# changelog

author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.8.0.80
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - cpuidle: add cpuidle-haltpoll driver module parameter
  - clk: imx: Add check for kcalloc
  - x86/cpu/hygon: Set __max_die_per_package on Hygon
  - mm/dynamic_hugetlb: fix clear PagePool without lock protection
  - mm/dynamic_hugetlb: fix list corruption in hpool_merge_page()
  - mm/swapfile: use new way to fix broken kabi in swap_info_struct
  - block: always align request_wrapper to cacheline
  - block: fix crash on cmpxchg for request_wrapper
  - efi/libstub: Fix build error in efi-stub.c for riscv
  - mm: init: Fix build waring for ascend enable features
  - mtd: physmap-core: Fix NULL pointer dereferencing in of_select_probe_type()
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - block: only use cmpxchg64 in 64bit platform
  - proc: proc_skip_spaces() shouldn't think it is working on C strings
  - proc: avoid integer type confusion in get_proc_long
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.10.0.82
changelog:
  - scsi: iscsi: remove .unbind_conn from iscsi_transport
  - Revert "scsi: iscsi: fix kabi broken in struct iscsi_transport"


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.13.2.89
changelog:
  - media: mceusb: Use new usb_control_msg_*() routines
  - perf: hisi: Fix read sccl_id and ccl_id error in TSV200
  - mm: add cond_resched() in swapin_walk_pmd_entry()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - livepatch: Fix compile error when CONFIG_LIVEPATCH_WO_FTRACE disabled
  - dm thin: Use last transaction's pmd->root when commit failed
  - zram: avoid race between zram_remove and disksize_store
  - zram: don't fail to remove zram during unloading module
  - blk-mq: fix kabi broken in struct bio
  - blk-mq: fix kabi broken in struct request
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
  - blk-mq: set default elevator as deadline in case of hctx shared tagset
  - ext2: replace bh_submit_read() helper with bh_read()
  - ufs: replace ll_rw_block()
  - udf: replace ll_rw_block()
  - reiserfs: replace ll_rw_block()
  - ocfs2: replace ll_rw_block()
  - ntfs3: replace ll_rw_block()
  - jbd2: replace ll_rw_block()
  - isofs: replace ll_rw_block()
  - gfs2: replace ll_rw_block()
  - fs/buffer: replace ll_rw_block()
  - fs/buffer: add some new buffer read helpers
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - wifi: wilc1000: validate pairwise and authentication suite offsets
  - wifi: wilc1000: validate number of channels
  - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute
  - drm/amdkfd: Check for null pointer after calling kmemdup


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-136.14.2.90
changelog:
  - !341 Backport CVEs and fs bugfixes
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
  - bfq: fix null-ptr-deref in bfq_pd_offline
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - ksmbd: fix heap-based overflow in set_ntacl_dacl()
  - ksmbd: prevent out of bound read for SMB2_WRITE
  - ksmbd: validate length in smb2_write()
  - xfs: fix super block buf log item UAF during force shutdown
  - xfs: wait iclog complete before tearing down AIL
  - xfs: get rid of assert from xfs_btree_islastblock


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.15.0.91
changelog:
  - !347 Backport CVEs and fs bugfixes
  - io_uring: kill goto error handling in io_sqpoll_wait_sq()
  - ext4: fix bad checksum after online resize
  - xfs: fix use-after-free in xattr node block inactivation
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.16.0.92
changelog:
  - !358 Backport CVEs, bugfixes and other
  - binder: fix UAF of alloc->vma in race with munmap()
  - io_uring: add missing item types for splice request
  - xfs: fix overfilling of reserve pool
  - xfs: always succeed at setting the reserve pool size
  - xfs: remove infinite loop when reserving free block pool
  - xfs: use current->journal_info for detecting transaction recursion
  - fix kabi broken due to may_pollfree
  - io_uring: disable polling pollfree files
  - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob
  - driver: char: delete svm.c
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - fs/ntfs3: Fix attr_punch_hole() null pointer derenference
  - tracing/osnoise: Do not unregister events twice
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails
  - !351 AMD: Fix cpu capabilities incorrect detection bug.
  - x86/cpufeatures: Fix cpu capabilities incorrect detection.


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.17.0.93
changelog:
  - !372 Backport 5.10.141 LTS
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  - net/af_packet: check len when min_header_len equals to 0
  - lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
  - drm/amdgpu: Increase tlb flush timeout for sriov
  - drm/amd/display: Fix pixel clock programming
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
  - s390/hypfs: avoid error message under KVM
  - neigh: fix possible DoS due to net iface start/stop loop
  - drm/amd/display: clear optc underflow before turn off odm clock
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
  - drm/amd/display: Avoid MPC infinite loop
  - mmc: mtk-sd: Clear interrupts when cqe off/disable
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
  - fbdev: fb_pm2fb: Avoid potential divide by zero error
  - net: fix refcount bug in sk_psock_get (2)
  - HID: hidraw: fix memory leak in hidraw_release()
  - udmabuf: Set the DMA mask for the udmabuf device (v2)
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
  - kbuild: Fix include path in scripts/Makefile.modpost
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE
  - crypto: lib - remove unneeded selection of XOR_BLOCKS
  - x86/nospec: Fix i386 RSB stuffing
  - x86/nospec: Unwreck the RSB stuffing
  - !368 Backport CVEs and bugfixes
  - mm/memory: return vm_fault_t result from migrate_to_ram() callback
  - net: sched: disallow noqueue for qdisc classes
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
  - xfs: Fix deadlock on xfs_inodegc_worker
  - net: sched: cbq: dont intepret cls results when asked to drop
  - net: sched: atm: dont intepret cls results when asked to drop
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm/vmpressure: fix data-race with memcg->socket_pressure
  - !367 [sync] PR-354: [OLK-5.10] machine check safe review issue modification
  - kasan: add kasan support for memcpy_mcs()
  - arm64: fix return value type of memcpy_mcs()
  - !363 AMD: Support svm guest when host CR4.LA57 is set.
  - KVM: x86: Allow CPU to force vendor-specific TDP level
  - !338 Fix virtio-gpu free issues
  - drm/virtio: free virtqueues on probe failure
  - drm/virtio: Fixes a potential NULL pointer dereference on probe failure


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-136.18.0.94
changelog:
  - !385 Backport CVEs and bugfixes
  - !384 Backport 5.10.142 LTS
  - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: enforce a consistent minimal mtu
  - net: switch to storing KCOV handle directly in sk_buff
  - kabi: add early_demux_handler and early_demux back to fix kabi broken in struct net_protocol and inet6_protocol
  - tcp/udp: Make early_demux back namespacified.
  - net: Use u64_stats_fetch_begin_irq() for stats fetch.
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: fix null-ptr-deref in ext4_write_info
  - block: don't allow a disk link holder to itself
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - scsi: fix iscsi rescan fails to create block
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - mm: memcontrol: fix potential oom_lock recursion deadlock
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
  - xfs: fix potential log item leak
  - USB: serial: ch341: fix disabled rx timer on older devices
  - USB: serial: ch341: fix lost character on LCR updates
  - usb: dwc3: disable USB core PHY management
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  - usb: dwc3: fix PHY disable sequence
  - mmc: core: Fix UHS-I SD 1.8V workaround branch
  - btrfs: harden identification of a stale device
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
  - ALSA: seq: Fix data-race at module auto-loading
  - ALSA: seq: oss: Fix data-race for max_midi_devs access
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
  - net: mac802154: Fix a condition in the receive path
  - ip: fix triggering of 'icmp redirect'
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
  - s390: fix nospec table alignments
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
  - usb: dwc2: fix wrong order of phy_power_on and phy_init
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
  - USB: serial: option: add Quectel EM060K modem
  - USB: serial: option: add support for OPPO R11 diag port
  - USB: serial: cp210x: add Decagon UCA device id
  - xhci: Add grace period after xHC start to prevent premature runtime suspend.
  - thunderbolt: Use the actual buffer in tb_async_error()
  - xen-blkfront: Advertise feature-persistent as user requested
  - xen-blkback: Advertise feature-persistent as user requested
  - mm: pagewalk: Fix race between unmap and page walker
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
  - gpio: pca953x: Add mutex_lock for regcache sync in PM
  - hwmon: (gpio-fan) Fix array out of bounds access
  - clk: bcm: rpi: Add missing newline
  - clk: bcm: rpi: Prevent out-of-bounds access
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
  - Input: rk805-pwrkey - fix module autoloading
  - clk: core: Fix runtime PM sequence in clk_core_unprepare()
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
  - misc: fastrpc: fix memory corruption on open
  - misc: fastrpc: fix memory corruption on probe
  - iio: adc: mcp3911: use correct formula for AD conversion
  - iio: ad7292: Prevent regulator double disable
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
  - vt: Clear selection before changing the font
  - powerpc: align syscall table for ppc32
  - serial: fsl_lpuart: RS485 RTS polariy is inverse
  - net/smc: Remove redundant refcount increase
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  - tcp: annotate data-race around challenge_timestamp
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
  - kcm: fix strp_init() order and cleanup
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
  - net: sched: tbf: don't call qdisc_put() while holding tree lock
  - Revert "xhci: turn off port power in shutdown"
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
  - ieee802154/adf7242: defer destroy_workqueue call
  - iio: adc: mcp3911: make use of the sign bit
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
  - drm/msm/dsi: Fix number of regulators for SDM660
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
  - drm/msm/dsi: fix the inconsistent indenting


author: shixuantong <shixuantong1@huawei.com> - 2.34-102
changelog:
  - elf: Do not completely clear reused namespace in dlmopen (bug 29600)
  - elf: Remove allocate use on _dl_debug_printf
  - elf/tlsdeschtab.h: Add the Malloc return value check in _dl_make_tlsdesc_dynamic()
  - Fix OOB read in stdlib thousand grouping parsing [BZ#29727]


author: wanghongliang <wanghongliang@loongson.cn> - 2.34-105
changelog:
  - LoongArch Port
  - Add login-Add-back-libutil-as-an-empty-library.patch from upstream
    to fix libutil build error.
  - Add malloc-Fix-malloc-debug-for-2.35-onwards.patch from upstream
    to fix memory bug
  - After glibc 2.28,removed libnsl.LoongArch Port in glibc 2.34,not support libnsl.
  - Left some test fails in testsuite_whitelist.


author: Xue Liu <liuxue@loongson.cn> - 2.34-106
changelog:
  - LoongArch: Optimize some string functions including memcpy, memmove,
    memset, strchr, strchrnul, strcmp, strncmp, ctrcpy, ctrlen, strnlen.


author: Yang Yanchao <yangyanchao6@huawei.com> - 2.34-109
changelog:
  - Since the pthread_cond_clockwait@GLIBC_2_28 is introduced in earlier
    versions, this symbol is required to keep the previous items compatible.


author: chenyanpanHW <chenyanpan@huawei.com> - 10.06-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-run-ifdown-on-all-interfaces.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-add-udev-wait-dependency-for-network.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-mod-network-function-when-NM-unmanage-devices.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-initscripts-set-PERSISTENT_DHCLIENT-default-to-yes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-network-need-chkconfig-on.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/bugfix-restart-network-warning.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/new-network-fork-to-start-dhcp.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/exec-udevadm-settle-when-network-start.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/remove-rename_device_lock-when-process-does-not-exis.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: sunsuwan<sunsuwan3@huawei.com> - 5.15.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:lnstat: fix buffer overflow in header output 
         libnetlink: fix socket leak in rtnl_open_byptoyo
         lnstat: fix strdup leak in w argument parsing
         q_cake: allow fix buffer overflow on large labels
         tc flower: fix buffer overflow on large labels
         tc_tuil: fix parsing action control with space and sl
         tipc: fix keylen check
         fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp fix typo in AF_INET6 checksum JSON print
         ip: Fix size_columns() for very large values
         ip: Fix size_columns() invocation that passes a 32-bit quantity


author: jiangheng<jiangheng14@huawei.com> - 5.15.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bridge: fix memory leak when doing fdb get
         mptcp: fix memory leak when doing 'endpoint show'
         mptcp: fix memory leak when getting limits
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device
         fix marco expansion in changelog


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


