# changelog

author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.8.0.86
changelog:
  - Enable kabi checking and adapt the check-kabi script
  - net: let sockops can use bpf_get_current_comm()
  - net: add bpf_is_local_ipaddr bpf helper function
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.10.0.88
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - !1213 [sync] PR-1196:  fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1208  arm64: kernel: disable CNP on LINXICORE9100
  - fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1204  kernel: update SP2 OPENEULER_MINOR value to 2
  - !1203  Revert "locking/rwsem: Prevent potential lock starvation"
  - !1200 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - arm64: kernel: disable CNP on LINXICORE9100
  - !1193 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
  - !1195 [sync] PR-1159: xhci:fix USB xhci controller issue
  - !1183  Fix some warning messages in netacc
  - kernel: update SP2 OPENEULER_MINOR value to 2
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - xhci:fix USB xhci controller issue
  - !1186  Fix NULL pointer and Keep PERF_PMU_CAP_EXCLUSIVE
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE
  - hwtracing: hisi_ptt: Add dummy callback pmu::read()
  - !1182 Fix CQ and QP cache affinity
  - libbpf: Support uniform BTF-defined key/value specification across all BPF maps
  - tools: ignore one warning message
  - RDMA/hns: Fix CQ and QP cache affinity
  - !1151 [sync] PR-1150:  EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1175 [sync] PR-1157: Add LoongArch maintainers to openEuler/MAINTAINERS
  - !1165 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1169 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1156 [sync] PR-582: mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !882 [sync] PR-855: Remove the automatic loading of the hisi_trng driver
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1144 crypto: hisilicon/qm: modify loop exit condition
  - !1147 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - crypto: hisilicon/qm: modify loop exit condition
  - crypto/trng: Remove the automatic loading of the hisi_trng driver
  - crypto: hisilicon/trng - use %u to print u32 variables


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.12.0.89
changelog:
  - !1189 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - !1226 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - !1229 [sync] PR-1227:  x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1219  openEuler: introduced OPENEULER_LTS to identify LTS Release
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.17.0.93
changelog:
  - !1231 [sync] PR-1191:  fix memory reliable related issues
  - !1236 [sync] PR-1194:  fix memleak with efi_fake_mem
  - !1257 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1249 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
  - !1234 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1211 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1276 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1304 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1301 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1266 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1240 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - !1244  set the iova rcache global
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - config: enable set the max iova mag size to 128
  - iommu/iova: increase the iova_rcache depot max size
  - relayfs: fix out-of-bounds access in relay_file_read
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - efi: Disable mirror feature during crashkernel
  - mm: mem_reliable: Update reliable page counter to zero if underflows
  - mm: mem_reliable: Fix reliable page counter mismatch problem
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.18.0.94
changelog:
  - !1370 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1365 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - !1344 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records
  - !1306 [sync] PR-1297:  iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - Fix x86 provides error symbol


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.19.0.95
changelog:
  - !1291 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1457 [sync] PR-1358:  Remove DECnet support from kernel
  - !1440 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1461 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1464 [sync] PR-1436: Fix CVE-2023-3117
  - !1319 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1421 [sync] PR-1415:  Fix generic/299 fail
  - !1379 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - !1433 [sync] PR-346: anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1413 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1390 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1393 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1309 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1330 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1333 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - !1341 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.20.0.96
changelog:
  - !1526 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1338 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1491 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1487 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1496 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1492 [sync] PR-1468: Backport 5.10.155 LTS
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - mmc: sdhci-esdhc-imx: Convert the driver to DT-only
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - dmaengine: at_hdmac: Check return code of dma_async_device_register
  - dmaengine: at_hdmac: Fix impossible condition
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
  - dmaengine: at_hdmac: Fix concurrency over the active list
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
  - dmaengine: at_hdmac: Fix concurrency over descriptor
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level
  - dmaengine: at_hdmac: Fix at_lli struct definition
  - cert host tools: Stop complaining about deprecated OpenSSL functions
  - can: j1939: j1939_send_one(): fix missing CAN header initialization
  - mm/memremap.c: map FS_DAX device memory as decrypted
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
  - nilfs2: fix use-after-free bug of ns_writer on remount
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro
  - ALSA: hda/realtek: Add Positivo C6300 model quirk
  - ALSA: hda: fix potential memleak in 'add_widget_node'
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
  - MIPS: jump_label: Fix compat branch range check
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning
  - riscv: fix reserved memory setup
  - riscv: Separate memory init from paging init
  - riscv: Enable CMA support
  - riscv: vdso: fix build with llvm
  - riscv: process: fix kernel info leakage
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
  - net: atlantic: macsec: clear encryption keys from the stack
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
  - net: cpsw: disable napi in cpsw_ndo_open()
  - net/mlx5e: E-Switch, Fix comparing termination table instance
  - net/mlx5: Allow async trigger completion execution on single CPU systems
  - net: nixge: disable napi when enable interrupts failed in nixge_open()
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
  - perf stat: Fix printing os->prefix in CSV metrics output
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - dmaengine: pxa_dma: use platform_get_irq_optional
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: broadcom: Fix BCMGENET Kconfig
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
  - can: af_can: fix NULL pointer dereference in can_rx_register()
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
  - hamradio: fix issue of dev reference count leakage in bpq_device_event()
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  - KVM: s390: pv: don't allow userspace to set the clock under PV
  - KVM: s390x: fix SCK locking
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - net: fman: Unregister ethernet device on removal
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
  - net: tun: Fix memory leaks of napi_get_frags
  - macsec: clear encryption keys from the stack after setting up offload
  - macsec: fix detection of RXSCs when toggling offloading
  - macsec: fix secy->n_rx_sc accounting
  - macsec: delete new rxsc when offload fails
  - net: gso: fix panic on frag_list with mixed head alloc types
  - bpf: Fix wrong reg type conversion in release_reference()
  - bpf: Add helper macro bpf_for_each_reg_in_vstate
  - bpf: Support for pointers beyond pkt_end.
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - wifi: cfg80211: silence a sparse RCU warning
  - phy: stm32: fix an error code in probe
  - hwspinlock: qcom: correct MMIO max register for newer SoCs
  - fuse: fix readdir cache race
  - !1471 [sync] PR-838: Backport 5.10.154 LTS
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
  - drm/i915/sdvo: Setup DDC fully before output init
  - drm/i915/sdvo: Filter out invalid outputs more sensibly
  - drm/rockchip: dsi: Force synchronous probe
  - ext4,f2fs: fix readahead of verity data
  - KVM: x86: emulator: update the emulation mode after CR0 write
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
  - KVM: x86: emulator: em_sysexit should update ctxt->mode
  - KVM: x86: Mask off reserved bits in CPUID.80000001H
  - KVM: x86: Mask off reserved bits in CPUID.80000008H
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH
  - KVM: x86: Mask off reserved bits in CPUID.80000006H
  - ext4: fix BUG_ON() when directory entry has invalid rec_len
  - ext4: fix warning in 'ext4_da_release_space'
  - parisc: Avoid printing the hardware path twice
  - parisc: Export iosapic_serial_irq() symbol for serial port driver
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
  - perf/x86/intel: Fix pebs event constraints for ICL
  - efi: random: Use 'ACPI reclaim' memory for random seed
  - efi: random: reduce seed size to 32 bytes
  - fuse: add file_modified() to fallocate
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - tracing/histogram: Update document for KEYS_MAX size
  - tools/nolibc/string: Fix memcmp() implementation
  - kprobe: reverse kp->flags when arm_kprobe failed
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
  - btrfs: fix type of parameter generation in btrfs_get_dentry
  - coresight: cti: Fix hang in cti_disable_hw()
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
  - fscrypt: fix keyring memory leak on mount failure
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key
  - fscrypt: simplify master key locking
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  - i2c: piix4: Fix adapter not be removed in piix4_remove()
  - arm64: dts: juno: Add thermal critical trip points
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  - firmware: arm_scmi: Suppress the driver's bind attributes
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  - efi/tpm: Pass correct address to memblock_reserve
  - i2c: xiic: Add platform module alias
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
  - HID: saitek: add madcatz variant of MMO7 mouse device ID
  - scsi: core: Restrict legal sdev_state transitions via sysfs
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
  - media: meson: vdec: fix possible refcount leak in vdec_probe()
  - media: dvb-frontends/drxk: initialize err to 0
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
  - media: rkisp1: Initialize color space on resizer sink and source pads
  - s390/boot: add secure boot trailer
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
  - mtd: parsers: bcm47xxpart: Fix halfblock reads
  - mtd: parsers: bcm47xxpart: print correct offset on read error
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
  - video/fbdev/stifb: Implement the stifb_fillrect() function
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
  - mmc: sdhci-pci: Avoid comma separated statements
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
  - drm/msm/hdmi: fix IRQ lifetime
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - btrfs: fix ulist leaks in error paths of qgroup self tests
  - btrfs: fix inode list leak during backref walking at find_parent_nodes()
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
  - isdn: mISDN: netjet: fix wrong check of device registration
  - mISDN: fix possible memory leak in mISDN_register_device()
  - rose: Fix NULL pointer dereference in rose_send_frame()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - ipvs: use explicitly signed chars
  - netfilter: nf_tables: release flow rule object from commit path
  - net: sched: Fix use after free in red_enqueue()
  - ata: pata_legacy: fix pdc20230_set_piomode()
  - net: fec: fix improper use of NETDEV_TX_BUSY
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  - NFC: nxp-nci: remove unnecessary labels
  - nfc: fdp: Fix potential memory leak in fdp_nci_send()
  - nfc: fdp: drop ftrace-like debugging messages
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
  - net: dsa: Fix possible memory leaks in dsa_loop_init()
  - nfs4: Fix kmemleak when allocate slot failed
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
  - NFSv4: Fix a potential state reclaim deadlock
  - IB/hfi1: Correctly move list in sc_disable()
  - RDMA/cma: Use output interface for net_dev check
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
  - KVM: x86: Protect the unused bits in MSR exiting flags
  - x86/topology: Fix duplicated core ID within a package
  - x86/topology: Fix multiple packages shown on a single-package system
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
  - KVM: x86: Trace re-injected exceptions
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
  - KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
  - serial: 8250: Let drivers request full 16550A feature probing
  - !1423 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


