# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.40.0.118
changelog:
  - !4131 [sync] PR-4100:  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4127 [sync] PR-4022:  netfilter: nf_tables: Reject tables of unsupported family
  - !4057  ext4: correct return value of ext4_convert_meta_bg
  - !4059  ext4: synchronize the casefold bugfix from the mainline
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - netfilter: nf_tables: Reject tables of unsupported family
  - !4079 [sync] PR-4069:  tipc: fix a potential deadlock on &tx->lock
  - !4075 [sync] PR-4064:  smb: client: fix OOB in receive_encrypted_standard()
  - !4018  mm/filemap: avoid buffered read/write race to read inconsistent data
  - tipc: fix a potential deadlock on &tx->lock
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4042 [sync] PR-3981:  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - ext4: improve error handling from ext4_dirhash()
  - ext4: reject casefold inode flag without casefold feature
  - ext4: correct return value of ext4_convert_meta_bg
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - mm/filemap: avoid buffered read/write race to read inconsistent data


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.41.0.119
changelog:
  - !4336 [sync] PR-4289:  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4326 [sync] PR-4266:  ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4287 [sync] PR-4257:  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !4265 [sync] PR-4255:  drm/amdgpu: Fix potential fence use-after-free v2
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4224 [sync] PR-4213:  netlink: fix potential sleeping issue in mqueue_flush_file
  - !4207 [sync] PR-4203:  mm/dynamic_hugetlb: skip unexpected migration
  - !3866  ext4: fix some ext4_lblk_t overflow issues
  - drm/amdgpu: Fix potential fence use-after-free v2
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - mm/dynamic_hugetlb: skip unexpected migration
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
  - ext4: avoid overlapping preallocations due to overflow
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
  - ext4: add two helper functions extent_logical_end() and pa_logical_end()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.42.0.120
changelog:
  - !4499 [sync] PR-4362:  ubifs: Queue up space reservation tasks if retrying many times
  - !4448 [sync] PR-4321:  io_uring/af_unix: disable sending io_uring over sockets
  - ubifs: Queue up space reservation tasks if retrying many times
  - !4097 [sync] PR-4090:  ida: Fix crash in ida_free when the bitmap is empty
  - !4421 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - io_uring/af_unix: disable sending io_uring over sockets
  - !4119 [sync] PR-3975:  md/raid1-10: limit the number of plugged bio
  - !4276 [sync] PR-3134:  Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !3860 [sync] PR-3756:  md: mainline backport
  - !4283 [sync] PR-4270:  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - !4234 [sync] PR-3228:  net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - !4195 [sync] PR-4015:  drm/amdgpu: correct the amdgpu runtime dereference usage count
  - !4192 [sync] PR-4014:  drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - !4189 [sync] PR-4013:  drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - !4188 [sync] PR-4012:  drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - !4184 [sync] PR-4010:  drm/amd/display: Exit idle optimizations before attempt to access PHY
  - !4183 [sync] PR-3955:  drm/radeon: possible buffer overflow
  - !4227 [sync] PR-4149:  block: remove precise_iostat
  - !4350 [sync] PR-4268:  linux Mainline ubifs Fix Patch bacnport to 5.10
  - ubifs: fix possible dereference after free
  - ubi: block: Fix use-after-free in ubiblock_cleanup
  - Revert "mtd/ubi/block: Fix uaf problem in ubiblock_cleanup"
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  - net: txgbe: Fix memleak in txgbe_calc_eeprom_checksum()
  - block: remove precise_iostat
  - drm/amdgpu: correct the amdgpu runtime dereference usage count
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk.
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - drm/amd/display: Exit idle optimizations before attempt to access PHY
  - drm/radeon: possible buffer overflow
  - md/raid1-10: fix casting from randomized structure in raid1_submit_write()
  - md/raid1-10: limit the number of plugged bio
  - md/raid1-10: don't handle pluged bio by daemon thread
  - md/md-bitmap: add a new helper to unplug bitmap asynchrously
  - md/raid1-10: submit write io directly if bitmap is not enabled
  - md/raid1-10: factor out a helper to submit normal write
  - md/raid1-10: factor out a helper to add bio to plug
  - md/raid10: prevent soft lockup while flush writes
  - md: raid1/raid10: drop pending_cnt
  - md: drop queue limitation for RAID1 and RAID10
  - Revert "md/raid10: fix softlockup in raid10_unplug"
  - ida: Fix crash in ida_free when the bitmap is empty
  - md: fix error handling in md_alloc
  - md: Constify attribute_group structs
  - md: fix mddev->kobj lifetime
  - md: properly unwind when failing to add the kobject in md_alloc
  - md: extend disks_mutex coverage
  - md: add the bitmap group to the default groups for the md kobject
  - md: add error handling support for add_disk()
  - md: convert to blk_alloc_disk/blk_cleanup_disk
  - md/raid10: fix improper BUG_ON() in raise_barrier()
  - md: use msleep() in md_notify_reboot()
  - md: fix double free of mddev->private in autorun_array()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.43.0.121
changelog:
  - !4517 [sync] PR-4431: v2  patchset for CVE-2023-52340
  - !4445 [sync] PR-4290:  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4615 [sync] PR-4521:  xen-netback: don't produce zero-size SKB frags
  - !4593  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - !4550 [sync] PR-4461:  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4609 [sync] PR-4588:  fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - xen-netback: don't produce zero-size SKB frags
  - !4587 [sync] PR-4562: v4  tracing: Backport bugfixes
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
  - !3369 [sync] 22.03 LTS SP2 sync vdpa patches from branch OLK-5.10
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - trace: Fix kabi breakage in struct trace_event_file
  - tracing: Fix uaf issue when open the hist or hist_debug file
  - tracing: Have event inject files inc the trace array ref count
  - tracing: Have trace_event_file have ref counters
  - tracing: Increase trace array ref count on enable and filter files
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - ipv6: fix kabi change in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - vdpa: add vmstate header file
  - vhost-vdpa: add reset state params to indicate reset level
  - vhost-vdpa: allow set feature VHOST_F_LOG_ALL when been negotiated.
  - vhost-vdpa: fix compile warnings
  - arm64: openeuler_defconfig: add VDPA config
  - vhost-vdpa: fix msi irq request err
  - vhost-vdpa: Allow transparent MSI IOV
  - export iommu_get_resv_regions and iommu_set_resv_regions
  - vhost: add VHOST feature VHOST_BACKEND_F_BYTEMAPLOG
  - vhost-vdpa: add uAPI for device migration status
  - vdpa: add vdpa device migration status ops
  - vhost-vdpa: add uAPI for device buffer
  - vdpa: add device state operations
  - vhost-vdpa: add uAPI for logging
  - vdpa: add log operations
  - tools include UAPI: Sync linux/vhost.h with the kernel sources
  - vdpa: add get_backend_features vdpa operation
  - virtio: fix virtio transitional ids
  - virtio: update virtio id table, add transitional ids
  - PCI/IOV: Add pci_iov_vf_id() to get VF index
  - vhost_vdpa: support PACKED when setting-getting vring_base
  - vhost_vdpa: tell vqs about the negotiated
  - vhost_vdpa: fix unmap process in no-batch mode
  - vhost-vdpa: use bind_mm/unbind_mm device callbacks
  - vdpa: add bind_mm/unbind_mm callbacks
  - vhost-vdpa: vhost_vdpa_alloc_domain() should be using a const struct bus_type *
  - vhost-vdpa: free iommu domain after last use during cleanup
  - vhost-vdpa: uAPI to resume the device
  - vhost-vdpa: Introduce RESUME backend feature bit
  - vdpa: Add resume operation
  - vhost_vdpa: fix the crash in unmap a large memory
  - vhost-vdpa: fix an iotlb memory leak


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.44.0.122
changelog:
  - !4468 [sync] PR-4256:  scsi: core: Always send batch on reset or error handling command
  - !4683 [sync] PR-4662: v3  CVE-2023-52435
  - !4693  ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
  - !4627 [sync] PR-4531:  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - scsi: core: Always send batch on reset or error handling command
  - Revert "scsi: core: Add scsi_prot_ref_tag() helper"
  - Revert "scsi: core: Introduce scsi_get_sector()"
  - Revert "scsi: core: Make scsi_get_lba() return the LBA"
  - Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
  - Revert "scsi: core: Use a structure member to track the SCSI command submitter"
  - Revert "scsi: core: Always send batch on reset or error handling command"
  - scsi: core: Always send batch on reset or error handling command
  - scsi: core: Use a structure member to track the SCSI command submitter
  - scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  - scsi: core: Make scsi_get_lba() return the LBA
  - scsi: core: Introduce scsi_get_sector()
  - scsi: core: Add scsi_prot_ref_tag() helper


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.45.0.123
changelog:
  - !4957 [sync] PR-4868:  net: openvswitch: limit the number of recursions from action sets
  - !4962 [sync] PR-4940:  apparmor: avoid crash when parsed profile name is empty
  - !4934  arm64: head.S: always initialize PSTATE
  - apparmor: avoid crash when parsed profile name is empty
  - net: openvswitch: limit the number of recursions from action sets
  - arm64: head.S: always initialize PSTATE
  - !4864  ext4: regenerate buddy after block freeing failed if under fc replay
  - ext4: regenerate buddy after block freeing failed if under fc replay
  - !4756 [sync] PR-4737:  blk-mq: fix IO hang from sbitmap wakeup race
  - !4816 [sync] PR-4702:  efivarfs: force RO when remounting if SetVariable is not supported
  - !4797 [sync] PR-4747:  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - efivarfs: force RO when remounting if SetVariable is not supported
  - !4768 [sync] PR-4729:  serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
  - !4793 v2  gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
  - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
  - blk-mq: fix IO hang from sbitmap wakeup race
  - !4724 [sync] PR-4694: v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.46.0.124
changelog:
  - !5155 [sync] PR-4645:  f2fs: explicitly null-terminate the xattr list
  - !5148 [sync] PR-4925: v2  btrfs: do not ASSERT() if the newly created subvolume already got read
  - !4669 [sync] PR-4646:  binder: fix use-after-free in shinker's callback
  - !4832 [sync] PR-4803:  CVE-2024-26583
  - f2fs: explicitly null-terminate the xattr list
  - !4750 [sync] PR-4672:  uio: Fix use-after-free in uio_open
  - !5070 [sync] PR-5033: v3  Remove WQ_FLAG_BOOKMARK flag
  - btrfs: fix double free of anonymous device after snapshot creation failure
  - btrfs: do not ASSERT() if the newly created subvolume already got read
  - !5116 [sync] PR-5058:  net: fix possible store tearing in neigh_periodic_work()
  - !5087 [sync] PR-5064:  net: rds: Fix possible NULL-pointer dereference
  - !5127 [sync] PR-4891:  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !5081 [sync] PR-5051:  dm: limit the number of targets and parameter size area
  - !5002 [sync] PR-4988:  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !5109  CVE-2024-26586
  - net: fix possible store tearing in neigh_periodic_work()
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
  - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
  - !4840 [sync] PR-4742:  block: add check that partition length needs to be aligned with block size
  - !5067 [sync] PR-5032:  net/sched: act_ct: fix wild memory access when clearing fragments
  - net: rds: Fix possible NULL-pointer dereference
  - dm: limit the number of targets and parameter size area
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - net/sched: act_ct: fix wild memory access when clearing fragments
  - !4986 [sync] PR-4339: 修复pmem_legacy_device未被编译问题
  - !4965 [sync] PR-4901:  fix CVE-2021-47036
  - !5013  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5007 [sync] PR-4979:  CVE-2021-47028
  - !5016 [sync] PR-4991:  CVE-2023-52568
  - x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - mt76: mt7915: fix txrate reporting
  - mt76: mt7915: rename mt7915_mcu_get_rate_info to mt7915_mcu_get_tx_rate
  - !4733 [sync] PR-4706:  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - pmem: compile pmem legacy device while libnvdimm as a module
  - udp: properly flush normal packet at GRO time
  - udp: skip L4 aggregation for UDP tunnel packets
  - block: add check that partition length needs to be aligned with block size
  - tls: fix race between tx work scheduling and socket close
  - tls: fix race between async notify and socket close
  - net: tls: factor out tls_*crypt_async_wait()
  - tls: rx: simplify async wait
  - uio: Fix use-after-free in uio_open
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - binder: fix use-after-free in shinker's callback


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.47.0.125
changelog:
  - !5345  CVE-2023-52447
  - !5367 v2  CVE-2023-52452
  - !5295 [sync] PR-5229:  iommu/arm-smmu-v3: Disable ECMDQ before reset
  - bpf: Fix accesses to uninit stack slots
  - bpf: Fix verification of indirect var-off stack access
  - bpf: Allow reads from uninit stack
  - bpf: expose bpf_strtol and bpf_strtoul to all program types
  - bpf, verifier: Fix memory leak in array reallocation for stack state
  - bpf: verifier: Use copy_array for jmp_history
  - bpf: verifier: Improve function state reallocation
  - !5183 [sync] PR-4805:  CVE-2023-52451 backport to OLK-5.10 v2
  - bpf: Fix kabi breakage in struct bpf_map and struct bpf_map_ops
  - bpf: Defer the free of inner map when necessary
  - bpf: Set need_defer as false when clearing fd array during map free
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr()
  - !5279 [sync] PR-5246:  ceph: fix deadlock or deadcode of misusing dget()
  - !5297 [sync] PR-5240:  powerpc/lib: Validate size for vector operations
  - powerpc/lib: Validate size for vector operations
  - iommu/arm-smmu-v3: Disable ECMDQ before reset
  - !5227 [sync] PR-5197:  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !4854 [sync] PR-4847:  btrfs: mainline backport
  - ceph: fix deadlock or deadcode of misusing dget()
  - !5193 [sync] PR-5164:  nfc: nci: assert requested protocol is valid
  - !5186 [sync] PR-5156:  RDMA/srp: Do not call scsi_done() from srp_abort()
  - !5099 [sync] PR-5078:  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5202 [sync] PR-5178:  net: nfc: llcp: Add lock when modifying device list
  - net: nfc: llcp: Add lock when modifying device list
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - !5167 [sync] PR-5117:  fix CVE-2023-52527
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - l2tp: pass correct message length to ip6_append_data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - btrfs: fix deadlock when cloning inline extents and using qgroups
  - btrfs: do not start and wait for delalloc on snapshot roots on transaction commit


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.48.0.126
changelog:
  - !5535  media: pvrusb2: fix use after free on context disconnection
  - !5504 [sync] PR-5316: v2  iomap: add support to track dirty state of sub pages
  - media: pvrusb2: fix use after free on context disconnection
  - !5139 [sync] PR-4933:  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !5029 [sync] PR-4987:  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - iomap: add support to track dirty state of sub pages
  - !5440 [sync] PR-5286:  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - !5325  jfs: fix slab-out-of-bounds Read in dtSearch
  - !5330  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5437 [sync] PR-5355:  CVE-2023-52593
  - !5312  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5391 [sync] PR-5259:  CVE-2024-26627​
  - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  - wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
  - !5373 [sync] PR-5313:  bus: mhi: host: Add alignment check for event ring read pointer
  - !5289 [sync] PR-5231:  af_unix: fix lockdep positive in sk_diag_dump_icons()
  - bus: mhi: host: Add alignment check for event ring read pointer
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.49.0.127
changelog:
  - !5683 [sync] PR-5266:  llc: call sock_orphan() at release time
  - !5691  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - !5687 [sync] PR-5253:  tomoyo: fix UAF write bug in tomoyo_write_control()
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - tomoyo: fix UAF write bug in tomoyo_write_control()
  - llc: call sock_orphan() at release time
  - !5434 [sync] PR-5232:  jfs: fix cve issue
  - !5639 [sync] PR-5617: v4  Fix I/O high when memory almost met memcg limit
  - !5666 [sync] PR-5580:  CVE-2023-52622
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - !5649 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5636 [sync] PR-5518:  dm: revert partial fix for redundant bio-based IO accounting
  - !5633 [sync] PR-5521:  md/raid5: fix atomicity violation in raid5_cache_count
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5620 [sync] PR-5606:  mm/mlock: return EINVAL for illegal user memory range in mlock
  - mm/readahead: don't decrease mmap_miss when folio has workingset flags
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - !5611 [sync] PR-5447:  Fix CVE-2021-47094
  - dm: revert partial fix for redundant bio-based IO accounting
  - md/raid5: fix atomicity violation in raid5_cache_count
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding
  - KVM: x86/mmu: Factor out tdp_iter_return_to_root
  - !5472  jfs: fix array-index-out-of-bounds in dbAdjTree
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - jfs: fix array-index-out-of-bounds in diNewExt
  - jfs: fix uaf in jfs_evict_inode


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libfdisk-Fix-randomly-generated-GPT-UUID-s.patch
         backport-write-correctly-handle-wide-characters.patch
         backport-wall-convert-homebrew-buffering-to-open_memstream.patch
         backport-wall-use-fputs_careful.patch
         backport-hexdump-parse-handle-truncated-format-pattern.patch
         backport-libblkid-copy-BLKID_PARTS_FORCE_GPT-to-whole-disk-pr.patch
         backport-lscpu-fix-p-output-all-caches-delimiter.patch
         backport-add-return-in-supam_conv-function.patch
         backport-wrap-return-in-else-directive-to-avoid-dead-code.patch
         backport-sulogin-ignore-none-existing-console-devices.patch
         backport-sulogin-fix-KDGKBMODE-ifdef.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lib-caputils-fix-integer-handling-issues-coverity-sc.patch
         backport-unshare-Move-implementation-of-keep-caps-option-to-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-libblkid-jfs-avoid-undefined-shift.patch
         backport-cfdisk-add-hint-about-labels-for-bootable-flag.patch
         backport-logger-initialize-socket-credentials-contol-union.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-22
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-column-fix-buffer-overflow-when-l-specified.patch
         backport-column-fix-greedy-mode-on-l.patch
         backport-column-fix-memory-leak.patch
         backport-column-fix-l.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-23
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-scriptreplay-support-ctrl-s-and-ctrl-g.patch
         backport-login-use-correct-terminal-fd-during-setup.patch
         backport-login-prevent-undefined-ioctl-and-tcsetattr-calls.patch
         backport-libblkid-avoid-memory-leak-of-cachefile-path.patch
         backport-more-avoid-out-of-bound-access.patch
         backport-lslogins-fix-realloc-loop-allocation-size.patch
         backport-ldattach-don-t-call-exit-from-signal-handler.patch
         backport-libblkid-ntfs-validate-that-sector_size-is-a-power-o.patch
         backport-blkid-fix-call-to-err_exclusive_options.patch
         backport-libblkid-reset-errno-before-calling-probefuncs.patch
         backport-lib-path-fix-possible-out-of-boundary-access.patch
         backport-libmount-improve-mnt_table_next_child_fs.patch
         backport-libmount-fix-possible-NULL-dereference-coverity-scan.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
  	[add]backport-libsmartcols-drop-spourious-newline-in-between-strea.patch
  	backport-libsmartcols-flush-correct-stream.patch
  	backport-libsmartcols-only-recognize-closed-object-as-final-e.patch
  	backport-cal-avoid-out-of-bound-write.patch
  	backport-libfdisk-sun-properly-initialize-partition-data.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:solve the issue of ext4 is incorrectly probed as drbd
          [add]backport-include-c.h-add-helpers-for-unaligned-structure-acce.patch
          backport-libblkid-probe-read-data-in-chunks.patch
          backport-libblkid-avoid-aligning-out-of-probing-area.patch
          backport-libblkid-drbd-validate-zero-padding.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-receive.patch
         backport-libblkid-hfsplus-reduce-false-positive.patch
         backport-wall-fix-calloc-cal-Werror-calloc-transposed-args.patch
         backport-libblkid-drbd-reduce-false-positive.patch
         backport-lib-cpuset-exit-early-from-cpulist_parse.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-sys-utils-lscpu-Unblock-SIGSEGV-before-vmware_bdoor.patch
         backport-libblkid-Check-offset-in-LUKS2-header.patch
         backport-more-fix-poll-use.patch


