-blk: fix hw_queue stopped on arbitrary error
  - dm writecache: verify watermark during resume
  - dm: report suspended device during destroy
  - dm cache: fix a crash due to incorrect work item cancelling
  - mm: fix possible PMD dirty bit lost in set_pmd_migration_entry()
  - mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa
  - cifs: don't leak -EAGAIN for stat() during reconnect
  - audit: always check the netlink payload length in audit_receive_msg()
  - audit: fix error handling in audit_data_to_entry()
  - ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()
  - cifs: Fix mode output in debugging statements
  - ipmi:ssif: Handle a possible NULL pointer reference
  - irqchip/gic-v3-its: Fix misuse of GENMASK macro
  - ata: ahci: Add shutdown to freeze hardware resources of ahci
  - bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill
  - genirq/proc: Reject invalid affinity masks (again)
  - ext4: fix race between writepages and enabling EXT4_EXTENTS_FL
  - ext4: rename s_journal_flag_rwsem to s_writepages_rwsem
  - ext4: fix mount failure with quota configured as module
  - ext4: fix potential race between s_flex_groups online resizing and access
  - ext4: fix potential race between s_group_info online resizing and access
  - ext4: fix potential race between online resizing and write operations
  - ext4: fix a data race in EXT4_I(inode)->i_disksize
  - genirq/irqdomain: Make sure all irq domain flags are distinct
  - Revert "ipc, sem: remove uneeded sem_undo_list lock usage in exit_sem()"
  - jbd2: fix ocfs2 corrupt when clearing block group bits
  - vt: vt_ioctl: fix race in VT_RESIZEX
  - vt: fix scrollback flushing on background consoles
  - NFS: Fix memory leaks
  - brd: check and limit max_part par
  - irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL
  - irqchip/gic-v3: Only provision redistributors that are enabled in ACPI
  - bpf: map_seq_next should always increase position index
  - cifs: fix NULL dereference in match_prepath
  - driver core: platform: fix u32 greater or equal to zero comparison
  - irqchip/mbigen: Set driver .suppress_bind_attrs to avoid remove problems
  - module: avoid setting info->name early in case we can fall back to info->mod->name
  - watchdog/softlockup: Enforce that timestamp is valid on boot
  - arm64: fix alternatives with LLVM's integrated assembler
  - scsi: iscsi: Don't destroy session if there are outstanding connections
  - iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE
  - driver core: platform: Prevent resouce overflow from causing infinite loops
  - selinux: ensure we cleanup the internal AVC counters on error in avc_update()
  - selinux: ensure we cleanup the internal AVC counters on error in avc_insert()
  - jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal
  - uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
  - ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT
  - cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order
  - nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info
  - arm64: ssbs: Fix context-switch when SSBS is present on all CPUs
  - ext4: improve explanation of a mount failure caused by a misconfigured kernel
  - ext4: fix checksum errors with indexed dirs
  - ext4: don't assume that mmp_nodename/bdevname have NUL
  - arm64: nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly
  - arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly
  - padata: fix null pointer deref of pd->pinst
  - arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations
  - arm64: cpufeature: Fix the type of no FP/SIMD capability
  - NFSv4: try lease recovery on NFS4ERR_EXPIRED
  - NFS: Revalidate the file size on a fatal write error
  - nfs: NFS_SWAP should depend on SWAP
  - PCI: Don't disable bridge BARs when assigning bus resources
  - perf/core: Fix mlock accounting in perf_mmap()
  - clocksource: Prevent double add_timer_on() for watchdog_timer
  - x86/apic/msi: Plug non-maskable MSI affinity race
  - mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section
  - mm: return zero_resv_unavail optimization
  - mm: zero remaining unavailable struct pages
  - ext4: fix deadlock allocating crypto bounce page from mempool
  - aio: prevent potential eventfd recursion on poll
  - eventfd: track eventfd_signal() recursion depth
  - watchdog: fix UAF in reboot notifier handling in watchdog core code
  - jbd2_seq_info_next should increase position index
  - NFS: Directory page cache pages need to be locked when read
  - NFS: Fix memory leaks and corruption in readdir
  - padata: Remove broken queue flushing
  - dm writecache: fix incorrect flush sequence when doing SSD mode commit
  - dm: fix potential for q->make_request_fn NULL pointer
  - dm crypt: fix benbi IV constructor crash if used in authenticated mode
  - dm space map common: fix to ensure new block isn't already in use
  - dm zoned: support zone sizes smaller than 128MiB
  - ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
  - alarmtimer: Unregister wakeup source when module get fails
  - irqdomain: Fix a memory leak in irq_domain_push_irq()
  - rcu: Avoid data-race in rcu_gp_fqs_check_wake()
  - ipc/msg.c: consolidate all xxxctl_down() functions
  - kernel/module: Fix memleak in module_add_modinfo_attrs()
  - mm/migrate.c: also overwrite error when it is bigger than zero
  - mm/memory_hotplug: shrink zones when offlining memory
  - mm/memory_hotplug: fix try_offline_node()
  - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
  - drivers/base/node.c: simplify unregister_memory_block_under_nodes()
  - mm/hotplug: kill is_dev_zone() usage in __remove_pages()
  - mm/memory_hotplug: remove "zone" parameter from sparse_remove_one_section
  - mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail
  - mm/memory_hotplug: remove memory block devices before arch_remove_memory()
  - mm/memory_hotplug: create memory block devices after arch_add_memory()
  - drivers/base/memory: pass a block_id to init_memory_block()
  - mm/memory_hotplug: allow arch_remove_memory() without CONFIG_MEMORY_HOTREMOVE
  - s390x/mm: implement arch_remove_memory()
  - mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never fail
  - powerpc/mm: Fix section mismatch warning
  - mm/memory_hotplug: make __remove_section() never fail
  - mm/memory_hotplug: make unregister_memory_section() never fail
  - mm, memory_hotplug: update a comment in unregister_memory()
  - drivers/base/memory.c: clean up relics in function parameters
  - mm/memory_hotplug: release memory resource after arch_remove_memory()
  - mm, memory_hotplug: add nid parameter to arch_remove_memory
  - drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS
  - mm, sparse: pass nid instead of pgdat to sparse_add_one_section()
  - mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section()
  - arm64/mm: add temporary arch_remove_memory() implementation
  - s390x/mm: fail when an altmap is used for arch_add_memory()
  - mm/memory_hotplug: simplify and fix check_hotplug_memory_range()
  - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
  - sd: Fix REQ_OP_ZONE_REPORT completion handling
  - tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
  - bpf: fix BTF limits
  - scsi: libfc: fix null pointer dereference on a null lport
  - iommu: Use right function to get group for device
  - NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
  - NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
  - driver core: Fix PM-runtime for links added during consumer probe
  - driver core: Fix possible supplier PM-usage counter imbalance
  - net: phy: fixed_phy: Fix fixed_phy not checking GPIO
  - driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link()
  - driver core: Fix handling of runtime PM flags in device_link_add()
  - driver core: Do not resume suppliers under device_links_write_lock()
  - driver core: Avoid careless re-use of existing device links
  - driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling
  - Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
  - scsi: core: scsi_trace: Use get_unaligned_be*()
  - scsi: sd: enable compat ioctls for sed-opal
  - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
  - NFSv2: Fix a typo in encode_sattr()
  - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
  - scsi: enclosure: Fix stale device oops with hot replug
  - xprtrdma: Fix completion wait during device removal
  - xprtrdma: Fix use-after-free in rpcrdma_post_recvs
  - tcp: cache line align MAX_TCP_HEADER
  - svcrdma: Fix trace point use-after-free race
  - net: stricter validation of untrusted gso packets
  - net: bridge: enfore alignment for ethernet address
  - net: use correct this_cpu primitive in dev_recursion_level
  - net: core: reduce recursion limit value
  - ipv4: fill fl4_icmp_{type, code} in ping_v4_sendmsg
  - net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
  - vlan: consolidate VLAN parsing code and limit max parsing depth
  - svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
  - i40e: Memory leak in i40e_config_iwarp_qvlist
  - i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
  - i40e: Wrong truncation from u16 to u8
  - i40e: add num_vectors checker in iwarp handler
  - Revert "vxlan: fix tos value before xmit"
  - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
  - net: gre: recompute gre csum for sctp over gre tunnels
  - vxlan: Ensure FDB dump is performed under RCU
  - ipv6: fix memory leaks on IPV6_ADDRFORM path
  - ipv4: Silence suspicious RCU usage warning
  - igb: reinit_locked() should be called with rtnl_lock
  - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
  - mlxsw: core: Free EMAD transactions using kfree_rcu()
  - mlxsw: core: Increase scope of RCU read-side critical section
  - mlx4: disable device on shutdown
  - net/mlx5: Verify Hardware supports requested ptp function on a given pin
  - rds: Prevent kernel-infoleak in rds_notify_queue_get()
  - rtnetlink: Fix memory(net_device) leak when ->newlink fails
  - udp: Improve load balancing for SO_REUSEPORT.
  - udp: Copy has_conns in reuseport_grow().
  - sctp: shrink stream outq when fails to do addstream reconf
  - sctp: shrink stream outq only when new outcnt < old outcnt
  - tcp: allow at most one TLP probe per flight
  - net: udp: Fix wrong clean up for IS_UDPLITE macro
  - net-sysfs: add a newline when printing 'tx_timeout' by sysfs
  - ip6_gre: fix null-ptr-deref in ip6gre_init_net()
  - dev: Defer free of skbs in flush_backlog
  - bonding: check return value of register_netdevice() in bond_newlink()
  - ipvs: fix the connection sync failed in some cases
  - mlxsw: destroy workqueue when trap_register in mlxsw_emad_init
  - bonding: check error value of register_netdevice() immediately
  - tipc: clean up skb list lock handling on send path
  - libceph: don't omit recovery_deletes in target_copy()
  - sched: consistently handle layer3 header accesses in the presence of VLANs
  - tcp: md5: allow changing MD5 keys in all socket states
  - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
  - tcp: md5: do not send silly options in SYNCOOKIES
  - tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()
  - tcp: make sure listeners don't initialize congestion-control state
  - tcp: fix SO_RCVLOWAT possible hangs under high mem pressure
  - net_sched: fix a memory leak in atm_tc_init()
  - llc: make sure applications use ARPHRD_ETHER
  - l2tp: remove skb_dst_set() from l2tp_xmit_skb()
  - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON()
  - i40e: protect ring accesses with READ- and WRITE_ONCE
  - ixgbe: protect ring accesses with READ- and WRITE_ONCE
  - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
  - sunrpc: fixed rollback in rpc_gssd_dummy_populate()
  - netfilter: ipset: fix unaligned atomic access
  - xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
  - net: Do not clear the sock TX queue in sk_set_socket()
  - net: Fix the arp error in some cases
  - sch_cake: don't call diffserv parsing code when it is not needed
  - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
  - sch_cake: fix a few style nits
  - sch_cake: don't try to reallocate or unshare skb unconditionally
  - ip_tunnel: fix use-after-free in ip_tunnel_lookup()
  - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
  - tcp: grow window for OOO packets only for SACK flows
  - tcp: don't ignore ECN CWR on pure ACK
  - sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
  - net: increment xmit_recursion level in dev_direct_xmit()
  - net: place xmit recursion in softnet data
  - net: fix memleak in register_netdevice()
  - mld: fix memory leak in ipv6_mc_destroy_dev()
  - net: sched: export __netdev_watchdog_up()
  - net: core: device_rename: Use rwsem instead of a seqcount
  - sched/rt, net: Use CONFIG_PREEMPTION.patch
  - e1000e: Do not wake up the system via WOL if device wakeup is disabled
  - xdp: Fix xsk_generic_xmit errno
  - net/filter: Permit reading NET in load_bytes_relative when MAC not set
  - net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
  - igb: Report speed and duplex as unknown when device is runtime suspended
  - e1000e: Relax condition to trigger reset for ME workaround
  - e1000e: Disable TSO for buffer overrun workaround
  - ixgbe: fix signed-integer-overflow warning
  - macvlan: Skip loopback packets in RX handler
  - net/mlx5e: IPoIB, Drop multicast packets that this interface sent
  - netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
  - e1000: Distribute switch variables for initialization
  - ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
  - vxlan: Avoid infinite loop when suppressing NS messages with invalid options
  - bridge: Avoid infinite loop when suppressing NS messages with invalid options
  - ipv6: fix IPV6_ADDRFORM operation logic
  - l2tp: do not use inet_hash()/inet_unhash()
  - l2tp: add sk_family checks to l2tp_validate_socket
  - devinet: fix memleak in inetdev_init()
  - netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
  - bonding: Fix reference count leak in bond_sysfs_slave_add.
  - xsk: Add overflow check for u64 division, stored into u32
  - esp6: get the right proto for transport mode in esp6_gso_encap
  - netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
  - netfilter: nfnetlink_cthelper: unbreak userspace helper support
  - netfilter: ipset: Fix subcounter update skip
  - netfilter: nft_reject_bridge: enable reject with bridge vlan
  - ip_vti: receive ipip packet by calling ip_tunnel_rcv
  - vti4: eliminated some duplicate code.
  - xfrm: fix a NULL-ptr deref in xfrm_local_error
  - xfrm: fix a warning in xfrm_policy_insert_list
  - xfrm interface: fix oops when deleting a x-netns interface
  - xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output
  - xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
  - libceph: ignore pool overlay and cache logic on redirects
  - mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails
  - net/mlx4_core: fix a memory leak bug.
  - net/mlx5e: Update netdev txq on completions during closure
  - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed
  - sctp: Don't add the shutdown timer if its already been added
  - net/mlx5: Add command entry handling completion
  - net: ipip: fix wrong address family in init error path
  - net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*
  - __netif_receive_skb_core: pass skb by reference
  - netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
  - tcp: fix SO_RCVLOWAT hangs with fat skbs
  - net: tcp: fix rx timestamp behavior for tcp_recvmsg
  - net: ipv4: really enforce backoff for redirects
  - tcp: fix error recovery in tcp_zerocopy_receive()
  - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
  - net: fix a potential recursive NETDEV_FEAT_CHANGE
  - drop_monitor: work around gcc-10 stringop-overflow warning
  - netfilter: nf_osf: avoid passing pointer to local var
  - netfilter: nat: never update the UDP checksum when it's 0
  - sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
  - net/mlx5: Fix command entry leak in Internal Error State
  - net/mlx5: Fix forced completion access non initialized command entry
  - tipc: fix partial topology connection closure
  - sch_sfq: validate silly quantum values
  - sch_choke: avoid potential panic in choke_reset()
  - net_sched: sch_skbprio: add message validation to skbprio_change()
  - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
  - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
  - cgroup, netclassid: remove double cond_resched
  - sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
  - net/mlx5: Fix failing fw tracer allocation on s390
  - svcrdma: Fix leak of svc_rdma_recv_ctxt objects
  - mlxsw: Fix some IS_ERR() vs NULL bugs
  - vrf: Check skb for XFRM_TRANSFORMED flag
  - xfrm: Always set XFRM_TRANSFORMED in xfrm{4, 6}_output_finish
  - vrf: Fix IPv6 with qdisc and xfrm
  - sched: etf: do not assume all sockets are full blown
  - macvlan: fix null dereference in macvlan_device_event()
  - ipv6: fix restrict IPV6_ADDRFORM operation
  - ipv6: restrict IPV6_ADDRFORM operation
  - arm64/ascend: Set mem_sleep_current to PM_SUSPEND_ON for ascend platform
  - mm/swap_state: fix a data race in swapin_nr_pages
  - arm64: secomp: fix the secure computing mode 1 syscall check for ilp32
  - vti4: removed duplicate log message.
  - KEYS: Don't write out to userspace while holding key semaphore
  - netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
  - net: revert default NAPI poll timeout to 2 jiffies
  - net: ipv6: do not consider routes via gateways for anycast address check
  - net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
  - mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
  - ipv6: don't auto-add link-local address to lag ports
  - net: Fix Tx hash bound checking
  - sctp: fix possibly using a bad saddr with a given dst
  - sctp: fix refcount bug in sctp_wfree
  - net, ip_tunnel: fix interface lookup with no key
  - ipv4: fix a RCU-list lock in fib_triestat_seq_show
  - vti6: Fix memory leak of skb if input policy check fails
  - netfilter: nft_fwd_netdev: validate family and chain type
  - netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}
  - xfrm: policy: Fix doulbe free in xfrm_policy_timer
  - xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
  - xfrm: fix uctx len check in verify_sec_ctx_len
  - vti[6]: fix packet tx through bpf_redirect() in XinY cases
  - xfrm: handle NETDEV_UNREGISTER for xfrm device
  - ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL
  - vxlan: check return value of gro_cells_init()
  - tcp: repair: fix TCP_QUEUE_SEQ implementation
  - net: ip_gre: Accept IFLA_INFO_DATA-less configuration
  - net: ip_gre: Separate ERSPAN newlink / changelink callbacks
  - net_sched: keep alloc_hash updated after hash allocation
  - net_sched: cls_route: remove the right filter from hashtable
  - net/packet: tpacket_rcv: avoid a producer race condition
  - net: cbs: Fix software cbs to consider packet sending time
  - mlxsw: spectrum_mr: Fix list iteration in error path
  - Revert "ipv6: Fix handling of LLA with VRF and sockets bound to VRF"
  - Revert "vrf: mark skb for multicast or link-local as enslaved to VRF"
  - ipv4: ensure rcu_read_lock() in cipso_v4_error()
  - netfilter: nft_tunnel: add missing attribute validation for tunnels
  - netfilter: nft_payload: add missing attribute validation for payload csum flags
  - netfilter: cthelper: add missing attribute validation for cthelper
  - netfilter: x_tables: xt_mttg_seq_next should increase position index
  - netfilter: xt_recent: recent_seq_next should increase position index
  - netfilter: synproxy: synproxy_cpu_seq_next should increase position index
  - netfilter: nf_conntrack: ct_cpu_seq_next should increase position index
  - macvlan: add cond_resched() during multicast processing
  - bonding/alb: make sure arp header is pulled before accessing it
  - devlink: validate length of region addr/len
  - tipc: add missing attribute validation for MTU property
  - net/ipv6: remove the old peer route if change it to a new one
  - net/ipv6: need update peer route when modify metric
  - net: fq: add missing attribute validation for orphan mask
  - devlink: validate length of param values
  - net/packet: tpacket_rcv: do not increment ring index on drop
  - netlink: Use netlink header as base to calculate bad attribute offset
  - net/ipv6: use configured metric when add peer route
  - ipvlan: don't deref eth hdr before checking it's set
  - ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast()
  - ipvlan: do not add hardware address of master to its unicast filter list
  - ipvlan: add cond_resched_rcu() while processing muticast backlog
  - ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface
  - inet_diag: return classid for all socket types
  - gre: fix uninit-value in __iptunnel_pull_header
  - cgroup, netclassid: periodically release file_lock on classid updating
  - netfilter: nf_flowtable: fix documentation
  - netfilter: nft_tunnel: no need to call htons() when dumping ports
  - net: netlink: cap max groups which will be considered in netlink_bind()
  - net/tls: Fix to avoid gettig invalid tls record
  - ipv6: Fix nlmsg_flags when splitting a multipath route
  - ipv6: Fix route replacement with dev-only route
  - sctp: move the format error check out of __sctp_sf_do_9_1_abort
  - net: sched: correct flower port blocking
  - net: fib_rules: Correctly set table field when table number exceeds 8 bits
  - netfilter: xt_hashlimit: limit the max size of hashtable
  - mlxsw: spectrum_dpipe: Add missing error path
  - bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map
  - mlx5: work around high stack usage with gcc
  - netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy
  - net/sched: flower: add missing validation of TCA_FLOWER_FLAGS
  - net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS
  - core: Don't skip generic XDP program execution for cloned SKBs
  - net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
  - net/mlx5: IPsec, Fix esp modify function attribute
  - net_sched: fix a resource leak in tcindex_set_parms()
  - bonding/alb: properly access headers in bond_alb_xmit()
  - sunrpc: expiry_time should be seconds not timeval
  - tcp: clear tp->segs_{in|out} in tcp_disconnect()
  - tcp: clear tp->data_segs{in|out} in tcp_disconnect()
  - tcp: clear tp->delivered in tcp_disconnect()
  - tcp: clear tp->total_retrans in tcp_disconnect()
  - net_sched: fix an OOB access in cls_tcindex
  - l2tp: Allow duplicate session creation with UDP
  - cls_rsvp: fix rsvp_policy
  - net: Fix skb->csum update in inet_proto_csum_replace16().
  - xfrm: interface: do not confirm neighbor when do pmtu update
  - xfrm interface: fix packet tx through bpf_redirect()
  - vti[6]: fix packet tx through bpf_redirect()
  - netfilter: nft_tunnel: ERSPAN_VERSION must not be null
  - igb: Fix SGMII SFP module discovery for 100FX/LX.
  - ixgbe: Fix calculation of queue with VFs and flow director on interface flap
  - ixgbevf: Remove limit of 10 entries for unicast filter list
  - net_sched: ematch: reject invalid TCF_EM_SIMPLE
  - netfilter: nf_tables: add __nft_chain_type_get()
  - netfilter: ipset: use bitmap infrastructure completely
  - netfilter: nft_osf: add missing check for DREG attribute
  - tcp: do not leave dangling pointers in tp->highest_sack
  - tcp_bbr: improve arithmetic division in bbr_update_bw()
  - Revert "udp: do rmem bulk free even if the rx sk queue is empty"
  - net-sysfs: Fix reference count leak
  - net_sched: fix datalen for ematch
  - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
  - net, ip_tunnel: fix namespaces move
  - net, ip6_tunnel: fix namespaces move
  - net: ip6_gre: fix moving ip6gre between namespaces
  - ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
  - packet: fix data-race in fanout_flow_is_huge()
  - net: neigh: use long type to store jiffies delta
  - xsk: Fix registration of Rx-only sockets
  - net: netem: correct the parent's backlog when corrupted packet was dropped
  - net: netem: fix error path for corrupted GSO frames
  - act_mirred: Fix mirred_init_module error handling
  - ip6erspan: remove the incorrect mtu limit for ip6erspan
  - llc: fix sk_buff refcounting in llc_conn_state_process()
  - llc: fix another potential sk_buff leak in llc_ui_sendmsg()
  - net: sched: cbs: Avoid division by zero when calculating the port rate
  - net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
  - xsk: avoid store-tearing when assigning umem
  - xsk: avoid store-tearing when assigning queues
  - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
  - i40e: reduce stack usage in i40e_set_fc
  - net/rds: Add a few missing rds_stat_names entries
  - net: fix bpf_xdp_adjust_head regression for generic-XDP
  - tipc: reduce risk of wakeup queue starvation
  - xfrm interface: ifname may be wrong in logs
  - xdp: fix possible cq entry leak
  - net/tls: fix socket wmem accounting on fallback with netem
  - net: netem: fix backlog accounting for corrupted GSO frames
  - bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup
  - net: core: support XDP generic on stacked devices.
  - signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig
  - net/mlx5: Delete unused FPGA QPN variable
  - mlxsw: spectrum: Set minimum shaper on MC TCs
  - mlxsw: reg: QEEC: Add minimum shaper fields
  - tipc: fix wrong timeout input for tipc_wait_for_cond()
  - tipc: update mon's self addr when node addr generated
  - mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters
  - mlxsw: spectrum: Wipe xstats.backlog of down ports
  - tcp: fix marked lost packets not being retransmitted
  - af_unix: add compat_ioctl support
  - ethtool: reduce stack usage with clang
  - fs: fix kabi broken introduced by fixing CVE-2020-14381
  - futex: Unbreak futex hashing
  - futex: Fix inode life-time issue
  - block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
  - arm64/ascend: set the correct dvpp mmap area when no MAP_DVPP flags
  - ext4: fix error pointer dereference
  - ext4: Avoid freeing inodes on dirty list
  - writeback: Export inode_io_list_del()
  - blktrace: ensure our debugfs dir exists
  - blktrace: fix debugfs use after free
  - loop: be paranoid on exit and prevent new additions / removals
  - Revert "block: rename 'q->debugfs_dir' and 'q->blk_trace->dir' in blk_unregister_queue()"
  - ext4: force buffer up-to-date while marking it dirty
  - ext4: fix a data race at inode->i_disksize
  - ext4: fix a data race at inode->i_blocks
  - jbd2: abort journal if free a async write error metadata buffer
  - ext4: abort the filesystem if failed to async write metadata buffer
  - net: hns3: update hns3 version to 1.9.38.7
  - net: hns3: initialize the message content sent to the VF
  - net: hns3: check vlan id before using it
  - net: hns3: check RSS key index before using
  - net: hns3: check cmdq message parameters sent from VF
  - config: add certs dir to CONFIG_MODULE_SIG_KEY
  - net/hinic: Fix Oops when probing hinic driver


author: Yang Yingliang <yangyingliang@huawei.com> - 4.19.90-2010.2.0.0046
changelog:
  - rtc: cmos: Revert "rtc: Fix the AltCentury value on AMD/Hygon platform"
  - NTB: Fix static check warning in perf_clear_test
  - NTB: ntb_perf: Fix address err in perf_copy_chunk
  - NTB: Fix an error in get link status
  - rtc: Fix the AltCentury value on AMD/Hygon platform
  - tools/power turbostat: Add support for Hygon Fam 18h (Dhyana) RAPL
  - tools/power turbostat: Fix caller parameter of get_tdp_amd()
  - tools/power turbostat: Also read package power on AMD F17h (Zen)
  - tools/power turbostat: Add support for AMD Fam 17h (Zen) RAPL
  - NTB: Add Hygon Device ID
  - x86/amd_nb: Make hygon_nb_misc_ids static
  - i2c-piix4: Add Hygon Dhyana SMBus support
  - x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors
  - hwmon: (k10temp) Add Hygon Dhyana support
  - tools/cpupower: Add Hygon Dhyana support
  - EDAC, amd64: Add Hygon Dhyana support
  - cpufreq: Add Hygon Dhyana support
  - ACPI: Add Hygon Dhyana support
  - x86/xen: Add Hygon Dhyana support to Xen
  - x86/kvm: Add Hygon Dhyana support to KVM
  - x86/mce: Add Hygon Dhyana support to the MCA infrastructure
  - x86/bugs: Add Hygon Dhyana to the respective mitigation machinery
  - x86/apic: Add Hygon Dhyana support
  - x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and northbridge
  - x86/amd_nb: Check vendor in AMD-only functions
  - x86/alternative: Init ideal_nops for Hygon Dhyana
  - x86/events: Add Hygon Dhyana support to PMU infrastructure
  - x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana
  - x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number
  - x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana
  - x86/cpu: Create Hygon Dhyana architecture support file
  - kvm: debugfs: aarch64 export cpu time related items to debugfs
  - kvm: debugfs: export remaining aarch64 kvm exit reasons to debugfs
  - kvm: debugfs: Export vcpu stat via debugfs
  - kvm: fix compile error when including linux/kvm.h
  - kvm: arm64: add KVM_CAP_ARM_CPU_FEATURE extension
  - kvm: arm64: make ID registers configurable
  - kvm: arm64: emulate the ID registers
  - arm64: add a helper function to traverse arm64_ftr_regs
  - xen/events: defer eoi in case of excessive number of events
  - xen/events: use a common cpu hotplug hook for event channels
  - xen/events: switch user event channels to lateeoi model
  - xen/events: add a new "late EOI" evtchn framework
  - xen/events: avoid removing an event channel while handling it
  - net/hinic: update hinic version to 2.3.2.16
  - net/hinic: Allowed to send commands when only hot activation of ucode
  - net/hinic: Fix ethtool loopback test failure
  - net/hinic: VF is not allowed to configure global resources
  - net/hinic: Allow to remove administratively set MAC on VFs
  - net/hinic: Fix the driver does not report an error when setting MAC fails
  - Bluetooth: MGMT: Fix not checking if BT_HS is enabled
  - Bluetooth: Disable High Speed by default
  - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
  - Bluetooth: A2MP: Fix not initializing all members
  - perf/core: Fix race in the perf_mmap_close() function
  - geneve: add transport ports in route lookup for geneve
  - ext4: only set last error block when check system zone failed
  - xfs: Fix tail rounding in xfs_alloc_file_space()
  - KEYS: reaching the keys quotas correctly
  - serial: 8250: Avoid error message on reprobe
  - mm: memcg: fix memcg reclaim soft lockup
  - mm/thp: fix __split_huge_pmd_locked() for migration PMD
  - kprobes: fix kill kprobe which has been marked as gone
  - percpu: fix first chunk size calculation for populated bitmap
  - spi: Fix memory leak on splited transfers
  - nvme-rdma: cancel async events before freeing event struct
  - nvme-fc: cancel async events before freeing event struct
  - NFS: Zero-stateid SETATTR should first return delegation
  - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem
  - scsi: target: iscsi: Fix data digest calculation
  - xfs: initialize the shortform attr header padding entry
  - block: ensure bdi->io_pages is always initialized
  - dm writecache: handle DAX to partitions on persistent memory correctly
  - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
  - uaccess: Add non-pagefault user-space write function
  - uaccess: Add non-pagefault user-space read functions
  - xfs: don't update mtime on COW faults
  - include/linux/log2.h: add missing () around n in roundup_pow_of_two()
  - perf jevents: Fix suspicious code in fixregex()
  - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files
  - fix regression in "epoll: Keep a reference on files added to the check list"
  - perf tools: Correct SNOOPX field offset
  - cpuidle: Fixup IRQ state
  - tpm: Unify the mismatching TPM space buffer sizes
  - device property: Fix the secondary firmware node handling in set_primary_fwnode()
  - PM: sleep: core: Fix the handling of pending runtime resume requests
  - writeback: Fix sync livelock due to b_dirty_time processing
  - writeback: Avoid skipping inode writeback
  - writeback: Protect inode->i_io_list with inode->i_lock
  - serial: 8250: change lock order in serial8250_do_startup()
  - serial: 8250_exar: Fix number of ports for Commtech PCIe cards
  - serial: pl011: Don't leak amba_ports entry on driver register error
  - serial: pl011: Fix oops on -EPROBE_DEFER
  - vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
  - vt: defer kfree() of vc_screenbuf in vc_do_resize()
  - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART
  - fs: prevent BUG_ON in submit_bh_wbc()
  - ext4: handle option set by mount flags correctly
  - ext4: handle read only external journal device
  - ext4: don't BUG on inconsistent journal feature
  - jbd2: make sure jh have b_transaction set in refile/unfile_buffer
  - scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
  - scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
  - locking/lockdep: Fix overflow in presentation of average lock-time
  - PCI: Fix pci_create_slot() reference count leak
  - xfs: Don't allow logging of XFS_ISTALE inodes
  - iommu/iova: Don't BUG on invalid PFNs
  - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
  - do_epoll_ctl(): clean the failure exits up a bit
  - epoll: Keep a reference on files added to the check list
  - efi: add missed destroy_workqueue when efisubsys_init fails
  - RDMA/bnxt_re: Do not add user qps to flushlist
  - vfio/type1: Add proper error unwind for vfio_iommu_replay()
  - fs/signalfd.c: fix inconsistent return codes for signalfd4
  - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
  - virtio_ring: Avoid loop when vq is broken in virtqueue_poll
  - xfs: fix inode quota reservation checks
  - scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
  - spi: Prevent adding devices below an unregistering controller
  - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock()
  - ext4: fix checking of directory entry validity for inline directories
  - mm, page_alloc: fix core hung in free_pcppages_bulk()
  - mm: include CMA pages in lowmem_reserve at boot
  - kernel/relay.c: fix memleak on destroy relay channel
  - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
  - khugepaged: khugepaged_test_exit() check mmget_still_valid()
  - perf probe: Fix memory leakage when the probe point is not found
  - xfs: fix duplicate verification from xfs_qm_dqflush()
  - xfs: reset buffer write failure state on successful completion
  - xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
  - xfs: clear PF_MEMALLOC before exiting xfsaild thread
  - xfs: acquire superblock freeze protection on eofblocks scans
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
  - macvlan: validate setting of multiple remote source MAC addresses
  - blk-mq: insert flush request to the front of dispatch queue
  - blk-mq: Rerun dispatching in the case of budget contention
  - blk-mq: Add blk_mq_delay_run_hw_queues() API call
  - blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick
  - blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget
  - blk-mq: insert passthrough request into hctx->dispatch directly
  - arm64/ascend: Fix register_persistent_clock definition
  - net: add __must_check to skb_put_padto()
  - netfilter: nf_tables: incorrect enum nft_list_attributes definition
  - tcp_bbr: adapt cwnd based on ack aggregation estimation
  - tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning
  - ipv4: Update exception handling for multipath routes via same device
  - tipc: use skb_unshare() instead in tipc_buf_append()
  - tipc: fix shutdown() of connection oriented socket
  - tipc: Fix memory leak in tipc_group_create_member()
  - ipv6: avoid lockdep issue in fib6_del()
  - ip: fix tos reflection in ack and reset packets
  - af_key: pfkey_dump needs parameter validation
  - SUNRPC: stop printk reading past end of string
  - net: handle the return value of pskb_carve_frag_list() correctly
  - net/mlx5e: Don't support phys switch id if not in switchdev mode
  - net: disable netpoll on fresh napis
  - tipc: fix shutdown() of connectionless socket
  - sctp: not disable bh in the whole sctp_get_port_local()
  - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
  - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
  - netfilter: nf_tables: fix destination register zeroing
  - netfilter: nf_tables: add NFTA_SET_USERDATA if not null
  - scsi: fcoe: Fix I/O path allocation
  - ipvlan: fix device features
  - tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
  - net: Fix potential wrong skb->protocol in skb_vlan_untag()
  - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
  - bonding: fix active-backup failover for current ARP slave
  - bonding: fix a potential double-unregister
  - bonding: show saner speed for broadcast mode
  - i40e: Fix crash during removing i40e driver
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
  - svcrdma: Fix another Receive buffer leak
  - net/compat: Add missing sock updates for SCM_RIGHTS
  - net: initialize fastreuse on inet_inherit_port
  - net: refactor bind_bucket fastreuse into helper
  - net/tls: Fix kmap usage
  - net: Set fput_needed iff FDPUT_FPUT is set
  - af_packet: TPACKET_V3: fix fill status rwlock imbalance
  - ipvs: allow connection reuse for unconfirmed conntrack
  - xfrm: Fix crash when the hold queue is used.
  - net sched: fix reporting the first-time use timestamp
  - IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
  - fib: add missing attribute validation for tun_id
  - net/mlx5: Fix mlx5_ifc_query_lag_out_bits
  - mpls: fix warning with multi-label encap
  - hdlc_ppp: add range checks in ppp_cp_parse_cr()
  - spi/ascend: Add spi-cpld to device tree compatibility list
  - net: hns3: update hns3 version to 1.9.38.8
  - net: hns3: modify the sensitive words
  - block: allow for_each_bvec to support zero len bvec
  - HID: hid-input: clear unmapped usages
  - net/nfc/rawsock.c: add CAP_NET_RAW check.
  - arm64/ascend: Implement the read_persistend_clock64 for aarch64
  - ext4: clear buffer verified flag if read metadata from disk
  - ext4: Fix bdev write error check failed when mount fs with ro
  - loop: Report EOPNOTSUPP properly


author: Xu Yandong <xuyandong2@huawei.com> - 6.2.0-4
changelog:
  - Fix virdaemon waiting for child processes return code error.
  - Fix virsh dump and migrate return code error.


author: Huawei Technologies Co., Ltd <alex.chen@huawei.com>
changelog:
  - rpc: gendispatch: handle empty flags
  - rpc: add support for filtering @acls by uint params
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses
  - qemu: agent: set ifname to NULL after freeing


author: huanghaitao <huanghaitao8@huawei.com> - 4.1.3-4
changelog:
  - Type:cves
  - ID: CVE-2019-3695 CVE-2019-3696 
  - SUG:restart
  - DESC: fix CVE-2019-3695 CVE-2019-3696


author: shixuantong<shixuantong@huawei.com> - 5.3.0-6
changelog:
  - Type:cves
  - ID:CVE-2020-10378 CVE-2020-10177 CVE-2020-10994
  - SUG:NA
  - DESC:fix CVE-2020-10378 CVE-2020-10177 CVE-2020-10994


author: BALATON Zoltan <balaton@eik.bme.hu>
changelog:
  - hw/net/xgmac: Fix buffer overflow in xgmac_enet_send()
  - hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment()
  - sm501: Convert printf + abort to qemu_log_mask
  - sm501: Shorten long variable names in sm501_2d_operation
  - sm501: Use BIT(x) macro to shorten constant
  - sm501: Clean up local variables in sm501_2d_operation
  - sm501: Replace hand written implementation with pixman where possible


author: openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-54
changelog:
  - add map to zerp device at dev_rw_zero interface;
    allow ipmievd to read the process state (/proc/pid) of init;
    allow systemd to mount unlabeled filesystemd;
    fix selinux label for hostname digest list;
    solve shutdown permission denied caused by dracut


author: gulining <gulining1@huawei.com> - 2.6.2-4
changelog:
  - Type:cves
  - ID: CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-10895
  - SUG:restart
  - DESC: fix CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-10895


