# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-8
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-21
changelog:
  - Type:CVE
  - CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-23
changelog:
  - Type:CVE
  - CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
  - SUG:NA
  - DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737


author: chengyechun <chengyechun1@huawei.com> - 32:9.16.23-25
changelog:
  - Type:CVE
  - CVE:CVE-2024-1737
  - SUG:NA
  - DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
         The default value both of max-records-per-type and max-types-per-name is 5000


author: yeqinglong <yeqinglong@kylinsec.com.cn> - 2.37-24
changelog:
  - DESC:Add sw_64 support
  - DESC:Add LoongArch support
  - DESC:Fix LoongArch PLT entry generate bug
  - DESC:Add .equ support for LoongArch and fix some bugs


author: Funda Wang <fundawang@yeah.net> - 2.37-31
changelog:
  - Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
    symbols without version info.
  - Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-207.0.0.107
changelog:
  - !8599  Bluetooth: hci_core: Fix possible buffer overflow
  - !8949  CVE-2022-48652
  - !8602  netfilter: nf_tables: set dormant flag on hook register failure
  - !8867  ipv6: prevent NULL dereference in ip6_output()
  - !8779  smb: client: fix UAF in smb2_reconnect_server()
  - !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
  - !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - !8711  ubifs: Set page uptodate in the correct place
  - !8860  blk-iocost: do not WARN if iocg was already offlined
  - !8639  s390/qeth: Fix kernel panic after setting hsuid
  - !8946  usb: typec: ucsi: Limit read size on v1.2
  - !8969  Fix CVE-2024-36949
  - cvm_tsi: Fix security issue for Confidential cVM TSI
  - !8216  ACPI: video: check for error while searching for backlight device parent
  - !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
  - !8838  blk-iocost: avoid out of bounds shift
  - !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdkfd: Rework kfd_locked handling
  - !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - ice: Fix crash by keep old cfg when update TCs more than queues
  - ice: ethtool: Prohibit improper channel config for DCB
  - !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - !6695  netfilter: nft_set_pipapo: do not free live element
  - usb: typec: ucsi: Limit read size on v1.2
  - !8891  net: fix out-of-bounds access in ops_init
  - !8871 add sdma-dae for openeuler 22.03 SP4
  - !8762  tipc: fix UAF in error path
  - !8742  octeontx2-af: avoid off-by-one read from userspace
  - !8734  mptcp: ensure snd_nxt is properly initialized on connect
  - !8634  batman-adv: Avoid infinite loop trying to resize local TT
  - !8736  net: hns3: fix kernel crash when devlink reload during initialization
  - !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - !3547  fs: mitigatin cacheline false sharing in struct file
  - !8887  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
  - net/mlx5e: Fix use-after-free of encap entry in neigh update handler
  - ALSA: scarlett2: Add missing error checks to *_ctl_get()
  - !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - drivers: misc: sdma-dae: enable sdma_dae for arm64
  - drivers: misc: sdma-dae: support page fault preprocess
  - gpiolib: cdev: fix uninitialised kfifo
  - !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8666  phonet/pep: fix racy skb_queue_empty() use
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs
  - drivers: misc: sdma-dae: support interrupt init and handle
  - drivers: misc: sdma-dae: support sqe task send and execute
  - drivers: misc: sdma-dae: support channel management
  - drivers: misc: sdma-dae: support getting streamID
  - drivers: misc: sdma-dae: support initializ sdma driver
  - ipv6: prevent NULL dereference in ip6_output()
  - blk-iocost: do not WARN if iocg was already offlined
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8684  tcp: properly terminate timers for kernel sockets
  - !8629  erspan: make sure erspan_base_hdr is present in skb->head
  - blk-iocost: avoid out of bounds shift
  - !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8550  tipc: fix a possible memleak in tipc_buf_append
  - !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8808 v2  Add support for PCC Operation Region
  - !8623  fs/9p: only translate RWX permissions for plain 9P2000
  - !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - arm64: config: Enable ACPI_PCC
  - ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
  - ACPI: PCC: Fix unintentional integer overflow
  - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
  - ACPI: PCC: replace wait_for_completion()
  - ACPI: PCC: Release resources on address space setup failure path
  - ACPI: PCC: pcc_ctx can be static
  - ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
  - ACPICA: Add support for PCC Opregion special context data
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - smb: client: fix UAF in smb2_reconnect_server()
  - tipc: fix UAF in error path
  - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
  - octeontx2-af: avoid off-by-one read from userspace
  - net: hns3: fix kernel crash when devlink reload during initialization
  - mptcp: ensure snd_nxt is properly initialized on connect
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - ubifs: Set page uptodate in the correct place
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - tcp: properly terminate timers for kernel sockets
  - phonet/pep: fix racy skb_queue_empty() use
  - s390/qeth: Fix kernel panic after setting hsuid
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - batman-adv: Avoid infinite loop trying to resize local TT
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: nf_tables: set dormant flag on hook register failure
  - Bluetooth: hci_core: Fix possible buffer overflow
  - virtio-blk: fix implicit overflow on virtio_max_dma_size
  - tipc: fix a possible memleak in tipc_buf_append
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - ACPI: video: check for error while searching for backlight device parent
  - netfilter: nft_set_pipapo: do not free live element
  - fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
  - fs: mitigatin cacheline false sharing in struct file


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-208.0.0.108
changelog:
  - !9084 v5  xfs: atomic writes for xfs
  - block: fix kabi in struct queue_limits
  - xfs: make bunmapi observe forcealigin
  - xfs: Only free full extents for forcealign
  - xfs: Update xfs_is_falloc_aligned() mask for forcealign
  - xfs: fix set xflags fail when inode has extent hit
  - xfs: support atomic write ioctl
  - fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
  - fs: xfs: Validate atomic writes
  - fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
  - fs: iomap: Atomic write support
  - fs: Add FS_XFLAG_ATOMICWRITES flag
  - fs: xfs: iomap: Sub-extent zeroing
  - fs: iomap: Sub-extent zeroing
  - fs: xfs: Do not free EOF blocks for forcealign
  - fs: xfs: Make file data allocations observe the 'forcealign' flag
  - fs: xfs: Enable file data forcealign feature
  - fs: xfs: Introduce FORCEALIGN inode flag
  - nvme: Atomic write support
  - block: Add core atomic write support
  - fs: Initial atomic write support
  - block: get atomic write max sectors
  - !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
  - !9063 v3  block: support to dispatch bio asynchronously
  - !9066 change sdma-dae default mode to n
  - !8827 v2  iomap: fix sub-page not set dirty state
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
  - !9055  CVE-2024-36020
  - !9015  CVE-2024-36953
  - !9014  drm/vc4: don't check if plane->state->fb == state->fb
  - config: enable CONFIG_BLK_CGROUP_IOCOST by default
  - drivers: misc: sdma-dae: not compile sdma-dae by default
  - block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
  - block: support to dispatch bio asynchronously
  - !9050  CVE-2024-35796
  - roh/hns3: Add ROH client case in hclgevf_init_client_instance.
  - i40e: fix vf may be used uninitialized in this function warning
  - !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - net: ll_temac: platform_get_resource replaced by wrong function
  - !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
  - !8908  Refactor hbmdev a bit
  - !9001 roh/hns3: Fix IMP reset vlan unusable.
  - !8774  CVE-2024-36914
  - !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - !8719  CVE-2024-35887
  - !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
  - !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - !8921  hugetlbfs: fix hugetlbfs_statfs() locking
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
  - drm/vc4: don't check if plane->state->fb == state->fb
  - roh/hns3: Fix IMP reset vlan unusable.
  - !8965  cvm: enhance security for cvm host feature
  - !8982  fix CVE-2024-36905
  - !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - cvm: enhance security for cvm host feature
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - arm64: config: Open the hbmdev related config
  - soc: hisilicon: Don't poweroff if memblocks don't offlined
  - soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - iomap: Ensure sub-page dirty state is set during mmap writes
  - Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
  - drm/amd/display: Skip on writeback when it's not applicable
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
  - mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-209.0.0.109
changelog:
  - !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - !9112  Backport some optimizing patches for kunpeng920
  - !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
  - !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
  - ARM: 9278/1: kfence: only handle translation faults
  - arm64: mm: HVO: support BBM of vmemmap pgtable safely
  - arm64: mm: kfence: only handle translation faults
  - mm: HVO: introduce helper function to update and flush pgtable
  - genirq: introduce handle_fasteoi_edge_irq for phytium
  - genirq: introduce handle_fasteoi_edge_irq flow handler
  - !8753  memcg: fix input of try_to_free_mem_cgroup_pages
  - !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !9138 v2  CVE-2024-36971
  - !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
  - !9073 v2  Fix UAF problem of hpool
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
  - !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - !8700  wifi: cfg80211: check A-MSDU format more carefully
  - net: fix kabi breakage in struct dst_ops
  - net: fix __dst_negative_advice() race
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  - !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - arm64: syscall: unmask DAIF for tracing status
  - arm64: Snapshot thread flags
  - sched: Snapshot thread flags
  - entry: Snapshot thread flags
  - x86: Snapshot thread flags
  - thread_info: Add helpers to snapshot thread flags
  - irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
  - sched/fair: Optimize test_idle_cores() for !SMT
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
  - !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
  - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - !9074 [sync] PR-8963:  Fix CVE-2024-35915
  - !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
  - !9081 v2  arm64: mm: Replace global variable in pbha with static key
  - Bluetooth: L2CAP: Fix not validating setsockopt user input
  - arm64: mm: Replace global variable in pbha with static key
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_rx_work
  - nfc: nci: Fix kcov check in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - mm/dynamic_hugetlb: use rcu lock to protect hpool
  - mm/dynamic_hugetlb: simplify the refcount code
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input
  - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  - memcg: fix input of try_to_free_mem_cgroup_pages
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
  - wifi: cfg80211: check A-MSDU format more carefully
  - rpmsg: virtio: Free driver_override when rpmsg_remove()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-210.0.0.110
changelog:
  - !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9103  ksmbd: no response from compound read
  - !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
  - !9283 hns3 udma: support non share jfr mode in UM
  - !9277 ima: Fix violation digests extending issue in cvm
  - hns3 udma: kernel support non share jfr mode in UM mode
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  - !9244 urma: cannot uninstall uburma driver
  - !9250  Fix token error issue when concurrent calls
  - !9241 v2  Bugfix backport for rcu
  - urma: cannot uninstall uburma driver
  - Fix token error issue when concurrent calls
  - !9180  wifi: wilc1000: fix RCU usage in connect path
  - !9212  drm/amd/display: Fix division by zero in setup_dsc_config
  - ima: Fix violation digests extending issue in cvm
  - !9239  Fix allmodconfig build frame size error
  - !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
  - srcu: Fix callbacks acceleration mishandling
  - entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
  - rcu: Defer RCU kthreads wakeup when CPU is dying
  - RDMA/hiroce3: Fix allmodconfig build frame size error
  - !7729  loop: use lo->lo_disk for kobject_uevent
  - !9211  memcg: attach memcg async reclaim worker to curcpu
  - !9168  UBIFS: fixes a series of issues that caused by power cut
  - !9000  media: tc358743: register v4l2 async device only after successful setup
  - !9087  fs/9p: fix uninitialized values during inode evict
  - drm/amd/display: Fix division by zero in setup_dsc_config
  - memcg: attach memcg async reclaim worker to curcpu
  - sched: smart_grid: fix potential NULL pointer dereference
  - spi: fix kabi breakage in struct spi_controller
  - spi: fix use-after-free of the add_lock mutex
  - spi: Fix deadlock when adding SPI controllers on SPI buses
  - wifi: wilc1000: fix RCU usage in connect path
  - ubifs: dbg_orphan_check: Fix missed key type checking
  - ubifs: Fix unattached inode when powercut happens in creating
  - ubifs: Fix space leak when powercut happens in linking tmpfile
  - ubifs: Move ui->data initialization after initializing security
  - ubifs: Fix adding orphan entry twice for the same inode
  - ubifs: Remove insert_dead_orphan from replaying orphan process
  - ubifs: Don't add xattr inode into orphan area
  - ubifs: Fix unattached xattr inode if powercut happens after deleting
  - ubifs: Fix some kernel-doc comments
  - ubifs: Fix spelling mistakes
  - ksmbd: no response from compound read
  - fs/9p: fix uninitialized values during inode evict
  - media: tc358743: register v4l2 async device only after successful setup
  - loop: use lo->lo_disk for kobject_uevent


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-211.0.0.111
changelog:
  - !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
  - Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-212.0.0.112
changelog:
  - !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
  - sched: ARM64 enables SIS_PROP and disables SIS_UTIL"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-213.0.0.113
changelog:
  - !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9264  ring-buffer: Fix a race between readers and resize checks
  - !9305  CVE-2024-26661 following bugfix
  - !9246  ksmbd: no response from compound read
  - !9350  tracing: Fix permissions for the buffer_percent file
  - tracing: Fix permissions for the buffer_percent file
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - drm/amd/display: Fix && vs || typos
  - drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
  - Revert "drm/amd/display: Fix && vs || typos"
  - ring-buffer: Fix a race between readers and resize checks
  - ksmbd: no response from compound read


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-214.0.0.114
changelog:
  - !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
  - fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-216.0.0.115
changelog:
  - !9507  Enable SIS_UTIL for arm64 and optimize load_balance
  - !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
  - Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
  - config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - sched/numa: Fix numa imbalance in load_balance()
  - Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
  - Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
  - !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
  - !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
  - block: fix WARNING in init_blk_queue_async_dispatch
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - ksmbd: fix UAF issue in ksmbd_tcp_new_connection()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-217.0.0.116
changelog:
  - !9160  xfs: don't use current->journal_info
  - !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - !9644  fix uaf when proc_cpuset_show
  - !9532  CVE-2024-37356
  - !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
  - cgroup: fix uaf when proc_cpuset_show
  - !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - !9559  CVE-2024-38597
  - !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
  - !9595  drm/arm/malidp: fix a possible null pointer dereference
  - !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
  - !9504  um: Add winch to winch_handlers before registering winch IRQ
  - drm/arm/malidp: fix a possible null pointer dereference
  - ARM: 9170/1: fix panic when kasan and kprobe are enabled
  - !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
  - !9540  net/mlx5e: Avoid field-overflowing memcpy()
  - !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !9563  fs/ntfs3: Check 'folio' pointer for NULL
  - !9383  serial: max3100: Update uart_driver_registered on driver removal
  - btrfs: fix crash on racing fsync and size-extending write into prealloc
  - !8744  ext4 bugfix from mainline
  - !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
  - !9453  jffs2: prevent xattr node from overflowing the eraseblock
  - !9202  dyndbg: fix old BUG_ON in >control parser
  - !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
  - !9190  clk: Fix clk_core_get NULL dereference
  - !9188  net: phy: fix phy_get_internal_delay accessing an empty array
  - !9462 v2  CVE-2024-27032
  - !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - !9425  ASoC: SOF: Fix DSP oops stack dump output contents
  - !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9297  CVE-2021-47599
  - !9401  Fix CVE-2024-31076
  - !9434  cvm: delete dead code and resolve macro definition holes
  - !9395  CVE-2024-38587
  - !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9199  init/main.c: Fix potential static_command_line memory overflow
  - !8683 v4  Fix CVE-2024-35879
  - !9339  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
  - !9442  net/mlx5: Discard command completions in internal error
  - !9290  net: bridge: xmit: make sure we have at least eth header len bytes
  - !9284  of: module: add buffer overflow check in of_modalias()
  - !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - !9558  CVE-2024-39362
  - !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - !9527  media: lgdt3306a: Add a check against null-pointer-def
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - fs/ntfs3: Check 'folio' pointer for NULL
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - i2c: acpi: Unbind mux adapters before delete
  - i2c: add fwnode APIs
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - net/mlx5e: Avoid field-overflowing memcpy()
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9511  blk-throttle: check for overflow in calculate_bytes_allowed
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
  - blk-throttle: check for overflow in calculate_bytes_allowed
  - blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
  - blk-throttle: factor out code to calculate ios/bytes_allowed
  - um: Add winch to winch_handlers before registering winch IRQ
  - netfilter: nf_tables: flush pending destroy work before exit_net release
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - net/mlx5: Add a timeout to acquire the command queue semaphore
  - f2fs: fix to avoid potential panic during recovery
  - f2fs: fix to check return value of f2fs_reserve_new_block()
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
  - jffs2: prevent xattr node from overflowing the eraseblock
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  - net/mlx5: Discard command completions in internal error
  - cvm: delete dead code and resolve macro definition holes
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
  - ASoC: SOF: Fix DSP oops stack dump output contents
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - serial: max3100: Update uart_driver_registered on driver removal
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - btrfs: remove stale comment about the btrfs_show_devname
  - btrfs: update latest_dev when we create a sprout device
  - btrfs: use latest_dev in btrfs_show_devname
  - btrfs: convert latest_bdev type to btrfs_device and rename
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - of: module: add buffer overflow check in of_modalias()
  - dyndbg: fix old BUG_ON in >control parser
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
  - init/main.c: Fix potential static_command_line memory overflow
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - clk: Fix clk_core_get NULL dereference
  - net: phy: fix phy_get_internal_delay accessing an empty array
  - xfs: don't use current->journal_info
  - drm/phytium: Replace default efi fb0 with dc fb
  - ext4: fix warning in ext4_dio_write_end_io()
  - ext4: properly sync file size update after O_SYNC direct IO
  - iomap: update ki_pos a little later in iomap_dio_complete
  - driver core: Fix kabi broken
  - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  - driver core: Introduce device_link_wait_removal()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-218.0.0.117
changelog:
  - !9851  net/sched: act_skbmod: prevent kernel-infoleak
  - !9853  nilfs2: fix use-after-free of timer for log writer thread
  - !9831  mmc: davinci: Don't strip remove function when driver is builtin
  - !8096  Fix CVE-2024-35988
  - nilfs2: fix use-after-free of timer for log writer thread
  - net/sched: act_skbmod: prevent kernel-infoleak
  - mmc: davinci: Don't strip remove function when driver is builtin
  - !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - !9820  kdb: Fix buffer overflow during tab-complete
  - kdb: Fix buffer overflow during tab-complete
  - !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9783  CVE-2024-38598
  - !9772  btrfs: fix use-after-free after failure to create a snapshot
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  - !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
  - !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - !9363  fs/ntfs3: Use variable length array instead of fixed size
  - !9712  fix CVE-2024-38540
  - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  - net: fix one NULL pointer dereference bug in net_rship module
  - md: fix resync softlockup when bitmap size is less than array size
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  - Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
  - !9373  ALSA: core: Fix NULL module pointer assignment at card init
  - !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
  - !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - !9768  iomap: Don't finish dio under irq when there exists pages
  - !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !9731 v2  Backport bpf bugfixes
  - btrfs: fix use-after-free after failure to create a snapshot
  - iomap: Don't finish dio under irq when there exists pages
  - !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
  - !9764  wifi: ar5523: enable proper endpoint verification
  - !9711  fix CVE-2024-38615
  - !9761  CVE-2024-26816
  - !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  - wifi: ar5523: enable proper endpoint verification
  - !9716  ax25: Fix reference count leak issues of ax25_dev
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - x86, relocs: Ignore relocations in .notes section
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !9672  ax25: Fix reference count leak issue of net_device
  - !9735  net/9p: fix uninit-value in p9_client_rpc()
  - !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - net/9p: fix uninit-value in p9_client_rpc()
  - bpf: ensure main program has an extable
  - bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
  - bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation
  - bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
  - bpf: Fix memory leaks in __check_func_call
  - !9440  fix CVE-2024-38621
  - !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
  - KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
  - ax25: Fix reference count leak issues of ax25_dev
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
  - cpufreq: exit() callback is optional
  - cpufreq: Rearrange locking in cpufreq_remove_dev()
  - cpufreq: Split cpufreq_offline()
  - cpufreq: Reorganize checks in cpufreq_offline()
  - !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - net/hinic3: Add pcie device ID adaption for DPU_NIC card
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9640  CVE-2024-38582
  - !9662  tls: fix missing memory barrier in tls_init
  - !9657 v2  CVE-2024-38586
  - !9686  greybus: lights: check return of get_channel_from_mode
  - !9675  crypto: bcm - Fix pointer arithmetic
  - greybus: lights: check return of get_channel_from_mode
  - crypto: bcm - Fix pointer arithmetic
  - ax25: Fix reference count leak issue of net_device
  - tls: fix missing memory barrier in tls_init
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  - r8169: remove nr_frags argument from rtl_tx_slots_avail
  - r8169: improve rtl8169_start_xmit
  - r8169: improve rtl_tx
  - r8169: use READ_ONCE in rtl_tx_slots_avail
  - r8169: remove unneeded memory barrier in rtl_tx
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - wifi: carl9170: add a proper sanity check for endpoints
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - ALSA: core: Fix NULL module pointer assignment at card init
  - fs/ntfs3: Use variable length array instead of fixed size
  - riscv: Fix TASK_SIZE on 64-bit NOMMU
  - riscv: fix VMALLOC_START definition


author: Li Nan <linan122@huawei.com> - 5.10.0-219.0.0.118
changelog:
  - !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - !10031  ipv6: prevent possible NULL dereference in rt6_probe()
  - !10060  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - !9990  netpoll: Fix race condition in netpoll_owner_active
  - !10040  lib/generic-radix-tree.c: Don't overflow in peek()
  - !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
  - !9968  CVE-2024-40972
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9926  ocfs2: fix races between hole punching and AIO+DIO
  - !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9908  sock_map: avoid race between sock_map_close and sk_psock_put
  - !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9936  fix CVE-2024-40934
  - !9953  drm/komeda: check for error-valued pointer
  - lib/generic-radix-tree.c: Don't overflow in peek()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - netpoll: Fix race condition in netpoll_owner_active
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - !9871  cifs: Fix deadlock in cifs_writepages during reconnect
  - drm/komeda: check for error-valued pointer
  - !9897  ionic: fix use after netif_napi_del()
  - !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9905  mptcp: ensure snd_una is properly initialized on connect
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  - ocfs2: fix races between hole punching and AIO+DIO
  - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9884 roh/core: Support macvlan in roh.
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - !9825  smb: client: fix potential deadlock when releasing mids
  - !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - mptcp: ensure snd_una is properly initialized on connect
  - ionic: fix use after netif_napi_del()
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9368  CVE-2024-27416
  - !9879  fs: improve dump_mapping() robustness
  - !9872  CVE-2024-38570
  - !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - fs: improve dump_mapping() robustness
  - roh/core: Support macvlan in roh.
  - gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Rename sd_{ glock => kill }_wait
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - !9745  CVE-2024-39469
  - !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - smb: client: fix potential deadlock when releasing mids
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST


author: Li Nan <linan122@huawei.com> - 5.10.0-220.0.0.119
changelog:
  - !9035  keys: Fix overwrite of key expiration on instantiation
  - !9182  netfilter: nf_tables: restore set elements when delete set fails
  - !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
  - !10303  netfilter: nf_tables: do not compare internal table flags on updates
  - !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10280 v2  CVE-2022-48816
  - !9780  ksmbd: fix wrong DataOffset validation of create context
  - !10278  usb-storage: alauda: Check whether the media is initialized
  - netfilter: nf_tables: do not compare internal table flags on updates
  - !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - !10290 Backport 5.10.210 LTS patches from upstream
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
  - net: bcmgenet: Fix EEE implementation
  - drm/msm/dsi: Enable runtime PM
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
  - PM: runtime: add devm_pm_runtime_enable helper
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
  - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
  - scripts/decode_stacktrace.sh: optionally use LLVM utilities
  - scripts: decode_stacktrace: demangle Rust symbols
  - scripts/decode_stacktrace.sh: support old bash version
  - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
  - serial: 8250_exar: Set missing rs485_supported flag
  - serial: 8250_exar: Fill in rs485_supported
  - serial: Add rs485_supported to uart_port
  - mips: Fix max_mapnr being uninitialized on early stages
  - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
  - bus: moxtet: Add spi device table
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
  - tracing: Inform kmemleak of saved_cmdlines allocation
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - of: property: fix typo in io-channels
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit
  - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
  - nfp: flower: prevent re-adding mac index for bonded port
  - nfp: use correct macro for LengthSelect in BAR config
  - ALSA: hda/conexant: Add quirk for SWS JS201D
  - mmc: slot-gpio: Allow non-sleeping GPIO ro
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
  - serial: max310x: improve crystal stable clock detection
  - serial: max310x: set default value when reading clock ready bit
  - ring-buffer: Clean ring_buffer_poll_wait() error return
  - iio: accel: bma400: Fix a compilation problem
  - staging: iio: ad5933: fix type mismatch regression
  - tracing: Fix wasted memory in saved_cmdlines logic
  - misc: fastrpc: Mark all sessions as invalid in cb_remove
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
  - xen-netback: properly sync TX responses
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian
  - firewire: core: correct documentation of fw_csr_string() kernel API
  - lsm: fix the logic in security_inode_getsecctx()
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
  - modpost: trim leading spaces when processing source files list
  - usb: f_mass_storage: forbid async queue when shutdown happen
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
  - usb: ucsi_acpi: Fix command completion handling
  - HID: wacom: Do not register input devices until after hid_hw_start
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
  - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
  - i40e: Fix waiting for queues of all VSIs to be disabled
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
  - net: sysfs: Fix /sys/class/net/<iface> path for statistics
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
  - spi: ppc4xx: Drop write-only variable
  - of: unittest: Fix compile in the non-dynamic case
  - btrfs: send: return EOPNOTSUPP on unknown flags
  - btrfs: forbid deleting live subvol qgroup
  - btrfs: forbid creating subvol qgroups
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
  - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
  - USB: serial: cp210x: add ID for IMST iM871A-USB
  - USB: serial: option: add Fibocom FM101-GL variant
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
  - net/af_iucv: clean up a try_then_request_module()
  - netfilter: nft_ct: reject direction for ct id
  - netfilter: nft_compat: restrict match/target protocol to u16
  - netfilter: nft_compat: reject unused compat flag
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping
  - hwmon: (coretemp) Fix out-of-bounds memory access
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading
  - atm: idt77252: fix a memleak in open_card_ubr0
  - selftests: net: avoid just another constant wait
  - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
  - dmaengine: ti: k3-udma: Report short packet errors
  - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
  - bonding: remove print in bond_verify_device_path
  - HID: apple: Add 2021 magic keyboard FN key mapping
  - HID: apple: Add support for the 2021 Magic Keyboard
  - net: sysfs: Fix /sys/class/net/<iface> path
  - net: ipv4: fix a memleak in ip_setup_cork
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
  - ixgbe: Refactor overtemp event handling
  - ixgbe: Refactor returning internal error codes
  - ixgbe: Remove non-inclusive language
  - scsi: isci: Fix an error code problem in isci_io_request_build()
  - drm: using mul_u32_u32() requires linux/math64.h
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  - perf: Fix the nr_addr_filters fix
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
  - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - libsubcmd: Fix memory leak in uniq()
  - PCI/AER: Decode Requester ID when no error info found
  - fs/kernfs/dir: obey S_ISGID
  - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  - usb: hub: Replace hardcoded quirk value with BIT() macro
  - PCI: Only override AMD USB controller if required
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies
  - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
  - i3c: master: cdns: Update maximum prescaler value for i2c clock
  - um: net: Fix return type of uml_net_start_xmit()
  - um: Don't use vfprintf() for os_info()
  - um: Fix naming clash between UML and scheduler
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
  - drm/amdgpu: Let KFD sync with VM fences
  - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
  - drm/msm/dpu: Ratelimit framedone timeout msgs
  - media: ddbridge: fix an error code problem in ddb_probe
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
  - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
  - ALSA: hda: Intel: add HDA_ARL PCI ID support
  - PCI: add INTEL_HDA_ARL to pci_ids.h
  - media: rockchip: rga: fix swizzling for RGB formats
  - media: stk1160: Fixed high volume of stk1160_dbg messages
  - drm/mipi-dsi: Fix detach call without attach
  - drm/framebuffer: Fix use of uninitialized variable
  - drm/drm_file: fix use of uninitialized variable
  - f2fs: fix write pointers on zoned device after roll forward
  - drm/amd/display: Fix tiled display misalignment
  - fast_dput(): handle underflows gracefully
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
  - ALSA: hda: Refer to correct stream index at loops
  - i40e: Fix VF disable behavior to block all traffic
  - Bluetooth: L2CAP: Fix possible multiple reject send
  - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
  - md: Whenassemble the array, consult the superblock of the freshest device
  - block: prevent an integer overflow in bvec_try_merge_hw_page
  - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
  - ARM: dts: imx23/28: Fix the DMA controller node name
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
  - ARM: dts: imx27-apf27dev: Fix LED name
  - ARM: dts: imx25/27: Pass timing0
  - ARM: dts: imx25: Fix the iim compatible string
  - ionic: pass opcode to devcmd_wait
  - ARM: dts: imx1: Fix sram node
  - ARM: dts: imx27: Fix sram node
  - ARM: dts: imx: Use flash@0,0 pattern
  - ARM: dts: imx25/27-eukrea: Fix RTC node name
  - ARM: dts: rockchip: fix rk3036 hdmi ports node
  - bpf: Set uattr->batch.count as zero before batched update or deletion
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
  - scsi: libfc: Don't schedule abort twice
  - ARM: dts: imx7s: Fix nand-controller #size-cells
  - ARM: dts: imx7s: Fix lcdif compatible
  - ARM: dts: imx7d: Fix coresight funnel ports
  - scsi: arcmsr: Support new PCI device IDs 1883 and 1886
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  - selftests/bpf: Fix pyperf180 compilation failure with clang18
  - selftests/bpf: satisfy compiler by having explicit return in btf test
  - ext4: fix inconsistent between segment fstrim and full fstrim
  - ecryptfs: Reject casefold directory inodes
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
  - crypto: stm32/crc32 - fix parsing list of devices
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - ACPI: extlog: fix NULL pointer dereference check
  - PNP: ACPI: fix fortify warning
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
  - audit: Send netlink ACK before setting connection in auditd_set
  - regulator: core: Only increment use_count when enable_count changes
  - debugobjects: Stop accessing objects after releasing hash bucket lock
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
  - powerpc: Fix build error due to is_valid_bugaddr()
  - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
  - x86/entry/ia32: Ensure s32 is sign extended to s64
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
  - gpio: eic-sprd: Clear interrupt after set the interrupt type
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane
  - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
  - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
  - arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
  - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
  - drm/bridge: nxp-ptn3460: simplify some error checking
  - drm/tidss: Fix atomic_flush check
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
  - exec: Fix error handling in begin_new_exec()
  - rbd: don't move requests to the running list on errors
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
  - btrfs: don't warn if discard range is not aligned to sector
  - btrfs: tree-checker: fix inline ref size in error messages
  - btrfs: ref-verify: free ref cache before clearing mount opt
  - net: fec: fix the unhandled context fault from smmu
  - fjes: fix memleaks in fjes_hw_setup
  - selftests: netdevsim: fix the udp_tunnel_nic test
  - net: mvpp2: clear BM pool before initialization
  - netfilter: nf_tables: validate NFPROTO_* family
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
  - net/mlx5: DR, Use the right GVMI number for drop action
  - tcp: Add memory barrier to tcp_push()
  - afs: Hide silly-rename files from userspace
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - bnxt_en: Wait for FLR to complete during probe
  - mm: vmalloc: introduce array allocation functions
  - block: Remove special-casing of compound pages
  - nouveau/vmm: don't set addr on the fail path to avoid warning
  - rtc: Adjust failure return code for cmos_set_alarm()
  - mmc: mmc_spi: remove custom DMA mapped buffers
  - mmc: core: Use mrq.sbc in close-ended ffu
  - scripts/get_abi: fix source path leak
  - lsm: new security_file_ioctl_compat() hook
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
  - parisc/firmware: Fix F-extend for PDC addresses
  - PM: hibernate: Enforce ordering during image compression/decompression
  - crypto: api - Disallow identical driver names
  - ext4: allow for the last group to be marked as trimmed
  - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
  - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
  - iio: adc: ad7091r: Allow users to configure device events
  - iio: adc: ad7091r: Set alert bit in config register
  - serial: sc16is7xx: add check for unsupported SPI modes during probe
  - spi: introduce SPI_MODE_X_MASK macro
  - serial: sc16is7xx: set safe default SPI clock frequency
  - units: add the HZ macros
  - units: change from 'L' to 'UL'
  - PCI: mediatek: Clear interrupt status before dispatching handler
  - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
  - usb: cdns3: fix iso transfer error when mult is not zero
  - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
  - usb: cdns3: fix uvc failure work since sg support enabled
  - usb: cdns3: Fixes for sparse warnings
  - !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10224  scsi: ufs: Fix a deadlock in the error handler
  - SUNRPC: Do not dereference non-socket transports in sysfs
  - SUNRPC: lock against ->sock changing during sysfs read
  - !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
  - usb-storage: alauda: Check whether the media is initialized
  - !10232  fix CVE-2024-41007
  - !10202  net: dsa: seville: register the mdiobus under devres
  - !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - !9430  CVE-2022-48703
  - !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10189  fix CVE-2024-40915
  - !10187  fix CVE-2021-47205
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - RDMA/hns: Fix mbx timing out before CMD execution is completed
  - RDMA/hns: Fix insufficient extend DB for VFs.
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge
  - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR
  - RDMA/hns: Fix unmatch exception handling when init eq table fails
  - RDMA/hns: Check atomic wr length
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10210 hns3 udma: functions related to CQ bank IDs are supported.
  - !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
  - Bluetooth: hci_core: Fix leaking sent_cmd skb
  - !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport->dev
  - !9913  powerpc/pseries: Enforce hcall result buffer validity and size
  - !10217  CVE-2024-35931
  - !10061 Backport bugfixes for RDMA/hns from mainline linux
  - !10046  nfs: Ensure that the NFS client returns a correct writeback error code
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - !10222  bpf: Fix overrunning reservations in ringbuf
  - !10203  dma-mapping: benchmark: fix node id validation
  - !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
  - !10019  drm/exynos/vidi: fix memory leak in .get_modes()
  - !10178  ima: Fix use-after-free on a dentry's dname.name
  - scsi: ufs: Fix a deadlock in the error handler
  - bpf: Fix overrunning reservations in ringbuf
  - drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - hns3 udma: functions related to CQ bank IDs are supported.
  - !10135  ALSA: timer: Set lower bound of start tick time
  - !10104  ecryptfs: Fix buffer size for tag 66 packet
  - dma-mapping: benchmark: fix node id validation
  - net: dsa: seville: register the mdiobus under devres
  - !10138 [sync] PR-10095:  CVE-2024-40968
  - sched/fair: Take the scheduling domain into account in select_idle_core()
  - !10107  tracing: Build event generation tests only as modules
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - clk: sunxi-ng: Unregister clocks/resets when unbinding
  - !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !9836  fpga: manager: add owner module and take its refcount
  - net: openvswitch: fix race on port output
  - ima: Fix use-after-free on a dentry's dname.name
  - !10165  drop_monitor: replace spin_lock by raw_spin_lock
  - !10162  RDMA/mlx5: Add check for srq max_sge attribute
  - !10048  tipc: force a dst refcount before doing decryption
  - !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10150  mips: bmips: BCM6358: make sure CBR is correctly set
  - drop_monitor: replace spin_lock by raw_spin_lock
  - RDMA/mlx5: Add check for srq max_sge attribute
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - mips: bmips: BCM6358: make sure CBR is correctly set
  - MIPS: Octeon: Add PCIe link status check
  - !10041  Fix CVE-2024-36939
  - !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - ALSA: timer: Set lower bound of start tick time
  - !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - !10009  xfs: fix mount hung while sb recover fail
  - !10088  fix CVE-2024-40995
  - !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
  - !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
  - !9931  nvdimm: Backport some bugfixs
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - tracing: Build event generation tests only as modules
  - ecryptfs: Fix buffer size for tag 66 packet
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Add mutex_destroy()
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - Revert "RDMA/hns: Add mutex_destroy()"
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - tipc: force a dst refcount before doing decryption
  - nfs: Ensure write and flush consume writeback errors
  - NFS: Don't report ENOSPC write errors twice
  - NFS: Use of mapping_set_error() results in spurious errors
  - nfs: ensure correct writeback errors are returned on close()
  - nfs: nfs_file_write() should check for writeback errors
  - sunrpc: fix KABI broken in struct rpc_create_args
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - xfs: fix mount hung while sb recover fail
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: use add_disk() error handling
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - fpga: manager: add owner module and take its refcount
  - arm64: mm: Pass pbha-performance-only bit under chosen node
  - ksmbd: fix wrong DataOffset validation of create context
  - thermal: int340x_thermal: Consolidate priv->data_vault checks
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
  - netfilter: nf_tables: restore set elements when delete set fails
  - keys: Fix overwrite of key expiration on instantiation


author: Li Nan <linan122@huawei.com> - 5.10.0-221.0.0.120
changelog:
  - !10436  CVE-2024-39476
  - !10418  net: move to_gnet_bpf_attach_type() to filter.c
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
  - !10065  iommu: Return right value in iommu_sva_bind_device()
  - net: move to_gnet_bpf_attach_type() to filter.c
  - !10334  fix CVE-2024-36479 for olk-5.10
  - !10408  iommu/arm-smmu-v3: Fix the compile warning
  - !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - !10058  net: mvpp2: clear BM pool before initialization
  - !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - iommu/arm-smmu-v3: Fix the compile warning
  - !10339  net/sched: initialize noop_qdisc owner
  - !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10336 v2  mm: numa-affinity: support THP migration
  - !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
  - !10342  CVE-2024-39471
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  - drm/amdgpu: add error handle to avoid out-of-bounds
  - net/sched: initialize noop_qdisc owner
  - mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
  - mm: numa-affinity: delete the duplicate numa_migrate_prep
  - mm: numa-affinity: backport some migrate policy from AutoNuma
  - mm: numa-affinity: support THP migration
  - mm: thp: skip make PMD PROT_NONE if THP migration is not supported
  - mm: migrate: check mapcount for THP instead of refcount
  - mm: migrate: don't split THP for misplaced NUMA page
  - mm/migrate: fix NR_ISOLATED corruption on 64-bit
  - mm: migrate: account THP NUMA migration counters correctly
  - mm: thp: refactor NUMA fault handling
  - mm: memory: make numa_migrate_prep() non-static
  - mm: fix KABI broken in struct vm_fault
  - mm: memory: add orig_pmd to struct vm_fault
  - !10333  BMA: Fix DMA reset problem and change the version
  - fpga: bridge: add owner module and take its refcount
  - fpga: remove redundant checks for bridge ops
  - fpga: bridge: properly initialize bridge device before populating children
  - fpga: bridge: Use standard dev_release for class driver
  - fpga: bridge: Rename dev to parent for parent device
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - net: phy: add set_loopback interface to realtek phy driver
  - !10316  sched: Add cfs_preferred_nid_init hook
  - !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - !10073  serial: imx: Introduce timeout when waiting on transmitter empty
  - !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - sched: Add cfs_preferred_nid_init hook
  - !10295 sdma-dae: fix interrupt handle logic
  - !10253  fbdev: savage: Handle err return when savagefb_check_var failed
  - !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - !10304 Backport 5.10.211 LTS patches from upstream
  - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - block: ataflop: more blk-mq refactoring fixes
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
  - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
  - tls: rx: drop pointless else after goto
  - s390: use the correct count for __iowrite64_copy()
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
  - nouveau: fix function cast warnings
  - scsi: jazz_esp: Only build if SCSI core is builtin
  - bpf, scripts: Correct GPL license name
  - RDMA/srpt: fix function pointer cast warnings
  - arm64: dts: rockchip: set num-cs property for spi on px30
  - RDMA/bnxt_re: Return error for SRQ resize
  - mptcp: fix lockless access in subflow ULP diag
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered
  - usb: roles: fix NULL pointer issue when put module's reference
  - usb: cdns3: fix memory double free when handle zero packet
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
  - x86/alternative: Make custom return thunk unconditional
  - Revert "x86/alternative: Make custom return thunk unconditional"
  - x86/returnthunk: Allow different return thunks
  - x86/ftrace: Use alternative RET encoding
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
  - Revert "x86/ftrace: Use alternative RET encoding"
  - PCI/MSI: Prevent MSI hardware interrupt number truncation
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
  - s390/cio: fix invalid -EBUSY on ccw_device_start
  - erofs: fix lz4 inplace decompression
  - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
  - iwlwifi: mvm: write queue_sync_state only for sync
  - iwlwifi: mvm: do more useful queue sync accounting
  - platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
  - lan743x: fix for potential NULL pointer dereference with bare card
  - btrfs: do not pin logs too early during renames
  - btrfs: unify lookup return value when dir entry is missing
  - btrfs: introduce btrfs_lookup_match_dir
  - btrfs: tree-checker: check for overlapping extent items
  - task_stack, x86/cea: Force-inline stack helpers
  - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
  - ASoC: Intel: boards: get codec device with ACPI instead of bus search
  - ASoC: Intel: boards: harden codec property handling
  - mtd: spinand: macronix: Add support for MX35LFxGE4AD
  - cifs: add a warning when the in-flight count goes negative
  - powerpc/watchpoints: Annotate atomic context in more places
  - powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
  - block: ataflop: fix breakage introduced at blk-mq refactoring
  - seccomp: Invalidate seccomp mode to catch death failures
  - x86/uaccess: Implement macros for CMPXCHG on user addresses
  - hsr: Avoid double remove of a node.
  - hvc/xen: prevent concurrent accesses to the shared ring
  - media: av7110: prevent underflow in write_ts_to_decoder()
  - ASoC: fsl_micfil: register platform component before registering cpu dai
  - ARM: dts: imx: Set default tuning step for imx6sx usdhc
  - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs.
  - firewire: core: send bus reset promptly on gap count error
  - scsi: lpfc: Use unsigned type for num_sge
  - hwmon: (coretemp) Enlarge per package core count limit
  - efi: Don't add memblocks for soft-reserved memory
  - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
  - ext4: correct the hole length returned by ext4_map_blocks()
  - nvmet-fc: abort command when there is no binding
  - nvmet-fc: release reference on target port
  - nvmet-fcloop: swap the list_add_tail arguments
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
  - spi: sh-msiof: avoid integer overflow in constants
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
  - nvmet-tcp: fix nvme tcp ida memory leak
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
  - ahci: asm1166: correct count of reported ports
  - wifi: cfg80211: fix missing interfaces when dumping
  - dmaengine: fsl-qdma: increase size of 'irq_name'
  - dmaengine: shdma: increase size of 'dev_id'
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - zonefs: Improve error handling
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - smb: client: fix parsing of SMB3.1.1 POSIX create context
  - smb: client: fix potential OOBs in smb2_parse_contexts()
  - net/sched: Retire dsmark qdisc
  - net/sched: Retire ATM qdisc
  - net/sched: Retire CBQ qdisc
  - drivers: misc: sdma-dae: fix interrupt handle logic
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - netrom: Fix a memory leak in nr_heartbeat_expiry()
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - iommu: Return right value in iommu_sva_bind_device()
  - net: mvpp2: clear BM pool before initialization
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"


author: Li Nan <linan122@huawei.com> - 5.10.0-222.0.0.121
changelog:
  - !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10764  CVE-2024-41027
  - !10666 v2  ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10624  ata: libata-core: Fix double free on error
  - !10652  nvme: avoid double free special payload
  - NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10785  fix CVE-2024-42155
  - s390/pkey: Wipe copies of protected- and secure-keys
  - Revert "s390/pkey: Wipe copies of protected- and secure-keys"
  - !10742  irqchip/mbigen: Fix mbigen node address layout
  - !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
  - Fix userfaultfd_api to return EINVAL as expected
  - mm/userfaultfd: fail uffd-wp registration if not supported
  - !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
  - !10759  Fix CVE-2024-42160
  - !10530  ftruncate: pass a signed offset
  - !10679  ibmvnic: Add tx check to prevent skb leak
  - !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - !10489  backport mainline patches
  - !10717  CVE-2024-42101
  - !10713  CVE-2024-41079
  - media: mediatek: vcodec: Only free buffer VA that is not NULL
  - irqchip/mbigen: Fix mbigen node address layout
  - !10727  net/iucv: Avoid explicit cpumask var allocation on stack
  - !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - !10715  gve: Account for stopped queues when reading NIC stats
  - !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - net/dpaa2: Avoid explicit cpumask var allocation on stack
  - !10621  fix CVE-2024-42129
  - !9682  drm: vc4: Fix possible null pointer dereference
  - !10427  net: stmmac: move the EST lock to struct stmmac_priv
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
  - !10589 v2  ax25: Fix refcount imbalance on inbound connections
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  - gve: Account for stopped queues when reading NIC stats
  - nvmet: always initialize cqe.result
  - !10683  ocfs2: fix DIO failure due to insufficient transaction credits
  - !10566  gpio: davinci: Validate the obtained number of IRQs
  - !10670  net: can: j1939: Initialize unused data in j1939_send_one()
  - !10661  fix CVE-2024-41062
  - !10519  xfs: add bounds checking to xlog_recover_process_data
  - !10650  xfs: don't walk off the end of a directory data block
  - mm: prevent derefencing NULL ptr in pfn_section_valid()
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - !10630  sched/deadline: Fix task_struct reference leak
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - ibmvnic: Add tx check to prevent skb leak
  - !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - net: can: j1939: Initialize unused data in j1939_send_one()
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
  - !10636  RDMA/restrack: Fix potential invalid address access
  - !10648  net: dsa: mv88e6xxx: Correct check for empty list
  - !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - Bluetooth: L2CAP: Fix deadlock
  - bluetooth/l2cap: sync sock recv cb and release
  - !10503  fix CVE-2024-42155
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - nvme: avoid double free special payload
  - xfs: don't walk off the end of a directory data block
  - net: dsa: mv88e6xxx: Correct check for empty list
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10557  CVE-2024-42105
  - RDMA/restrack: Fix potential invalid address access
  - sched/deadline: Fix task_struct reference leak
  - !10600  ppp: reject claimed-as-LCP but actually malformed packets
  - !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10603  IB/core: Implement a limit on UMAD receive List
  - ata: libata-core: Fix double free on error
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - locking/mutex: Introduce devm_mutex_init()
  - !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10536  CVE-2024-42082
  - !10594  fix CVE-2024-41046
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10569  ila: block BH in ila_output()
  - !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - IB/core: Implement a limit on UMAD receive List
  - ppp: reject claimed-as-LCP but actually malformed packets
  - !10586  filelock: Fix fcntl/close race recovery compat path
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - net: ethernet: lantiq_etop: fix double free in detach
  - net: lantiq_etop: add blank line after declaration
  - !10541  tap: add missing verification for short frame
  - !10540  tun: add missing verification for short frame
  - !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
  - !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - ax25: Fix refcount imbalance on inbound connections
  - filelock: Fix fcntl/close race recovery compat path
  - !10548  powerpc/eeh: avoid possible crash when edev->pdev changes
  - !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10420  stm class: Fix a double free in stm_register_device()
  - !10475  ALSA: emux: improve patch ioctl data validation
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - ila: block BH in ila_output()
  - gpio: davinci: Validate the obtained number of IRQs
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - nilfs2: fix inode number range checks
  - skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10465  null_blk: fix validation of block size
  - powerpc/eeh: avoid possible crash when edev->pdev changes
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - tap: add missing verification for short frame
  - tun: add missing verification for short frame
  - xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
  - xdp: Remove WARN() from __xdp_reg_mem_model()
  - xdp: Allow registering memory model without rxq reference
  - xdp: Move the rxq_info.mem clearing to unreg_mem_model()
  - !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
  - !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - !10454  fs/ntfs3: Validate ff offset
  - ipv6: prevent possible NULL deref in fib6_nh_init()
  - ftruncate: pass a signed offset
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10383  filelock: fix potential use-after-free in posix_lock_inode
  - xfs: add bounds checking to xlog_recover_process_data
  - !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10417 Backport 5.10.212 LTS patches from upstream
  - !10487  fix CVE-2024-42086
  - !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
  - s390/pkey: Wipe copies of protected- and secure-keys
  - !10425  kunit: Fix kthread reference
  - !10424  kunit: Fix kthread reference
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - irqdomain: Fixed unbalanced fwnode get and put
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - !10361  PCI/ROM: Fix PCI ROM header check bug
  - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
  - gpio: fix resource unwinding order in error path
  - gpiolib: Fix the error path order in gpiochip_add_data_with_key()
  - gpio: 74x164: Enable output pins after registers are reset
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
  - mptcp: fix possible deadlock in subflow diag
  - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
  - mmc: sdhci-xenon: fix PHY init clock stability
  - mmc: sdhci-xenon: add timeout for PHY init complete
  - mmc: core: Fix eMMC initialization with 1-bit bus connection
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
  - wifi: nl80211: reject iftype change with mesh ID change
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - afs: Fix endless loop in directory parsing
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
  - Bluetooth: Enforce validation on max value of connection interval
  - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - mtd: spinand: gigadevice: Fix the get ecc status issue
  - mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
  - crypto: virtio/akcipher - Fix stack overflow on memcpy
  - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
  - !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - !10404  Fix CVE-2024-41069
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - ALSA: emux: improve patch ioctl data validation
  - !10352  fix CVE-2024-40976
  - !10406  usb: gadget: ncm: Fix handling of zero block length packets
  - !10271  HID: core: remove unnecessary WARN_ON() in implement()
  - !10431  s390/qeth: fix deadlock during failing recovery
  - !10440  net/sched: Fix UAF when resolving a clash
  - !10328  net/smc: enable smcrv1 when RNIC supports rocev2
  - !10449  net: ena: Add validation for completion descriptors consistency
  - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - null_blk: fix validation of block size
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - fs/ntfs3: Validate ff offset
  - net: ena: Add validation for completion descriptors consistency
  - net/sched: Fix UAF when resolving a clash
  - s390/qeth: fix deadlock during failing recovery
  - net: stmmac: move the EST lock to struct stmmac_priv
  - kunit: Fix kthread reference
  - kunit: Fix kthread reference
  - stm class: Fix a double free in stm_register_device()
  - usb: gadget: ncm: Fix handling of zero block length packets
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Fix references to freed memory
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - filelock: fix potential use-after-free in posix_lock_inode
  - PCI/ROM: Fix PCI ROM header check bug
  - drm/lima: mask irqs in timeout path before hard reset
  - drm/lima: add mask irq callback to gp and pp
  - net/smc: enable smcrv1 when RNIC supports rocev2
  - HID: core: remove unnecessary WARN_ON() in implement()
  - drm: vc4: Fix possible null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-223.0.0.122
changelog:
  - !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - !10878  orangefs: fix out-of-bounds fsid access
  - !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
  - !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
  - !10523 [OLK-5.10] drivers: add GDR support
  - !10885  crypto: aead,cipher - zeroize key buffer after use
  - !10888  s390/pkey: Wipe copies of clear-key structures on failure
  - !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - drivers: Fix kabi check failure
  - drivers: Add GDR(GPU Direct RDMA) support
  - !10842  netfilter: nf_tables: prefer nft_chain_validate
  - !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10873  USB: serial: mos7840: fix crash on resume
  - !10887 v3  sched/fair: Prefer physical cores when migrating tasks
  - s390/pkey: Wipe copies of clear-key structures on failure
  - sched/fair: Prefer physical cores when migrating tasks
  - crypto: aead,cipher - zeroize key buffer after use
  - orangefs: fix out-of-bounds fsid access
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - drm/i915/gt: Fix potential UAF by revoke of fence registers
  - USB: serial: mos7840: fix crash on resume
  - !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
  - !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10817  media: dvb-frontends: tda10048: Fix integer overflow
  - !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - !10801  fix CVE-2024-42095
  - !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - !10704  x86: stop playing stack games in profile_pc()
  - ext4: flexibly control whether to enable dioread_nolock by default
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10836  wifi: mt76: replace skb_put with skb_put_zero
  - !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - netfilter: nf_tables: prefer nft_chain_validate
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - wifi: mt76: replace skb_put with skb_put_zero
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10810  tcp_metrics: validate source addr length
  - !10766 Backport 5.10.213 LTS patches from upstream
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - !10752  btrfs: qgroup: fix quota root leak after quota disable failure
  - media: dvb-frontends: tda10048: Fix integer overflow
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10781  nilfs2: fix kernel bug on rename operation of broken directory
  - tcp_metrics: validate source addr length
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10733  filelock: Remove locks reliably when fcntl/close race is detected
  - !10765 mbigen: add kvm dependency
  - !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
  - !10681  crypto: ecdh - explicitly zeroize private_key
  - !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  - serial: 8250_omap: Implementation of Errata i2310
  - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - mbigen: add kvm dependency
  - !10778  Fix CVE-2021-47582
  - !10784  s390/pkey: Wipe sensitive data on failure
  - serial: max310x: implement I2C support
  - serial: max310x: make accessing revision id interface-agnostic
  - Drivers: hv: vmbus: Drop error message when 'No request id available'
  - serial: max310x: Unprepare and disable clock in error path
  - getrusage: use sig->stats_lock rather than lock_task_sighand()
  - getrusage: use __for_each_thread()
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - getrusage: add the "signal_struct *sig" local variable
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  - hv_netvsc: use netif_is_bond_master() instead of open code
  - hv_netvsc: Make netvsc/VF binding check both MAC and serial number
  - hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  - hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  - hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
  - Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
  - ext4: convert to exclusive lock while inserting delalloc extents
  - ext4: refactor ext4_da_map_blocks()
  - ext4: make ext4_es_insert_extent() return void
  - lsm: fix default return value of the socket_getpeersec_*() hooks
  - lsm: make security_socket_getpeersec_stream() sockptr_t safe
  - bpf: net: Change sk_getsockopt() to take the sockptr_t argument
  - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
  - serial: max310x: prevent infinite while() loop in port startup
  - serial: max310x: use a separate regmap for each port
  - serial: max310x: use regmap methods for SPI batch operations
  - serial: max310x: Make use of device properties
  - serial: max310x: fail probe if clock crystal is unstable
  - serial: max310x: Try to get crystal clock rate from property
  - serial: max310x: Use devm_clk_get_optional() to get the input clock
  - xhci: handle isoc Babble and Buffer Overrun events properly
  - xhci: process isoc TD properly when there was a transaction error mid TD.
  - xhci: prevent double-fetch of transfer and transfer event TRBs
  - xhci: remove extra loop in interrupt context
  - um: allow not setting extra rpaths in the linux binary
  - selftests: mm: fix map_hugetlb failure on 64K page size systems
  - selftests/mm: switch to bash from sh
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count
  - netrom: Fix a data-race around sysctl_netrom_routing_control
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family
  - geneve: make sure to pull inner header in geneve_rx()
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
  - net: lan78xx: fix runtime PM count underflow on link stop
  - lan78xx: Fix race conditions in suspend/resume handling
  - lan78xx: Fix partial packet errors on suspend/resume
  - lan78xx: Add missing return code checks
  - lan78xx: Fix white space and style issues
  - vhost: Add smp_rmb() in vhost_enable_notify()
  - vhost: Add smp_rmb() in vhost_vq_avail_empty()
  - s390/pkey: Wipe sensitive data on failure
  - nilfs2: fix kernel bug on rename operation of broken directory
  - usb: core: Don't hold the device lock while sleeping in do_proc_control()
  - USB: core: Make do_proc_control() and do_proc_bulk() killable
  - leds: an30259a: Use devm_mutex_init() for mutex initialization
  - btrfs: qgroup: fix quota root leak after quota disable failure
  - filelock: Remove locks reliably when fcntl/close race is detected
  - x86: stop playing stack games in profile_pc()
  - crypto: ecdh - explicitly zeroize private_key
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.


author: Li Nan <linan122@huawei.com> - 5.10.0-224.0.0.123
changelog:
  - !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
  - !11007  mm: avoid overflows in dirty throttling logic
  - !10979  CVE-2024-42304
  - !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - mm: avoid overflows in dirty throttling logic
  - !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
  - !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
  - !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - !10963  sched: fix numa_group uninitialized in show_numa_stats()
  - !10614  can: mcp251xfd: fix infinite loop when xmit fails
  - !10951  Fix CVE-2024-36880
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - sched: fix numa_group uninitialized in show_numa_stats()
  - !10931  drm/lima: fix shared irq handling on driver remove
  - !10947  net: nexthop: Initialize all fields in dumped nexthops
  - !10945 v4  Some clean up and bugfix for hisi_hbmdev
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - Bluetooth: qca: fix firmware check error path
  - Bluetooth: qca: add missing firmware sanity checks
  - net: nexthop: Initialize all fields in dumped nexthops
  - soc/hisilicon: Remove the memdev kobj
  - soc/hisilicon: Clean the hbmcache state show sysfs
  - soc: hisilicon: Setting the demand_offline in sysfs interface
  - Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
  - Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
  - !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
  - drm/lima: fix shared irq handling on driver remove
  - !10745  jfs: xattr: fix buffer overflow for invalid xattr
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - !10912  Fix CVE-2024-40966
  - !10689 sdma: fix input validate problems
  - !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - tty: vt device use only n_tty ldisc
  - tty: add the option to have a tty reject a new ldisc
  - !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - !10813 ima: dont disable digest_list if the file is not processed
  - !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - perf/x86/intel: Add a distinct name for Granite Rapids
  - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
  - perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters
  - perf/x86/uncore: Cleanup unused unit structure
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
  - perf/x86/uncore: Support per PMU cpumask
  - perf/x86/uncore: Save the unit control address of all units
  - ima: dont disable digest_list if the file is not processed
  - drivers: misc: sdma-dae: fix input validate problems
  - jfs: xattr: fix buffer overflow for invalid xattr
  - can: mcp251xfd: fix infinite loop when xmit fails
  - powercap: intel_rapl_tpmi: Fix System Domain probing
  - powercap: intel_rapl_tpmi: Fix a register bug
  - powercap: intel_rapl: Fix locking in TPMI RAPL
  - powercap: intel_rapl: Fix a NULL pointer dereference
  - powercap: intel_rapl: Fix a sparse warning in TPMI interface


author: Li Nan <linan122@huawei.com> - 5.10.0-225.0.0.124
changelog:
  - !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
  - !11123  fix CVE-2024-42288
  - !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11151  protect the fetch of ->fd[fd
  - !10113  Fixed two memory leak issues of the Perf tool
  - !11092  mISDN: Fix a use after free in hfcmulti_tx()
  - btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11071 【olk 5.10】net: hns3: add some feature patches
  - !11085  f2fs: fix to don't dirty inode for readonly filesystem
  - !11138 v2  drm/amd/display: Check for NULL pointer
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
  - !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
  - !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11070 IP notify code optimization
  - !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
  - !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - !11115  net/iucv: fix use after free in iucv_sock_close()
  - drm/amd/display: Check for NULL pointer
  - !11054  m68k: Fix spinlock race in kernel thread creation
  - !11055  phonet: fix rtm_phonet_notify() skb allocation
  - !11126  drm/amd/display: Check pipe offset before setting vblank
  - network_mgmt: Security check and modification.
  - Fix the issue that the debugfs query inconsistency.
  - UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
  - ubl: correct comments and delete unused EXPORT_SYMBOL
  - unic: fix issue that return value is not processed
  - unic: deleted redundant code and added default processing
  - drm/amd/display: Check pipe offset before setting vblank
  - scsi: qla2xxx: Fix for possible memory corruption
  - !11091  net/mlx5: Always drain health in shutdown callback
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - net/iucv: fix use after free in iucv_sock_close()
  - exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11027  landlock: Don't lose track of restrictions on cred_transfer
  - mISDN: Fix a use after free in hfcmulti_tx()
  - net/mlx5: Always drain health in shutdown callback
  - f2fs: fix to don't dirty inode for readonly filesystem
  - x86/head/64: Re-enable stack protection
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
  - kbuild: dummy-tools: adjust to stricter stackprotector check
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  - Bluetooth: btintel: Fixe build regression
  - virtio: reenable config if freezing device failed
  - drivers/nvme: Add quirks for device 126f:2262
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  - usb: typec: tcpci: add generic tcpci fallback compatible
  - tools: iio: replace seekdir() in iio_generic_buffer
  - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
  - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  - Input: allocate keycode for Display refresh rate toggle
  - RDMA/cm: add timeout to cm_destroy_id wait
  - libperf evlist: Avoid out-of-bounds access
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix nanosec stat overflow
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: add a hint for block bitmap corrupt state in mb_groups
  - media: sta2x11: fix irq handler cast
  - isofs: handle CDs with bad root inode but good Joliet root directory
  - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  - ionic: set adminq irq affinity
  - arm64: dts: rockchip: fix rk3399 hdmi ports node
  - arm64: dts: rockchip: fix rk3328 hdmi ports node
  - panic: Flush kernel log buffer at the end
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  - mptcp: don't account accept() of non-MPC client as fallback to TCP
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  - x86/bugs: Fix the SRSO mitigation on Zen3/4
  - riscv: Fix spurious errors from __get/put_kernel_nofault
  - s390/entry: align system call table on 8 bytes
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning
  - scsi: mylex: Fix sysfs buffer lengths
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  - arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
  - net: ravb: Always process TX descriptor ring
  - Revert "usb: phy: generic: Get the vbus supply"
  - scsi: qla2xxx: Update manufacturer detail
  - scsi: qla2xxx: Update manufacturer details
  - i40e: fix i40e_count_filters() to count only active/new filters
  - octeontx2-pf: check negative error code in otx2_open()
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  - selftests: reuseaddr_conflict: add missing new line at the end of the output
  - net: stmmac: fix rx queue priority assignment
  - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - io_uring: ensure '0' is returned on file registration success
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - Bluetooth: hci_event: set the conn encrypted before conn establishes
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  - dm integrity: fix out-of-range warning
  - Octeontx2-af: fix pause frame configuration in GMP mode
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  - usb: typec: ucsi: Ack unsupported commands
  - usb: dwc2: gadget: LPM flow fix
  - usb: dwc2: host: Fix ISOC flow in DDMA mode
  - usb: dwc2: host: Fix hibernation flow
  - usb: dwc2: host: Fix remote wakeup from hibernation
  - USB: core: Add hub_get() and hub_put() routines
  - staging: vc04_services: fix information leak in create_component()
  - staging: vc04_services: changen strncpy() to strscpy_pad()
  - usb: cdc-wdm: close race between read and workqueue
  - mmc: core: Avoid negative index with array access
  - mmc: core: Initialize mmc_blk_ioc_data
  - hexagon: vmlinux.lds.S: handle attributes section
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  - init: open /initrd.image with O_LARGEFILE
  - mm/migrate: set swap entry values of THP tail pages properly.
  - mm/memory-failure: fix an incorrect use of tail pages
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  - efivarfs: Request at most 512 bytes for variable names
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack
  - printk: Update @console_may_schedule in console_trylock_spinning()
  - tee: optee: Fix kernel panic caused by incorrect error handling
  - mei: me: add arrow lake point H DID
  - mei: me: add arrow lake point S DID
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  - usb: port: Don't try to peer unused USB ports based on location
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  - netfilter: nf_tables: reject constant set with timeout
  - comedi: comedi_test: Prevent timers rescheduling during deletion
  - scripts: kernel-doc: Fix syntax error due to undeclared args variable
  - x86/pm: Work around false positive kmemleak report in msr_build_context()
  - x86/stackprotector/32: Make the canary into a regular percpu variable
  - vxge: remove unnecessary cast in kfree()
  - drm/amd/display: Fix noise issue on HDMI AV mute
  - drm/amd/display: Return the correct HDCP error code
  - ahci: asm1064: asm1166: don't limit reported ports
  - ahci: asm1064: correct count of reported ports
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list
  - net: hns3: tracing: fix hclgevf trace event strings
  - cpufreq: dt: always allocate zeroed cpumask
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - memtest: use {READ,WRITE}_ONCE in memory scanning
  - drm/vc4: hdmi: do not return negative values from .get_modes()
  - drm/imx/ipuv3: do not return negative values from .get_modes()
  - drm/exynos: do not return negative values from .get_modes()
  - drm/panel: do not return negative error codes from drm_panel_get_modes()
  - ring-buffer: Fix full_waiters_pending in poll
  - ring-buffer: Fix resetting of shortest_full
  - ring-buffer: Do not set shortest_full when full target is hit
  - ring-buffer: Fix waking up ring buffer readers
  - PCI: dwc: endpoint: Fix advertised resizable BAR size
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  - PCI/AER: Block runtime suspend when handling errors
  - speakup: Fix 8bit characters from direct synth
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  - usb: gadget: tegra-xudc: Use dev_err_probe()
  - phy: tegra: xusb: Add API to retrieve the port number of phy
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  - nvmem: meson-efuse: fix function pointer type mismatch
  - hwmon: (amc6821) add of_match table
  - drm/etnaviv: Restore some id values
  - mmc: core: Fix switch on gp3 partition
  - dm-raid: fix lockdep waring in "pers->hot_add_disk"
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  - serial: Lock console when calling into driver before registration
  - printk/console: Split out code that enables default console
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  - fuse: don't unhash root
  - fuse: fix root lookup with nonzero generation
  - mmc: tmio: avoid concurrent runs of mmc_request_done()
  - PM: sleep: wakeirq: fix wake irq warning in system suspend
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  - USB: serial: option: add MeiG Smart SLM320 product
  - USB: serial: cp210x: add ID for MGP Instruments PDS100
  - USB: serial: add device ID for VeriFone adapter
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  - powerpc/fsl: Fix mfpmr build errors with newer binutils
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - PM: suspend: Set mem_sleep_current during kernel command line setup
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  - parisc: Fix csum_ipv6_magic on 64-bit systems
  - parisc: Fix csum_ipv6_magic on 32-bit systems
  - parisc: Fix ip_fast_csum
  - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  - mtd: rawnand: meson: fix scrambling mode value in command macro
  - ubi: correct the calculation of fastmap size
  - ext4: correct best extent lstart adjustment logic
  - selftests/mqueue: Set timeout to 180 seconds
  - crypto: qat - resolve race condition during AER recovery
  - crypto: qat - fix double free during reset
  - sparc: vDSO: fix return value of __setup handler
  - sparc64: NMI watchdog: fix return value of __setup handler
  - serial: max310x: fix NULL pointer dereference in I2C instantiation
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  - x86/bugs: Use sysfs_emit()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !11045  bpf: Fix a segment issue when downgrading gso_size
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: fixed vf get max channels bug
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - phonet: fix rtm_phonet_notify() skb allocation
  - m68k: Fix spinlock race in kernel thread creation
  - !11036 v2  Some bugfix for HNS RoCE
  - !10999  media: venus: fix use after free in vdec_close
  - !11013  media: mediatek: vcodec: Handle invalid decoder vsi
  - !10971  ext4: fix infinite loop when replaying fast_commit
  - !11022  udf: Avoid using corrupted block bitmap buffer
  - bpf: Fix a segment issue when downgrading gso_size
  - !11012  hfsplus: fix uninit-value in copy_name
  - !10993  ipvs: properly dereference pe in ip_vs_add_service
  - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - RDMA/hns: Fix integer overflow in calc_loading_percent()
  - RDMA/hns: Fix creating sysfs before allocating resources
  - RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
  - RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
  - RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  - RDMA/hns: Fix HW UAF when destroy context timeout
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix a potential Sleep-in-Atomic-Context
  - RDMA/hns: Fix long waiting cmd event when reset
  - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
  - RDMA/hns: Use one CQ bank per context
  - !10976  CVE-2024-42126
  - !10990  drm/amd/display: Add NULL pointer check for kzalloc
  - !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11006  kvm: s390: Reject memory region operations for ucontrol VMs
  - !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - !10991  s390/sclp: Fix sclp_init() cleanup on failure
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - landlock: Don't lose track of restrictions on cred_transfer
  - !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - udf: Avoid using corrupted block bitmap buffer
  - net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11010 roh/rdma: Support rdma_cm and cnp configure
  - !10995  CVE-2024-42290
  - !10965  perf: Optimize perf_pmu_migrate_context()
  - [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
  - media: mediatek: vcodec: Handle invalid decoder vsi
  - hfsplus: fix uninit-value in copy_name
  - [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
  - [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
  - [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
  - kvm: s390: Reject memory region operations for ucontrol VMs
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - media: venus: fix use after free in vdec_close
  - irqchip/imx-irqsteer: Handle runtime power management correctly
  - ipvs: properly dereference pe in ip_vs_add_service
  - s390/sclp: Fix sclp_init() cleanup on failure
  - drm/amd/display: Add NULL pointer check for kzalloc
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
  - ext4: fix infinite loop when replaying fast_commit
  - perf: Optimize perf_pmu_migrate_context()
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - UNIC: bugfix for mguid's memory not be free after netdev init fail
  - UNIC: Solve the problem of redundant print in ub mode
  - ipv6: sr: fix missing sk_buff release in seg6_input_core
  - perf stat: Fix memory leakage when trying perf on an offline CPU
  - perf parse-events: Fix one memory leakage issue


author: Li Nan <linan122@huawei.com> - 5.10.0-226.0.0.125
changelog:
  - !11372  xdp: fix invalid wait context of page_pool_destroy()
  - !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
  - !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - !11358  kcm: Serialise kcm_sendmsg() for the same socket.
  - !11327  CPU inspect bugfix
  - !11340  soc: hisilicon: Support memory repair driver
  - !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - !11324  drm/amd/display: Add null checker before passing variables
  - !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
  - !11284  fix CVE-2024-43905
  - !11343  netfilter: ctnetlink: use helper function to calculate expect ID
  - !11330  jbd2: avoid mount failed when commit block is partial submitted
  - !11190  fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - !11201  ibmvnic: don't release napi in __ibmvnic_open()
  - !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
  - !10748 v2  CVE-2024-41016
  - !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11313  nvme-fabrics: use reserved tag for reg read/write command
  - !11310  drm/radeon: check bo_va->bo is non-NULL before using it
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - xdp: fix invalid wait context of page_pool_destroy()
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - kcm: Serialise kcm_sendmsg() for the same socket.
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - ext4: sanity check for NULL pointer after ext4_force_shutdown
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - config: enable CONFIG_HISI_MEM_RAS by default
  - docs: ABI: add ABI document for driver hisi_mem_ras
  - soc: hisilicon: Support memory repair driver on Kunpeng SoC
  - !11337 v3  Some features and fixs for hbmdev and hbm cache
  - ACPI/HMAT: Add missing locality information for hot-added device
  - hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
  - hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
  - soc:hisilicon: Use _ON and _OFF in hbmcache
  - jbd2: avoid mount failed when commit block is partial submitted
  - cpuinspect: fix [stop/start]_inspect_threads return type
  - cpuinspect: make inspector unregister reliable
  - drm/amd/display: Add null checker before passing variables
  - nvme-fabrics: use reserved tag for reg read/write command
  - hns3 udma: remove UBL dependency.
  - hns3 udma: add verify udata and in/out addr.
  - hns3 udma: fix bugs of code review.
  - hns3 udma: fixed some bugs.
  - drm/radeon: check bo_va->bo is non-NULL before using it
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - !11058  drm/amdgpu: change vm->task_info handling
  - !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
  - !11246 [olk 5.10] hns3驱动一些bugfix patch
  - !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
  - !11273  serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - net: hns3: fixed reset failure issues caused by the incorrect reset type
  - net: hns3: fix missing features due to dev->features configuration too early
  - net: hns3: fix a deadlock problem when config TC during resetting
  - net: hns3: add sync command to sync io-pgtable
  - net: hns3: default enable tx bounce buffer when smmu enabled
  - net: hns3: don't add the len of vlan head if skb_vlan_pop failed
  - net: hns3: void array out of bound when loop tnl_num
  - !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11271 roh/core: Avoid null pointer access and optimize code.
  - UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
  - UNIC: Using UBL-related macros to isolate UB header files
  - roh/core: Avoid null pointer access and optimize code.
  - wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11267  net: bridge: mcast: wait for previous gc cycles when removing port
  - serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: use correct release function during uninitialization
  - net: hns3: delete redundant enabling actions for Layer 2 fowarding
  - net: hns3: use the user's cfg after reset
  - net: hns3: fix delete tc fail issue
  - net: bridge: mcast: wait for previous gc cycles when removing port
  - !11241  CVE-2024-43892
  - !11217  scsi: qla2xxx: validate nvme_local_port correctly
  - !11181  block: initialize integrity buffer to zero before writing it to media
  - !11111  sysctl: always initialize i_uid/i_gid
  - !11194  Fix mainline patchs
  - !11230  Bluetooth: MGMT: Add error handling to pair_device()
  - !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11171  tracing: Fix overflow in get_free_elt()
  - !11169  CVE-2024-42267
  - memcg: protect concurrent access to mem_cgroup_idr
  - !11174  md: restore 'noio_flag' for the last mddev_resume()
  - Bluetooth: MGMT: Add error handling to pair_device()
  - apparmor: Fix null pointer deref when receiving skb during sock creation
  - !11182  CVE-2024-42287
  - scsi: qla2xxx: validate nvme_local_port correctly
  - !11159  usb: vhci-hcd: Do not drop references before new references are gained
  - !11184 【OLK 5.10】spi: spidev some bugfix
  - drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - !11147  powerpc/pseries: Fix scv instruction crash with kexec
  - jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11187  Bugfix patches for hns RoCE
  - ibmvnic: don't release napi in __ibmvnic_open()
  - perf/x86/amd/core: Fix overflow reset on hotplug
  - perf/x86/amd/core: Always clear status for idx
  - spi: spidev: fix a recursive locking error
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - spi: spidev: fix a race condition when accessing spidev->spi
  - RDMA/hns: Fix list_*_careful() not being used in pairs
  - RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
  - RDMA/hns: Fix possible RAS when DCA is not attached
  - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
  - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
  - scsi: qla2xxx: Complete command early within lock
  - block: initialize integrity buffer to zero before writing it to media
  - md: restore 'noio_flag' for the last mddev_resume()
  - tracing: Fix overflow in get_free_elt()
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
  - usb: vhci-hcd: Do not drop references before new references are gained
  - powerpc/pseries: Fix scv instruction crash with kexec
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - sysctl: always initialize i_uid/i_gid
  - drm/amdgpu: change vm->task_info handling
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry()


author: Li Nan <linan122@huawei.com> - 5.10.0-227.0.0.126
changelog:
  - !11282  CVE-2024-44935
  - !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - !11437 sdma-dae:fix code review problems
  - ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - !11015  nvme-pci: add missing condition check for existence of mapped data
  - !11432 v2  mm/block: add bdi sysfs knobs
  - !11316  block: fix pin count management when merging same-page segments
  - drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - drivers:misc:sdma-dae: fix icsl code check problems
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - mm: fix arithmetic for bdi min_ratio
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: document /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add bdi_set_min_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add bdi_set_max_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add bdi_set_min_bytes() function
  - mm: split off __bdi_set_min_ratio() function
  - mm: add bdi_get_min_bytes() function
  - mm: document /sys/class/bdi/<bdi>/max_bytes knob
  - mm: add knob /sys/class/bdi/<bdi>/max_bytes
  - mm: add bdi_set_max_bytes() function
  - mm: split off __bdi_set_max_ratio() function
  - mm: add bdi_get_max_bytes() function
  - mm: use part per 1000000 for bdi ratios
  - mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
  - mm: document /sys/class/bdi/<bdi>/strict_limit knob
  - mm: add knob /sys/class/bdi/<bdi>/strict_limit
  - mm: add bdi_set_strict_limit() function
  - !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - !11207  kprobe support %pd/%pD type
  - !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !11391  fix CVE-2023-45896
  - !11405  dma: fix call order in dmam_free_coherent
  - !11237  CVE-2024-43907
  - !11409  btrfs: do not start relocation until in progress drops are done
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !10904 Incorporate some bonding patches as follows(OLK_5.10):
  - !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
  - !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - btrfs: do not start relocation until in progress drops are done
  - !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
  - !11403  btrfs: do not WARN_ON() if we have PageError set
  - dma: fix call order in dmam_free_coherent
  - !11394  dmaengine: idxd: Prevent use after free on completion memory
  - btrfs: do not WARN_ON() if we have PageError set
  - fuse: Initialize beyond-EOF page contents before setting uptodate
  - dmaengine: idxd: Prevent use after free on completion memory
  - fs/ntfs3: Add more attributes checks in mi_enum_attr()
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - block: fix pin count management when merging same-page segments
  - sctp: Fix null-ptr-deref in reuseport_add_sock().
  - sctp: move hlist_node and hashent out of sctp_ep_common
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - RDMA/hns: Fix concurrency issue between bond work and bond event
  - RDMA/hns: Fix UAF in clear bond printing
  - RDMA/hns: Encapsulate upper event and lowerstate event handlers
  - RDMA/hns: Register notifier block of bonding events in bond_grp
  - selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
  - Documentation: tracing: add new type '%pd' and '%pD' for kprobe
  - tracing/probes: support '%pD' type for print struct file's name
  - tracing/probes: support '%pd' type for print struct dentry's name
  - nvme-pci: add missing condition check for existence of mapped data


author: Li Nan <linan122@huawei.com> - 5.10.0-228.0.0.127
changelog:
  - !11504 sdma-dae support debugfs and fast mode
  - !10195  xfs: Fix agf_longest update error
  - !11505  Misc minor bugfix for HNS RoCE
  - RDMA/hns: Fix endian issues
  - RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
  - RDMA/hns: Fix "Should it be static?" warnings
  - RDMA/hns: Fix dereference of noderef expression
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - drivers:misc:sdma-dae: add fast mode
  - !11479 【OLK 5.10】some bugfixes for hns3 driver
  - driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
  - driver:misc:sdma-dae: add debugfs of sdma-dae
  - !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11478  coresight: etm4x: Fix CPU idle PM support for ETE
  - net: hns3: fix concurrent setting vlan filter issue
  - net: hns3: fix snprintf() is printing too much problem
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  - net: hns3:support enable or disable pfc strom prevent
  - !11491  Fix CVE-2022-48887
  - net: hns3: fix wrong use of semaphore up
  - !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - !11462  mptcp: pm: avoid possible UaF when selecting endp
  - !11470 OLK-5.10 Rever gpiolib bugfix
  - drm/vmwgfx: Remove rcu locks from user resources
  - drm/vmwgfx: Remove vmw_user_bo_noref_release
  - drm/vmwgfx: Introduce ttm reference object find function
  - RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11487  bna: ensure the copied buf is NUL terminated
  - bna: ensure the copied buf is NUL terminated
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - coresight: etm4x: add CPU hotplug support for probing
  - !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
  - !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
  - !11466 OLK-5.10 Rever spi bugfix
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - net: hns3: don't auto enable misc vector
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
  - Revert "spi: Add verification for the max_frequency provided by the firmware"
  - !11104  soc: qcom: pdr: protect locator_addr with the main mutex
  - !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
  - !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - mptcp: pm: avoid possible UaF when selecting endp
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - perf parse-event bugfix merge
  - perf test: Add parse-events test for aliases with hyphens
  - perf test: Add pmu-events test for aliases with hyphens
  - perf parse-events: Support event alias in form foo-bar-baz
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - xfs: Fix agf_longest update error
  - Fix x86 provides error symbol


author: Li Nan <linan122@huawei.com> - 5.10.0-229.0.0.128
changelog:
  - !11565 ip_notify:Clean up redundant import files
  - network_mgmt: Clean up redundant import files for ip_notify.c.
  - !11521  ipv6: prevent UAF in ip6_send_skb()
  - !11517  ipv6: fix possible UAF in ip6_finish_output2()
  - !11514  fix CVE-2024-44988
  - !11526 IP notify code optimization
  - !11552  mm/hugetlb: fix pgtable lock on pmd sharing
  - network_mgmt: Add ip_notify timer print.
  - !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11553  mm: fix failure to unmap pte on highmem systems
  - !11488  wifi: nl80211: don't free NULL coalescing rule
  - mm: fix failure to unmap pte on highmem systems
  - mm/hugetlb: fix pgtable lock on pmd sharing
  - ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11456 Backport 5.10.216 LTS patches from upstream
  - !11484  drm/qxl: Add check for drm_cvt_mode
  - !11457  usb: gadget: core: Check for unset descriptor
  - !11475  Fix CVE-2023-52916
  - !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
  - ipv6: prevent UAF in ip6_send_skb()
  - ipv6: fix possible UAF in ip6_finish_output2()
  - net: dsa: mv88e6xxx: Fix out-of-bound access
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points
  - net: dsa: mv88e6xxx: read FID when handling ATU violations
  - x86/mtrr: Check if fixed MTRRs exist before saving them
  - !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - wifi: nl80211: don't free NULL coalescing rule
  - drm/qxl: Add check for drm_cvt_mode
  - media: aspeed: Fix memory overwrite if timing is 1600x900
  - media: aspeed: Fix no complete irq for non-64-aligned width
  - usb: gadget: core: Check for unset descriptor
  - udp: preserve the connected status if only UDP cmsg
  - dma: xilinx_dpdma: Fix locking
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: owl: fix register access functions
  - mtd: diskonchip: work around ubsan link failure
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - PM / devfreq: Fix buffer overflow in trans_stat_show
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
  - tracing: Show size of requested perf buffer
  - Revert "crypto: api - Disallow identical driver names"
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - ipvs: Fix checksumming on GSO of SCTP packets
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - NFC: trf7970a: disable all regulators on removal
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - vxlan: drop packets from invalid src-address
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
  - arm64: dts: mediatek: mt7622: add support for coherent DMA
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - nilfs2: fix OOB in nilfs_set_de_type
  - nouveau: fix instmem race condition around ptr stores
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Print an info line before disabling unused clocks
  - clk: remove extra empty line
  - clk: Mark 'all_lists' as const
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - selftests/ftrace: Limit length in subsystem-enable tests
  - btrfs: record delayed inode root in transaction
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - mailbox: imx: fix suspend failue
  - iommu/vt-d: Allocate local memory for page request queue
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - nouveau: fix function cast warning
  - media: cec: core: remove length check of Timer Status


author: Li Nan <linan122@huawei.com> - 5.10.0-230.0.0.129
changelog:
  - !11771  tools: move alignment-related macros to new <linux/align.h>
  - !11729  scsi: qedi: Fix crash while reading debugfs attribute
  - tools: move alignment-related macros to new <linux/align.h>
  - !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - !11707  btrfs: fix qgroup reserve leaks in cow_file_range
  - !11723 v2  Squashfs: sanity check symbolic link size
  - !11708  CVE-2024-46751
  - !11728  lib: objagg: Fix general protection fault
  - !11727  jfs: fix null ptr deref in dtInsertEntry
  - !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - !11690  sch/netem: fix use after free in netem_dequeue
  - !11693  Fix CVE-2024-39501
  - !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11701  userfaultfd: fix checks for huge PMDs
  - !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
  - scsi: qedi: Fix crash while reading debugfs attribute
  - lib: objagg: Fix general protection fault
  - jfs: fix null ptr deref in dtInsertEntry
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - Squashfs: sanity check symbolic link size
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
  - btrfs: fix qgroup reserve leaks in cow_file_range
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - userfaultfd: fix checks for huge PMDs
  - x86/mm: Fix pti_clone_pgtable() alignment assumption
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
  - !8831 Add support for Hygon model 7h processors
  - !11665  drm/amd/pm: fix the Out-of-bounds read warning
  - sch/netem: fix use after free in netem_dequeue
  - !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - !11649  fix CVE-2024-46714
  - drm/amd/pm: fix the Out-of-bounds read warning
  - !11632  fix CVE-2024-46723
  - !11555 v2  Fix CVE-2024-45025
  - !11588  drm/amd/display: Skip finding free audio for unknown engine_id
  - !11586  jfs: don't walk off the end of ealist
  - !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
  - !11637  netfilter: tproxy: bail out if IP has been disabled on the device
  - !11562  Backport bugfix from mainline
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
  - !11612  Input: uinput - reject requests with unreasonable number of slots
  - drm/amdgpu: fix ucode out-of-bounds read
  - !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  - drivers/perf: hisi_pcie: Record hardware counts correctly
  - docs: fix 'make htmldocs' warning in perf
  - docs: perf: Fix build warning of hisi-pcie-pmu.rst
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi: Add TLP filter support
  - Documentation: perf: Indent filter options list of hisi-pcie-pmu
  - docs: perf: Fix PMU instance name of hisi-pcie-pmu
  - docs: perf: Add description for HiSilicon PCIe PMU driver
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11606  Fix iBMA bug and change version
  - mmc: mmc_test: Fix NULL dereference on allocation failure
  - Input: uinput - reject requests with unreasonable number of slots
  - !11592  CVE-2024-36915
  - !10933  drm/amd/display: Check index msg_id before read or write
  - !10936  ata: libata-core: Fix null pointer dereference on error
  - !11604 hns3 udma: add resource allocation and change name of struct
  - BMA: Fix edma driver initialization problem and change the version number.
  - !11593  gtp: pull network headers in gtp_dev_xmit()
  - hns3 udma: add prefix hns3 for udma.
  - !11583  nfs: always check dreq->error after a commit
  - !11584  vfs: Don't evict inode under the inode lru traversing context
  - !11577  tcp: fix one compile error in __inet_hash_connect()
  - !11578  net: fix one compile error in net_rship_refresh_timeout()
  - gtp: pull network headers in gtp_dev_xmit()
  - nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
  - net: add copy_safe_from_sockptr() helper
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - !11574  nilfs2: add missing check for inode numbers on directory entries
  - jfs: don't walk off the end of ealist
  - vfs: Don't evict inode under the inode lru traversing context
  - nfs: always check dreq->error after a commit
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - net: fix one compile error in net_rship_refresh_timeout()
  - tcp: fix one compile error in __inet_hash_connect()
  - nilfs2: add missing check for inode numbers on directory entries
  - !11570  NFSD: Fix ia_size underflow
  - NFSD: Fix ia_size underflow
  - mm/compaction: correctly return failure with bogus compound_order in strict mode
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
  - mm: migrate: fix THP's mapcount on isolation
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  - enable CONFIG_BPF_LSM option by default to use safegurad
  - ata: libata-core: Fix null pointer dereference on error
  - drm/amd/display: Check index msg_id before read or write
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - Fix error kernel provides


author: Li Nan <linan122@huawei.com> - 5.10.0-231.0.0.130
changelog:
  - !11964  drm/amd/pm: Fix negative array index read
  - !12073  kprobes: Fix deadlock issue with kmemleak
  - !12062  CVE-2024-46857
  - kprobes: Fix deadlock issue with kmemleak
  - !12050  um: line: always fill *error_out in setup_one_line()
  - !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
  - !12020  drm/amd/display: Check gpio_id before used as array index
  - !12024  ASoC: meson: axg-card: fix 'use-after-free'
  - !12034  ksmbd: discard write access to the directory open
  - !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !11942  sbitmap: backport bugfix patches
  - net/mlx5: Fix bridge mode operations when there are no VFs
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
  - !11998  drm/amd/display: Add array index check for hdcp ddc access
  - !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
  - um: line: always fill *error_out in setup_one_line()
  - !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !12015  perf/x86/intel: Limit the period on Haswell
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !12028  Fix CVE-2024-44958 for olk-5.10
  - !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
  - !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
  - ksmbd: discard write access to the directory open
  - serial: sc16is7xx: fix invalid FIFO access with special register set
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - sched: Revert fix unbalance sched_smt_present dec/inc
  - ASoC: meson: axg-card: fix 'use-after-free'
  - drm/amd/display: Check gpio_id before used as array index
  - !11999  nvmet-tcp: fix kernel crash if commands allocation fails
  - perf/x86/intel: Limit the period on Haswell
  - !12006 v3  add steal_task for cgroup
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - sched/core: Add mutex lock to protect steal_task
  - sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
  - sched/fair: Set the maximum number of steal attempts
  - sched/fair: Count the number of tasks marked as steal_task on cfs_rq
  - sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
  - sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
  - sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
  - Revert "sched: add mutex lock to protect qos_level"
  - !11907  ksmbd: unset the binding mark of a reused connection
  - drm/amd/display: Assign linear_pitch_alignment even for VM
  - nvmet-tcp: fix kernel crash if commands allocation fails
  - drm/amd/display: Add array index check for hdcp ddc access
  - !11976  CVE-2024-46814
  - !11941  usb: typec: ucsi: Fix null pointer dereference in trace
  - !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - drm/amd/display: Check msg_id before processing transcation
  - drm/amd/pm: Fix negative array index read
  - Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
  - !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - !11916  ethtool: check device is present when getting link settings
  - !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - !11928  Some bug fix patches for OLK-5.10 hns RoCE
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - blk-mq: Fix potential io hung for shared sbitmap per tagset
  - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  - sbitmap: fix lockup while swapping
  - sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
  - sbitmap: fix possible io hung due to lost wakeup
  - block: Fix lockdep warning in blk_mq_mark_tag_wait
  - blk-mq: fix potential io hang by wrong 'wake_batch'
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang
  - blk-mq: fix tag_get wait task can't be awakened
  - usb: typec: ucsi: Fix null pointer dereference in trace
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - RDMA/hns: Fix restricted __le16 degrades to integer issue
  - RDMA/hns: Optimize hem allocation performance
  - btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11925  nilfs2: protect references to superblock parameters exposed in sysfs
  - !11914  sched: fix a deadlock in task_net_group()
  - !11843  CVE-2024-46771
  - RDMA/hns: Fix ah error counter in sw stat not increasing
  - Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
  - RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
  - RDMA/hns: Use one CQ bank per context for HIP09
  - RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - ethtool: check device is present when getting link settings
  - !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
  - !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
  - !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
  - !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - sched: fix a deadlock in task_net_group()
  - !11867  pktgen: use cpus_read_lock() in pg_net_init()
  - !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - ksmbd: unset the binding mark of a reused connection
  - !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11903  scsi: aacraid: Fix double-free on probe failure
  - !11875  btrfs: handle errors from btrfs_dec_ref() properly
  - scsi: aacraid: Fix double-free on probe failure
  - !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - bcache: fix variable length array abuse in btree_iter
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !11881  PCI: Add missing bridge lock to pci_bus_lock()
  - !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
  - !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - !11866 v2  drm/amd/display: Ensure index calculation will not overflow
  - !11791  nilfs2: fix missing cleanup on rollforward recovery error
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - PCI: Add missing bridge lock to pci_bus_lock()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - !11767 [sync] PR-11733:  Input: MT - limit max slots
  - !11847  bpf: verifier: prevent userspace memory access
  - !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - pktgen: use cpus_read_lock() in pg_net_init()
  - drm/amd/display: Ensure index calculation will not overflow
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11494  ext4: Fix race in buffer_head read fault injection
  - !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - !11673  netem: fix return value if duplicate enqueue fails
  - !11810  apparmor: fix possible NULL pointer dereference
  - !11805  drm/amdgpu: Fix out-of-bounds write warning
  - !11678  udf: Avoid excessive partition lengths
  - !11680  binder: fix UAF caused by offsets overwrite
  - !11784  perf/x86: Serialize set_attr_rdpmc()
  - !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - bpf: verifier: prevent userspace memory access
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
  - !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - apparmor: fix possible NULL pointer dereference
  - drm/amdgpu: Fix out-of-bounds write warning
  - modify for ICSL.
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - nilfs2: fix missing cleanup on rollforward recovery error
  - perf/x86: Serialize set_attr_rdpmc()
  - !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
  - !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - !11752  driver: iio: add missing checks on iio_info's callback access
  - !11773  A group of optimization and bug fix for numa-affinity
  - mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
  - mm: numa-affinity: adapt for task_numa_placement
  - mm: numa-affinity: adapt for should_numa_migrate_memory
  - mm: numa-affinity: add helper numa_affinity_sampling_enabled()
  - mm: thp: support to control numa migration
  - Input: MT - limit max slots
  - driver: iio: add missing checks on iio_info's callback access
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - binder: fix UAF caused by offsets overwrite
  - udf: Avoid excessive partition lengths
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - netem: fix return value if duplicate enqueue fails
  - ext4: Fix race in buffer_head read fault injection


author: Li Nan <linan122@huawei.com> - 5.10.0-232.0.0.131
changelog:
  - !12102  Fix CVE-2024-46826
  - !12219 v7  xfs: some fix for forcealign
  - !12121  CVE-2024-43855
  - !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
  - xfs: correct the truncate blocksize of forcealign
  - xfs: refactor the truncating order
  - iomap: pass blocksize to iomap_truncate_page()
  - math64: add rem_u64() to just return the remainder
  - xfs: only bunmap align in datafork for forcealign
  - xfs: forcealign not compatible with reflink and realtime device
  - xfs: simplify extent allocation alignment
  - xfs: don't attempting non-aligned fallbacks alloc for forcealign
  - xfs: Don't revert allocated offset for forcealign
  - xfs: align args->minlen for forced allocation alignment
  - xfs: always tail align maxlen allocations
  - xfs: only allow minlen allocations when near ENOSPC
  - !12136 Backport some SAS patches to OLK-5.10
  - !12215  net/hinic3: fix version showed in ethtool
  - !12166  crypto: stm32/cryp - call finalize with bh disabled
  - !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
  - net/hinic3: fix version showed in ethtool
  - !12142  nfc: pn533: Add poll mod list filling check
  - !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
  - atm: idt77252: prevent use after free in dequeue_rx()
  - !12172  fou: remove warn in gue_gro_receive on unsupported protocol
  - !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - ima: Avoid blocking in RCU read-side critical section
  - Revert "ima: Avoid blocking in RCU read-side critical section"
  - !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12133  ALSA: line6: Fix racy access to midibuf
  - fou: remove warn in gue_gro_receive on unsupported protocol
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - crypto: stm32/cryp - call finalize with bh disabled
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
  - !12126  ice: Add netif_device_attach/detach into PF reset flow
  - !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12135 Backport 5.10.217 LTS patches from upstream
  - regulator: core: fix debugfs creation regression
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - mei: me: add lunar lake point M DID
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio:imu: adis16475: Fix sync mode setting
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: composite: fix OS descriptors w_value logic
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - kcov: Remove kcov include from sched.h and move it to its users.
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - net:usb:qmi_wwan: support Rolling modules
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - 9p: explicitly deny setlease attempts
  - fs/9p: translate O_TRUNC into OTRUNC
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Fix added raw MSR output
  - ata: sata_gemini: Check clk_enable() result
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - net: gro: add flush check in udp_gro_receive_segment
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: Fix 7/8 spaces indentation in Kconfig
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - nfc: pn533: Add poll mod list filling check
  - arm64/mpam: Be compatible with MPAM architecture v1.x
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - scsi: libsas: Set port when ex_phy is added or deleted
  - scsi: libsas: Move sas_add_parent_port() to sas_expander.c
  - scsi: libsas: Add helper for port add ex_phy
  - ALSA: line6: Fix racy access to midibuf
  - sched: sch_cake: fix bulk flow accounting logic for host fairness
  - ice: Add netif_device_attach/detach into PF reset flow
  - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
  - !12043  s390/sclp: Prevent release of buffer in I/O
  - md: ensure child flush IO does not affect origin bio->bi_status
  - md: Remove flush handling
  - !8834 Add support for Hygon model 10h processors
  - !12105  sched/fair: Fix the condition in overload_clear
  - !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - !12003  perf cpumap: Wrapper for CPU map indices
  - !12096  CVE-2024-46858
  - !12095  net: dpaa: Pad packets to ETH_ZLEN
  - !12094  netfilter: nft_socket: fix sk refcount leaks
  - !12089  USB: usbtmc: prevent kernel-usb-infoleak
  - sched/fair: Fix the condition in overload_clear
  - sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - mptcp: pm: Fix uaf in __timer_delete_sync
  - mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
  - mptcp: export lookup_anno_list_by_saddr
  - net: dpaa: Pad packets to ETH_ZLEN
  - netfilter: nft_socket: fix sk refcount leaks
  - !12088  tracing: Have tracing_max_latency inc the trace array ref count
  - USB: usbtmc: prevent kernel-usb-infoleak
  - tracing: Have tracing_max_latency inc the trace array ref count
  - !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - !12084  drm/i915/gt: Cleanup partial engine discovery failures
  - !12048  Add generic xdp xsk multi-buffer recv for ipvlan
  - !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
  - !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - drm/i915/gt: Cleanup partial engine discovery failures
  - !11558  mm/ksm: fix possible UAF of stable_node
  - !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - xsk: Add generic xdp multi-buffer recv support
  - ipvlan: support use xdp native mode
  - s390/dasd: fix error recovery leading to data corruption on ESE devices
  - s390/sclp: Prevent release of buffer in I/O
  - perf cpumap: Wrapper for CPU map indices
  - UNIC: The ublhdr structure and UBL_HLEN macro are modified
  - UNIC: Invoke the hns3_unic_set_default_cc in advance
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - x86/amd_nb: Get DF ID for Hygon family 18h model 7h
  - mm/ksm: fix possible UAF of stable_node


author: Li Nan <linan122@huawei.com> - 5.10.0-233.0.0.132
changelog:
  - !12315 perf pmu: resolve CPU map for "cpu" PMUs
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - !12072 sdma-dae: fix possible mremap error
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - Revert "perf cpumap: Add is_subset function"
  - Revert "perf cpumap: Add intersect function"
  - Revert "perf pmu: Add CPU map for "cpu" PMUs"
  - Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
  - !12298  CVE-2024-46822
  - drivers:misc:sdma-dae: add vma_ops to avoid mremap error
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header
  - !12261  drm/lima: fix a memleak in lima_heap_alloc
  - !12262  media: go7007: fix a memleak in go7007_load_encoder
  - !12257  octeontx2-af: Use separate handlers for interrupts
  - !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - !12244 v2  net/mlx5e: Fix netif state handling
  - !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
  - media: go7007: fix a memleak in go7007_load_encoder
  - drm/lima: fix a memleak in lima_heap_alloc
  - octeontx2-af: Use separate handlers for interrupts
  - !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12164 Backport 5.10.218 LTS patches from upstream
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12155  bonding: Fix CVE-2024-44990
  - !12153  bonding: fix xfrm real_dev null pointer dereference
  - !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
  - xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !12115  md/raid1: don't free conf on raid0_run failure
  - !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - net/mlx5e: Fix netif state handling
  - !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
  - !12182  netns: Make get_net_ns() handle zero refcount net
  - !12179  net/sched: Fix CVE-2024-36244
  - !12176  ipv6: sr: fix invalid unregister error path
  - !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
  - !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - !12213  scsi: qla2xxx: During vport delete send async logout explicitly
  - !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - !12227  nbd: Fix signal handling
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12208  Some bugfixs for ubi/fs
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - !11910  ext4: dax: Fix inconsistent isize during writing
  - !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - locks: fix TOCTOU race when granting write lease
  - ubi: block: fix null-pointer-dereference in ubiblock_create()
  - ubi: block: Remove in vain semicolon
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - netns: Make get_net_ns() handle zero refcount net
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
  - ipv6: sr: fix invalid unregister error path
  - docs: kernel_include.py: Cope with docutils 0.21
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - bonding: fix null pointer deref in bond_ipsec_offload_ok
  - bonding: fix bond_ipsec_offload_ok return type
  - bonding: fix xfrm real_dev null pointer dereference
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - md/raid1: don't free conf on raid0_run failure
  - blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - ext4: dax: keep orphan list before truncate overflow allocated blocks
  - ext4: dax: fix overflowing extents beyond inode size when partially writing
  - gpio: prevent potential speculation leaks in gpio_device_get_desc()


author: Li Nan <linan122@huawei.com> - 5.10.0-234.0.0.133
changelog:
  - !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12248  nilfs2: fix state management in error path of log writing function
  - !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
  - !12640  sock_map: Add a cond_resched() in sock_hash_free()
  - !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - !12639  net: do not delay dst_entries_add() in dst_release()
  - !12621  apparmor: fix policy_unpack_test on big endian systems
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
  - !12611  drm/amd/display: Check null pointer before dereferencing se
  - !12596  scsi: fnic: Move flush_work initialization out of if block
  - !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12615  writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !12620  PCI: mt7621: Add sentinel to quirks table
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - sock_map: Add a cond_resched() in sock_hash_free()
  - net: do not delay dst_entries_add() in dst_release()
  - !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - apparmor: fix policy_unpack_test on big endian systems
  - !12571 v2  Randomized Kmalloc 5.10 Backport V2
  - PCI: mt7621: Add sentinel to quirks table
  - !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
  - !12605  fix CVE-2024-46802
  - !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !8925  ext4: avoid deadlock in fs reclaim with page writeback
  - drm/amd/display: Check null pointer before dereferencing se
  - !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
  - !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12460  NFSD: Limit the number of concurrent async COPY operations
  - !12560  fix CVE-2024-49900
  - !12569  fix CVE-2024-47667
  - drm/amd/display: fix mixed declarations warning
  - drm/amd/display: added NULL check at start of dc_validate_stream
  - !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - scsi: fnic: Move flush_work initialization out of if block
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - Randomized slab caches for kmalloc()
  - mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
  - !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - !12424  jfs: check if leafidx greater than num leaves per dmap tree
  - !12425  jfs: Fix uaf in dbFreeBits
  - !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  - !12542  media: pci: cx23885: check cx23885_vdev_init() return
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - !12369  x86/ioapic: Handle allocation failures gracefully
  - media: pci: cx23885: check cx23885_vdev_init() return
  - kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - !12511  jfs: Fix array-index-out-of-bounds in diFree
  - !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
  - !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
  - !12252  KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - !12382  fix CVE-2024-46675
  - !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - !12467  fix CVE-2024-42301
  - !12310  fix CVE-2024-40965
  - !12484  CVE-2024-38667
  - !12480  CVE-2024-36286
  - !12454  soundwire: cadence: fix invalid PDI offset
  - jfs: Fix array-index-out-of-bounds in diFree
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12411  CVE-2024-43894
  - riscv: prevent pt_regs corruption for secondary idle threads
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
  - !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - parport: Proper fix for array out-of-bounds access
  - dev/parport: fix the array out-of-bounds risk
  - drm/amd/display: Initialize get_bytes_per_element's default to 1
  - NFSD: Limit the number of concurrent async COPY operations
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - soundwire: cadence: fix invalid PDI offset
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
  - !12395  tracing/timerlat: Fix a race during cpuhp processing
  - !12406  fix CVE-2024-43841
  - jfs: Fix uaf in dbFreeBits
  - jfs: check if leafidx greater than num leaves per dmap tree
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - drm/client: fix null pointer dereference in drm_client_modeset_probe
  - wifi: virt_wifi: don't use strlen() in const context
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - tracing/timerlat: Fix a race during cpuhp processing
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - !12349  neighbour: fix data-races around n->output
  - !12294  nfsd: return -EINVAL when namelen is 0
  - x86/ioapic: Handle allocation failures gracefully
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
  - !12344  of: module: prevent NULL pointer dereference in vsnprintf()
  - !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - !12334  drm/nouveau: prime: fix refcount underflow
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - neighbour: fix data-races around n->output
  - !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
  - !12332 hns3 udma: delete irrl and trrl table
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - hns3 udma: delete irrl and trrl table.
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - drm/nouveau: prime: fix refcount underflow
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  - nfsd: call cache_put if xdr_reserve_space returns NULL
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
  - i2c: imx-lpi2c: use bulk clk API
  - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
  - clk: Add a devm variant of clk_rate_exclusive_get()
  - soc: qcom: cmd-db: Map shared memory as WC, not WB
  - nfsd: return -EINVAL when namelen is 0
  - blk-mq: fix blk_mq_hw_ctx active request accounting
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - nilfs2: fix state management in error path of log writing function
  - mptcp: pm: only decrement add_addr_accepted for MPJ req
  - ext4: avoid deadlock in fs reclaim with page writeback


author: Li Nan <linan122@huawei.com> - 5.10.0-235.0.0.134
changelog:
  - !13009  CVE-2024-49950
  - !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
  - !13003  CVE-2024-50064
  - !13051  ext4: fix CVE-2024-47701
  - !12680  smb: client: fix UAF in async decryption
  - !13039  static_call: Handle module init failure correctly in static_call_del_module()
  - !13017  f2fs: fix to wait dio completion
  - !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - !13015  drm/amd/display: Check stream before comparing them
  - !13019  l2tp: prevent possible tunnel refcount underflow
  - !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - !12992  igb: Do not bring the device up after non-fatal error
  - !12994  drm/amd/display: Check BIOS images before it is used
  - !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
  - !12901  ext4: fix double brelse() the buffer of the extents path
  - !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
  - !12958  ext4: update orig_path in ext4_find_extent()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - !12449  scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - l2tp: prevent possible tunnel refcount underflow
  - f2fs: fix to wait dio completion
  - !12884  CVE-2024-50016
  - !12844  ACPI: sysfs: validate return type of _STR method
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - drm/amd/display: Check stream before comparing them
  - !12998  f2fs: get rid of online repaire on corrupted directory
  - !12911  fsnotify: fix CVE-2024-47660
  - !12908  io_uring: fix CVE-2024-50060
  - !12879  drm/stm: Avoid use-after-free issues with crtc and plane
  - !12915  CVE-2022-48961
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - !12944  fix CVE-2024-47723
  - !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12954  memcg_write_event_control(): fix a user-triggerable oops
  - !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - !12870  Fix CVE-2024-47703
  - !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
  - zram: don't free statically defined names
  - zram: free secondary algorithms names
  - [Backport]scsi: libsas: Fix disk not being scanned in after being removed
  - [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
  - f2fs: get rid of online repaire on corrupted directory
  - [Backport]scsi: libsas: Introduce struct smp_disc_resp
  - !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
  - !12686  security/keys: fix slab-out-of-bounds in key_task_permission
  - drm/amd/display: Check BIOS images before it is used
  - igb: Do not bring the device up after non-fatal error
  - !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
  - !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - !12875  tipc: guard against string buffer overrun
  - ext4: update orig_path in ext4_find_extent()
  - memcg_write_event_control(): fix a user-triggerable oops
  - !12781  uprobes: fix kernel info leak via "[uprobes
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
  - jfs: Fix sanity check in dbMount
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  - !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gpiolib: fix memory leak in gpiochip_setup_dev()
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12790  slip: make slhc_remember() more robust against malicious packets
  - !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
  - !12737  r8169: add tally counter fields added with RTL8125
  - !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - !12778  riscv: Sync efi page table's kernel mappings before switching
  - !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
  - net: mdio: use device_set_node() to setup both fwnode and of
  - fsnotify: clear PARENT_WATCHED flags lazily
  - fsnotify: remove unused declaration
  - fsnotify: Fix comment typo
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - UNIC: Eliminate compile warnings
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - tipc: guard against string buffer overrun
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - !12525  powercap: intel_rapl: Fix off by one in get_rpi()
  - !12818  media: venus: fix use after free bug in venus_remove due to race condition
  - !12825  drm/amd/display: Check null pointers before using them
  - !12798  uprobe: avoid out-of-bounds memory access of fetching args
  - ACPI: sysfs: validate return type of _STR method
  - !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12754  CVE-2024-50063
  - !12488  gtp: fix a potential NULL pointer dereference
  - !12762  smack: tcp: ipv4, fix incorrect labeling
  - drm/amd/display: Check null pointers before using them
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - media: venus: fix use after free bug in venus_remove due to race condition
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - uprobe: avoid out-of-bounds memory access of fetching args
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - slip: make slhc_remember() more robust against malicious packets
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - riscv: Sync efi page table's kernel mappings before switching
  - hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - !12551  cifs: Fix buffer overflow when parsing NFS reparse points
  - !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12723  ppp: fix ppp_async_encode() illegal access
  - smack: tcp: ipv4, fix incorrect labeling
  - !12733  CVE-2024-50059
  - !12373  fix CVE-2024-49954
  - !12705  fix CVE-2024-49924
  - !12517  fix CVE-2024-47742
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - selftests/bpf: Add test for lsm tail call
  - bpf: Prevent tail call between progs attached to different hooks
  - !12665 v2  CVE-2024-49955
  - !12685  block: fix potential invalid pointer dereference in blk_add_partition
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12697  mm: memcg: don't periodically flush stats when memcg is disabled
  - !12694  crypto: xor - fix template benchmarking
  - !12701  vhost_vdpa: assign irq bypass producer token correctly
  - r8169: add tally counter fields added with RTL8125
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - ppp: fix ppp_async_encode() illegal access
  - !12678  CVE-2024-47673
  - !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - vhost_vdpa: assign irq bypass producer token correctly
  - !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - !12667  randomize_kstack: Improve entropy diffusion
  - !12668  selinux: fix potential counting error in avc_add_xperms_decision()
  - !12499  nbd: fix race between timeout and normal completion
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - !12610  blk_iocost: fix more out of bound shifts
  - crypto: xor - fix template benchmarking
  - crypto: xor - Fix typo of optimization
  - !12633  ALSA: asihpi: Fix potential OOB array access
  - !12354 Backport important bugfix from the kernel-5.10.y
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - block: fix potential invalid pointer dereference in blk_add_partition
  - smb: client: fix UAF in async decryption
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  - iwlwifi: mvm: move iwl_mvm_stop_device() out of line
  - IB/core: Fix ib_cache_setup_one error flow cleanup
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - randomize_kstack: Improve entropy diffusion
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  - ALSA: asihpi: Fix potential OOB array access
  - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - blk_iocost: fix more out of bound shifts
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - powercap: intel_rapl: Fix off by one in get_rpi()
  - firmware_loader: Block path traversal
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - scsi: fix kabi broken
  - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - scsi: mpt3sas: Remove scsi_dma_map() error messages


author: Li Nan <linan122@huawei.com> - 5.10.0-236.0.0.135
changelog:
  - !13186  virtio_pmem: Check device status before requesting flush
  - !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13146  arm64: probes: Remove broken LDR (literal) uprobe support
  - !13167  CVE-2024-50133
  - !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
  - !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - virtio_pmem: Check device status before requesting flush
  - arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - cgroup: add cgroup_root_ext to keep kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !13144 v2  tracing: Consider the NULL character when validating the event length
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - tracing: Consider the NULL character when validating the event length
  - !13125 v7  mm: support poison recover for more
  - mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
  - arm64: send sig fault for user task when apei_claim_sea fails
  - arm64: mm: Add copy mc support for all migrate_page
  - mm: support poison recovery from do_cow_fault()
  - mm: support poison recovery from copy_present_page()
  - mm: hwpoison: support recovery from HugePage copy-on-write faults
  - make copy_[user]_highpage_mc have return value
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !12974  ext4: fix timer use-after-free on failed mount
  - !12976  : ext4: no need to continue when the number of entries is 1
  - !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - !12970  exfat: fix memory leak in exfat_load_bitmap()
  - !12972  ext4: fix access to uninitialised lock in fc replay path
  - !13094  RDMA/hns: Fix DCA mmap area PUAF
  - !12973  vfs: fix race between evice_inodes() and find_inode()&iput()
  - PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
  - !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13101  thunderbolt: Mark XDomain as unplugged when router is removed
  - !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - !13103  CVE-2024-49878
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - thunderbolt: Mark XDomain as unplugged when router is removed
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - RDMA/hns: Fix DCA mmap area PUAF
  - !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13067  Fix UAF of rpc_task
  - bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - !12996 【OLK-5.10】Support SMT control on arm64
  - network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - !13054  net: add more sanity checks to qdisc_pkt_len_init()
  - !13048 sdma-dae: add ida validation
  - !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - NFSv4: release seqid when open failed for nfs4.0
  - drivers:misc:sdma-dae: add channel ida validation
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - net: add more sanity checks to qdisc_pkt_len_init()
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - arch_topology: Support basic SMT control for the driver
  - cpu/SMT: Store the current/max number of threads
  - cpu/SMT: Move SMT prototypes into cpu_smt.h
  - ext4: no need to continue when the number of entries is 1
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix timer use-after-free on failed mount
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ext4: fix access to uninitialised lock in fc replay path
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - exfat: fix memory leak in exfat_load_bitmap()
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]


author: Li Nan <linan122@huawei.com> - 5.10.0-237.0.0.136
changelog:
  - !13310  fs/ntfs3: Additional check in ni_clear()
  - !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
  - !13344  mm,hwpoison: check mm when killing accessing process
  - mm,hwpoison: check mm when killing accessing process
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - !13318 Fix objtool error for AMX instruction decoding
  - !13196  fs/ntfs3: Additional check in ntfs_file_release
  - !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
  - !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
  - !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
  - !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
  - !13276  mailbox: bcm2835: Fix timeout during suspend mode
  - !13294 sdma-dae: change authority of debugfs
  - x86/insn: Add AMX instructions to the x86 instruction decoder
  - !13277  CVE-2023-52920
  - fs/ntfs3: Additional check in ni_clear()
  - !13227  fs/ntfs3: Add rough attr alloc_size check
  - !13225  fs/ntfs3: Check if more than chunk-size bytes are written
  - !13226  fs/ntfs3: Fix possible deadlock in mi_read
  - !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
  - !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13194  fix CVE-2024-50115
  - bpf, arm64: Fix address emission with tag-based KASAN enabled
  - driver:misc:sdma:change authority of sdma device
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - !13178  bpf: Use raw_spinlock_t in ringbuf
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking
  - bpf: mostly decouple jump history management from is_state_visited()
  - bpf: encapsulate precision backtracking bookkeeping
  - bpf: decouple prune and jump points
  - mailbox: bcm2835: Fix timeout during suspend mode
  - !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - platform/x86/intel/ifs: Initialize union ifs_status to zero
  - platform/x86/intel/ifs: release cpus_read_lock()
  - platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - !13221  aoe: fix the potential use-after-free problem in more places
  - !13239  scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13255  RDMA/hns: Fix the valid QP bank set to improve performance
  - RDMA/hns: Fix the valid QP bank set to improve performance
  - !12858 intel: backport GNR and SRF intel_idle fix for 5.10
  - !12154 v2  netfilter: flowtable: initialise extack before use
  - !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
  - !13212 v7  arm64: support page mapping percpu first chunk allocator
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - aoe: fix the potential use-after-free problem in more places
  - !13080  serial: core: Fix atomicity violation in uart_tiocmget
  - !13073  selinux: clarify return code in filename_trans_read_helper_compat()
  - !13128  drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
  - arm64: support page mapping percpu first chunk allocator
  - vmalloc: choose a better start address in vm_area_register_early()
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - serial: core: Fix atomicity violation in uart_tiocmget
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
  - intel_idle: Add a new flag to initialize the AMX state
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - netfilter: flowtable: initialise extack before use
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support


author: Li Nan <linan122@huawei.com> - 5.10.0-238.0.0.137
changelog:
  - !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13458  io_uring: fix CVE-2024-53052
  - !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
  - !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
  - !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
  - !13829  fix CVE-2024-50192
  - !13414  sched/topology: Prevent race condition in sched_domain topology
  - !13411  udf: fix uninit-value use in udf_get_fileshortad
  - !13800  media: av7110: fix a spectre vulnerability
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  - !13823 [HNS3]Add the reliability check of guid_tbl_space
  - !13448 bugfix of nfs
  - !13403 some bugfix of ksmbd smb2_open()
  - HNS3: Add the reliability check of guid_tbl_space.
  - !13418  btrfs: reinitialize delayed ref list after deleting it from the list
  - !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - !13419  media: s5p-jpeg: prevent buffer overflows
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13793  nilfs2: fix potential deadlock with newly created symlinks
  - !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - !13797  drm/amd/display: Initialize denominators' default to 1
  - !13792  CVE-2024-43817
  - media: av7110: fix a spectre vulnerability
  - drm/amd/display: Initialize denominators' default to 1
  - !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
  - !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nilfs2: fix potential deadlock with newly created symlinks
  - !13319  unicode: Don't special case ignorable code points
  - net: tighten bad gso csum offset check in virtio_net_hdr
  - udp: fix receiving fraglist GSO packets
  - net: drop bad gso csum_start and offset in virtio_net_hdr
  - gso: fix dodgy bit handling for GSO_UDP_L4
  - !13379  fbdev: sisfb: Fix strbuf array overflow
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - io_uring: use kiocb_{start,end}_write() helpers
  - fs: create kiocb_{start,end}_write() helpers
  - io_uring: rename kiocb_end_write() local helper
  - !13441  RDMA/cxgb4: Added NULL check for lookup_atid
  - !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - !13356  NFSD: Initialize struct nfsd4_copy earlier
  - NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - RDMA/cxgb4: Added NULL check for lookup_atid
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - netfilter: br_netfilter: fix panic with metadata_dst skb
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - media: s5p-jpeg: prevent buffer overflows
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - sched/topology: Prevent race condition in sched_domain topology
  - udf: fix uninit-value use in udf_get_fileshortad
  - ksmbd: fix return value of smb2_open()
  - !13303 v2  fix CVE-2024-50141
  - !13387  usb: musb: sunxi: Fix accessing an released usb phy
  - ksmbd: fix possible refcount leak in smb2_open()
  - !13392  CVE-2024-47745
  - !13371  CVE-2024-46713
  - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  - ntfs3: Add bounds checking to mi_enum_attr()
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - remap_file_pages: Use vma_lookup() instead of find_vma()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - usb: musb: sunxi: Fix accessing an released usb phy
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - fbdev: sisfb: Fix strbuf array overflow
  - !13323 [sync] PR-13302:  CVE-2024-50195
  - perf: Fix kabi problem by put mutex in front of perf_buffer
  - perf/aux: Fix AUX buffer serialization
  - NFSD: Initialize struct nfsd4_copy earlier
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - unicode: Don't special case ignorable code points
  - ACPI: PRM: Clean up guid type in struct prm_handler_info
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
  - RDMA/hns: Modify debugfs name
  - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*


author: Li Nan <linan122@huawei.com> - 5.10.0-239.0.0.138
changelog:
  - !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !10939  filelock: Correct the file lock owner in fcntl_setlk64
  - !11339  Fix xfs fsmap error
  - !11338  xfs: fix log recovery when unknown rocompat bits are set
  - !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
  - hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
  - !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
  - !14014  *** CVE-2024-53063 ***
  - !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - !13337  fix CVE-2024-50135
  - !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
  - !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - !13936  wifi: rtw88: always wait for both firmware loading attempts
  - !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - !13934  net/sched: accept TCA_STAB only for root qdisc
  - !13933  net: ethernet: lantiq_etop: fix memory disclosure
  - !13932  net: Fix an unsafe loop on the list
  - !13931  net: stmmac: Fix zero-division error when disabling tc cbs
  - !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
  - ipvlan: fix UAF after skb has been consume by xdp generic
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  - media: dvbdev: prevent the risk of out of memory access
  - !13839  afs: Fix lock recursion
  - !13860 [2024.12.2]bugfix rdma to OLK-5.10
  - !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - !13921  wifi: ath10k: Fix memory leak in management tx
  - !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13967  bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13966  blk-mq/scsi: tracking device queue depth via sbitmap
  - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13964 v3  arm64: mm: Stop use spinlock during pbha early init
  - scsi: core: Increase max device queue_depth to 4096
  - sbitmap: fix kabi broken in struct scsi_device
  - sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
  - sbitmap: fix kabi broken by adding struct sbitmap_extend
  - scsi: core: Fix scsi_device_max_queue_depth()
  - scsi: blk-mq: Fix build warning when making htmldocs
  - scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
  - scsi: core: Replace sdev->device_busy with sbitmap
  - scsi: core: Make sure sdev->queue_depth is <= max(shost->can_queue, 1024)
  - scsi: core: Add scsi_device_busy() wrapper
  - scsi: megaraid_sas: Replace sdev_busy with local counter
  - scsi: blk-mq: Return budget token from .get_budget callback
  - scsi: blk-mq: Add callbacks for storing & retrieving budget token
  - scsi: sbitmap: Add sbitmap_calculate_shift() helper
  - scsi: sbitmap: Export sbitmap_weight
  - scsi: sbitmap: Move allocation hint into sbitmap
  - scsi: sbitmap: Add helpers for updating allocation hint
  - scsi: sbitmap: Maintain allocation round_robin in sbitmap
  - sbitmap: optimise sbitmap_deferred_clear()
  - scsi: sbitmap: Remove sbitmap_clear_bit_unlock
  - arm64: mm: Stop use spinlock during pbha early init
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !13802  pinctrl: ocelot: fix system hang on level based interrupts
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - wifi: rtw88: always wait for both firmware loading attempts
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - net/sched: accept TCA_STAB only for root qdisc
  - net: ethernet: lantiq_etop: fix memory disclosure
  - net: Fix an unsafe loop on the list
  - net: stmmac: Fix zero-division error when disabling tc cbs
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - wifi: ath11k: fix array out-of-bound access in SoC stats
  - wifi: ath10k: Fix memory leak in management tx
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13890  ipmi: Use regspacings passed as a module parameter
  - !13898  drm/amd/display: Check link_index before accessing dc->links[
  - !13905  NFSD: Never decrement pending_async_copies on error
  - NFSD: Never decrement pending_async_copies on error
  - !13887  CVE-2024-49891
  - !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
  - !13881  RDMA/bnxt_re: Add a check for memory allocation
  - drm/amd/display: Check link_index before accessing dc->links[]
  - !13878  Fix problems of mounting nfs
  - ipmi: Use regspacings passed as a module parameter
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
  - !13854  CVE-2024-53059
  - !13853  sctp: properly validate chunk size in sctp_sf_ootb()
  - RDMA/bnxt_re: Add a check for memory allocation
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - wifi: iwlegacy: Clear stale interrupts before resuming device
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - RDMA/hns: Fix cpu stuck caused by printings during reset
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - mac80211: always have ieee80211_sta_restart()
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
  - mac80211: Add support to trigger sta disconnect on hardware restart
  - mac80211: do drv_reconfig_complete() before restarting all
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - afs: Fix lock recursion
  - pinctrl: ocelot: fix system hang on level based interrupts
  - nvme-pci: fix race condition between reset and nvme_dev_disable()
  - nvme-pci: refactor the tagset handling in nvme_reset_work
  - nvme-pci: split nvme_dev_add
  - xfs: Fix missing interval for missing_owner in xfs fsmap
  - drivers: update Yunsilicon driver to version 2406_rc16.2
  - xfs: fix an agbno overflow in __xfs_getfsmap_datadev
  - xfs: fix interval filtering in multi-step fsmap queries
  - xfs: fix log recovery when unknown rocompat bits are set
  - filelock: Correct the file lock owner in fcntl_setlk64


author: Li Nan <linan122@huawei.com> - 5.10.0-240.0.0.139
changelog:
  - !14129  bus: integrator-lm: fix OF node leak in probe()
  - !14132 v2  ACPI: APEI: handle synchronous errors in task work
  - !14046  smb: client: Fix use-after-free of network namespace.
  - ACPI: APEI: handle synchronous exceptions in task work
  - mm: memory-failure: move return value documentation to function declaration
  - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
  - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
  - !13903  Script execution control
  - !14119  bpf: sync_linked_regs() must preserve subreg_def
  - bus: integrator-lm: fix OF node leak in probe()
  - !14124  media: cx24116: prevent overflows on SNR calculus
  - !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
  - media: cx24116: prevent overflows on SNR calculus
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - bpf: sync_linked_regs() must preserve subreg_def
  - !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
  - !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - !14086  ocfs2: uncache inode which has failed entering the group
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13401 IMA: Fix hungtask issue of digestlist importing
  - !14033  fix CVE-2024-50278
  - !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14092  USB: serial: io_edgeport: fix use after free in debug printk
  - !14064  vp_vdpa: fix id_table array not null terminated error
  - !14073  HID: core: zero-initialize the report buffer
  - !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - !14062  CVE-2024-53054
  - !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - !14054  net: sched: fix use-after-free in taprio_change()
  - !14006  filemap: Fix bounds checking in filemap_read()
  - !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - !14009  drm/vc4: Stop the active perfmon before being destroyed
  - !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - USB: serial: io_edgeport: fix use after free in debug printk
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - ocfs2: uncache inode which has failed entering the group
  - !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - HID: core: zero-initialize the report buffer
  - vp_vdpa: fix id_table array not null terminated error
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  - Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
  - !13327 cpufreq: Add SEEP governor for hardware-managed P-states
  - !13995  drm/radeon: Fix encoder->possible_clones
  - !13948  fix CVE-2024-49906
  - cpufreq: Add SEEP governor for hardware-managed P-states
  - !13988  CVE-2024-49861
  - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
  - ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14043 v2  CVE-2024-40927
  - !14041 sdma-dae: bugfix of channel operation
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - net: sched: fix use-after-free in taprio_change()
  - smb: client: Fix use-after-free of network namespace.
  - Support for auto_act_window and energy_perf in cppc_cpufreq
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - xhci: Handle TD clearing for multiple streams case
  - xhci: Fix failure to give back some cached cancelled URBs.
  - xhci: introduce a new move_dequeue_past_td() function to replace old code.
  - xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
  - xhci: fix giving back URB with incorrect status regression in 5.12
  - xhci: split handling halted endpoints into two steps
  - xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
  - drivers:misc:sdma-dae: bugfix of channel operation
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - ACPI: CPPC: Add three register ABIs
  - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - drm/vc4: Stop the active perfmon before being destroyed
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - filemap: Fix bounds checking in filemap_read()
  - drm/radeon: Fix encoder->possible_clones
  - bpf: Fix kabi breakage in enum bpf_type_flag
  - selftests/bpf: Rename ARG_PTR_TO_LONG test description
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix helper writes to read-only maps
  - bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - bpf: Allow helpers to accept pointers with a fixed size
  - bpf: Add MEM_UNINIT as a bpf_type_flag
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - fix kabi breakage due to exec is_check
  - IMA support script execution check
  - exec: Add a new AT_CHECK flag to execveat(2)
  - uselib: remove use of __FMODE_EXEC
  - exec: Check __FMODE_EXEC instead of in_execve for LSMs
  - execve: open the executable file before doing anything else
  - platform/x86/intel/pmt: telemetry: Export API to read telemetry
  - platform/x86/intel/pmt: Add header to struct intel_pmt_entry
  - platform/x86/intel/tpmi: Add additional TPMI header fields
  - platform/x86/intel/tpmi: Align comments in kernel-doc
  - platform/x86/intel/tpmi: Check major version change for TPMI Information
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
  - platform/x86/intel/tpmi: Change vsec offset to u64
  - platform/x86/intel/tpmi: Move TPMI ID definition
  - platform/x86/intel/tpmi: Modify external interface to get read/write state
  - platform/x86/intel/tpmi: Don't create devices for disabled features
  - platform/x86/intel/vsec: Remove nuisance message
  - platform/x86/intel/vsec: Add base address field
  - platform/x86/intel/vsec: Add intel_vsec_register
  - platform/x86/intel/vsec: Assign auxdev parent by argument
  - platform/x86/intel/vsec: remove platform_info from vsec device structure
  - platform/x86/intel/vsec: Move structures to header
  - platform/x86/intel/vsec: Remove unnecessary return
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - IMA: Fix hungtask issue of digestlist importing


author: Li Nan <linan122@huawei.com> - 5.10.0-241.0.0.140
changelog:
  - !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
  - !14145 Intel: backport ISST driver update and bugfix from 6.11
  - !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14193  nfs: fix the loss of superblock's initialized flags
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - nfs: fix the loss of superblock's initialized flags
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14180  xfs: allow inode inactivation during a ro mount log recovery
  - !14149  CVE-2024-53142
  - xfs: allow inode inactivation during a ro mount log recovery
  - !14123  mm: only enforce minimum stack gap size if it's sensible
  - !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
  - !14148 v2  xfs: revert fix patchs about attr inactive
  - initramfs: avoid filename buffer overrun
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
  - platform/x86: ISST: Fix return value on last invalid resource
  - platform/x86: ISST: Use only TPMI interface when present
  - platform/x86: ISST: Avoid some SkyLake server models
  - platform/x86: ISST: Add model specific loading for common module
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
  - !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
  - !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
  - mm: only enforce minimum stack gap size if it's sensible
  - config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
  - platform/x86/intel-uncore-freq: Don't present root domain on error
  - platform/x86/intel-uncore-freq: Increase minor number support
  - platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
  - platform/x86: ISST: Support SST-BF and SST-TF per level
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION
  - platform/x86: ISST: Add dev_fmt
  - platform/x86: ISST: Support partitioned systems
  - platform/x86: ISST: Shorten the assignments for power_domain_info
  - platform/x86: ISST: Use local variable for auxdev->dev
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems
  - platform/x86: ISST: Process read/write blocked feature status
  - EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
  - x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
  - EDAC/amd64: Rework hw_info_{get,put}
  - EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
  - EDAC/amd64: Issue probing messages only on properly detected hardware
  - EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
  - EDAC/amd64: Rename debug_display_dimm_sizes()
  - EDAC/amd64: Remove early_channel_count()
  - EDAC/amd64: Remove PCI Function 0
  - EDAC/amd64: Remove PCI Function 6
  - EDAC/amd64: Remove scrub rate control for Family 17h and later
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
  - x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
  - x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
  - x86/microcode/AMD: Rip out static buffers
  - x86/microcode/AMD: Fix mixed steppings support
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions
  - x86/microcode/AMD: Rename a couple of functions
  - crypto: ccp - Add support for PCI device 0x156E
  - crypto: ccp - Add support for PCI device 0x17E0
  - crypto: ccp - Add support for ringing a platform doorbell
  - crypto: ccp - Enable platform access interface on client PSP parts
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
  - crypto: ccp - Add support for an interface for platform features
  - crypto: ccp - Move some PSP mailbox bit definitions into common header
  - crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
  - crypto: ccp - Add support for new CCP/PSP device ID
  - i2c: designware: Fix improper usage of readl
  - i2c: designware: Add AMD PSP I2C bus support
  - genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
  - iommu/amd: Set iommu->int_enabled consistently when interrupts are set up
  - iommu/amd: Remove useless irq affinity notifier
  - x86/msi: Fix msi message data shadow struct
  - perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
  - perf script ibs: Support new IBS bits in raw trace dump
  - perf tool ibs: Sync AMD IBS header file
  - perf report: Add support to print a textual representation of IBS raw sample data
  - perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
  - perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
  - perf evlist: Use the right prefix for 'struct evlist' raw samples methods
  - perf report: Add tools/arch/x86/include/asm/amd-ibs.h
  - perf header: Record non-CPU PMU capabilities
  - perf inject: Keep some features sections from input file
  - libperf: Add preadn()
  - perf header: Add ability to keep feature sections
  - perf header: Store PMU caps in an array of strings
  - perf header: Pass "cpu" pmu name while printing caps
  - perf header: Support HYBRID_CPU_PMU_CAPS feature
  - perf header: Support HYBRID_TOPOLOGY feature
  - perf pmu: Add hybrid helper functions
  - perf pmu: Save detected hybrid pmus to a global pmu list
  - perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
  - perf pmu: Parse pmu caps sysfs only once
  - perf record ibs: Warn about sampling period skew
  - perf evsel: Make evsel__env() always return a valid env
  - perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
  - perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
  - perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
  - perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
  - perf record: Support new sample type for data page size
  - perf/x86/amd/core: Avoid register reset when CPU is dead
  - perf/x86/amd: Do not WARN() on every IRQ
  - iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
  - iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
  - iommu/amd: Fix union of bitfields in intcapxt support
  - iommu/amd: Use msi_msg shadow structs
  - iommu/intel: Use msi_msg shadow structs
  - x86/msi: Provide msi message shadow structs
  - genirq/msi: Allow shadow declarations of msi_msg:: $member
  - x86/apic: Always provide irq_compose_msi_msg() method for vector domain
  - x86/apic: Cleanup destination mode
  - x86/apic: Get rid of apic:: Dest_logical
  - x86/apic: Replace pointless apic:: Dest_logical usage
  - x86/apic: Cleanup delivery mode defines
  - x86/msi: Only use high bits of MSI address for DMAR unit


author: Li Nan <linan122@huawei.com> - 5.10.0-242.0.0.141
changelog:
  - !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14109  RDMA/hns: backport some bugfix from maillist linux
  - !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp


author: Li Nan <linan122@huawei.com> - 5.10.0-243.0.0.142
changelog:
  - !14246  soc: hisilicon: hbmdev: Only support built-in
  - !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - soc: hisilicon: hbmdev: Only support built-in
  - !14060  etmem : fix page_ref count leak and head missing useing problem
  - !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - etmem : fix page_ref count leak and head missing useing problem


author: Li Nan <linan122@huawei.com> - 5.10.0-244.0.0.143
changelog:
  - !14314  x86/sgx: Fix deadlock in SGX NUMA node search
  - !14315  media: v4l2-tpg: prevent the risk of a division by zero
  - !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14289 v2  erofs: add ondemand mode support
  - !14269  iomap: fix zero padding data issue in concurrent append writes
  - !14235  xfs: fix attr inactive issue
  - !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14330  mm/khugepaged: fix ->anon_vma race
  - !14305  RDMA/hns: Some patches are integrated into OLK-5.10
  - !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm/khugepaged: fix ->anon_vma race
  - !13006  Fix CVE-2024-50086
  - !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
  - !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
  - media: v4l2-tpg: prevent the risk of a division by zero
  - x86/sgx: Fix deadlock in SGX NUMA node search
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - RDMA/hns: Don't query *except on hip10*
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix bonding failure due to wrong reset_state
  - config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
  - IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14208 Fix perf coredump and refcnt inccoret
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: modify fscache_hash_cookie() to enhance security
  - cachefiles: prefault in user pages to aovid ABBA deadlock
  - fscache/cachefiles: add a memory barrier for page_write
  - fscache/cachefiles: add a memory barrier for waking and waiting
  - fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
  - wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
  - s390: provide arch_test_bit_acquire() for architecture s390
  - wait_on_bit: add an acquire memory barrier
  - erofs: unify anonymous inodes for blob
  - erofs: remove unused device mapping in meta routine
  - fscache: fix assertion failure in cachefiles_put_object()
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - fscache: fix op leak due to abort init after parent ready
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
  - cachefiles: Change the mark inactive sequence in erofs ondemand mode
  - cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - cachefiles: disallow to complete open requests with uninitialised ondemand_id
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - fscache: Add the unhash_cookie mechanism to fscache_drop_object()
  - cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
  - cachefiles: Fix cookie reference count leakage error
  - cachefiles: Restrict monitor calls to read_page
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - fscache: set the default value of object_max_active to 256
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: make on-demand read killable
  - cachefiles: never get a new anon fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: flush ondemand_object_worker during clean object
  - fscache: limit fscache_object_max_active to avoid blocking
  - cachefiles: flush all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: add consistency check for copen/cread
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
  - fscache: Fix trace UAF in fscache_cookie_put()
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - cachefiles: use mainline xattr in ondemand mode
  - fscache: rename new_location to new_version
  - erofs: switch to use new location
  - erofs: remove erofs_fscache_netfs
  - cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
  - cachefiles: use key_hash as csum for new location
  - cachefiles: skip volum csum cachefiles_cook_key() for new location
  - cachefiles: skip acc in cachefiles_cook_key() for new location
  - cachefiles: use volume key directly in cachefiles_cook_key() for new location
  - cachefiles: factor out helper to generate csum from cachefiles_cook_key()
  - cachefiles: factor out helper to generate acc from cachefiles_cook_key()
  - fscache: generate new key_hash for new location
  - fscache: add new helper to determine cachefile location
  - fscache: add a waiting mechanism when duplicate cookies are detected
  - erofs: maintain cookies of share domain in self-contained list
  - fscache: fix kernel BUG at __fscache_read_or_alloc_page
  - erofs: fix handling kern_mount() failure
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - erofs: check the uniqueness of fsid in shared domain in advance
  - fscache: fix assertion failure in fscache_put_object()
  - fscache: fix reference count leakage during abort init
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - erofs: relinquish volume with mutex held
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - erofs: fix page unlock advance during readahead
  - openeuler_defconfig: enable erofs ondemand for x86 and arm64
  - anolis: cachefiles: fix potential NULL in error path
  - anolis: cachefiles: add missing lock protection when polling
  - anolis: cachefiles: reset object->private to NULL when it's freed
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - anolis: cachefiles: resend an open request if the read request's object is closed
  - anolis: cachefiles: extract ondemand info field from cachefiles_object
  - anolis: cachefiles: introduce object ondemand state
  - anolis: fscache: export fscache_object_wq
  - anolis: cachefiles: optimize on-demand IO path with buffer IO
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag
  - erofs: fix use-after-free of fsid and domain_id string
  - erofs: protect s_inodes with s_inode_list_lock for fscache
  - erofs: introduce 'domain_id' mount option
  - erofs: Support sharing cookies in the same domain
  - erofs: introduce a pseudo mnt to manage shared cookies
  - erofs: introduce fscache-based domain
  - erofs: code clean up for fscache
  - anolis: erofs: implement fscache-based data readahead
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper
  - anolis: cachefiles: maintain a file descriptor to the backing file
  - erofs: leave compressed inodes unsupported in fscache mode for now
  - anolis: erofs: fix the name of erofs_fscache_super_index_def
  - erofs: use kill_anon_super() to kill super in fscache mode
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: make on-demand request distribution fairer
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix error return code in cachefiles_ondemand_copen()
  - anolis: cachefiles: fix volume key setup for cachefiles_open
  - anolis: cachefiles: replace BUG_ON() with WARN_ON()
  - cachefiles: narrow the scope of flushed requests when releasing fd
  - anolis: cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: fix misbehavior of unsupported chunk format check
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: introduce erofs_sb_has_xxx() helpers
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - erofs: don't use erofs_map_blocks() any more
  - [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
  - [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
  - [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
  - [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - [Backport]scsi: hisi_sas: Add firmware information check
  - [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - iomap: fix zero padding data issue in concurrent append writes
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - perf addr_location: Add init/exit/copy functions
  - perf maps: Use a pointer for kmaps
  - ksmbd: fix user-after-free from session log off
  - ksmbd: fix race condition between session lookup and expire


author: Li Nan <linan122@huawei.com> - 5.10.0-245.0.0.144
changelog:
  - !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14679  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14572  PCI: Fix use-after-free of slot->bus on hot remove
  - !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14777  tracing: Prevent bad count for tracing_cpumask_write
  - !14496  ovl: Filter invalid inodes with missing lookup function
  - !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14606  scsi: qla2xxx: Fix use after free on unload
  - !14579  io_uring: check for overflows in io_pin_pages
  - !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14734  Fix iBMA bug and change version
  - !14713  Fix CVE-2024-56705
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14601  nvme-pci: fix freeing of the HMB descriptor table
  - !14575  etmem: fix use-after-free of mm in the scan release process
  - !14381  virtiofs: use pages instead of pointer for kernel direct IO
  - !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - !14651  backport mainline bugfix patch
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14629  net/mlx5: Fix error path in multi-packet WQE transmit
  - !14627  crypto: hisilicon/qm - inject error before stopping queue
  - !14626  drm/amd/display: Check null pointers before using dc->clk_mgr
  - !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14700  CVE-2024-53158
  - !14457  cgroup: Fix potential overflow issue when checking max_depth
  - !14620  drm: zynqmp_kms: Unplug DRM device before removal
  - !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
  - media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: remove #ifdef HAS_NO_HMEM
  - !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14535  RDMA/mlx5: Move events notifier registration to be after device registration
  - !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14636  CVE-2024-56604_OLK-5.10
  - !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14523  The bugfix for LPM trie
  - !14650  memcg: fix soft lockup in the OOM process
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14436  crypto: bcm - add error check in the ahash_hmac_init function
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - memcg: fix soft lockup in the OOM process
  - !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - !14467  io_uring/tctx: work around xa_store() allocation error issue
  - !14503  net: phy: dp83869: fix memory corruption when enabling fiber
  - !14515  hfsplus: don't query the device logical block size multiple times
  - !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14388  CVE-2024-53173
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - crypto: hisilicon/qm - inject error before stopping queue
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - drm: zynqmp_kms: Unplug DRM device before removal
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: qla2xxx: Fix use after free on unload
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - nvme-pci: fix freeing of the HMB descriptor table
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - io_uring: check for overflows in io_pin_pages
  - etmem: fix use-after-free of mm in the scan release process
  - PCI: Fix use-after-free of slot->bus on hot remove
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14366  EDAC/bluefield: Fix potential integer overflow
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14380  io_uring: check if iowq is killed before queuing
  - !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - hfsplus: don't query the device logical block size multiple times
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14371 [OLK-5.10] update AMD Zen5 Turin feature
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - ovl: Filter invalid inodes with missing lookup function
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - io_uring/tctx: work around xa_store() allocation error issue
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - cgroup: Fix potential overflow issue when checking max_depth
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14409  bpf: fix OOB devmap writes when deleting elements
  - !14419  HID: wacom: fix when get product name maybe null pointer
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14268  Revert "unicode: Don't special case ignorable code points"
  - !14397  backport some patches from upstream about HCCS low power
  - !14392  arm64: stacktrace: Handle 'lr' in interrupt context
  - !14317  exfat: fix out-of-bounds access of directory entries
  - !14402  gpio: grgpio: Add NULL check in grgpio_probe
  - !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14363  CVE-2024-53217
  - HID: wacom: fix when get product name maybe null pointer
  - !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - !14407  NFSD: Prevent a potential integer overflow
  - !14378  ftrace: Fix regression with module command in stack_trace_filter
  - bpf: fix OOB devmap writes when deleting elements
  - !14375  fix CVE-2024-53197
  - NFSD: Prevent a potential integer overflow
  - gpio: grgpio: Add NULL check in grgpio_probe
  - soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
  - soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
  - soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
  - soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
  - soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
  - soc: hisilicon: kunpeng_hccs: Fix a PCC typo
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - arm64: stacktrace: Handle 'lr' in interrupt context
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - virtiofs: use pages instead of pointer for kernel direct IO
  - io_uring: check if iowq is killed before queuing
  - ftrace: Fix regression with module command in stack_trace_filter
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - EDAC/bluefield: Fix potential integer overflow
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - exfat: fix out-of-bounds access of directory entries
  - Revert "unicode: Don't special case ignorable code points"
  - gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans


author: Li Nan <linan122@huawei.com> - 5.10.0-246.0.0.145
changelog:
  - !14844  merge mainline patch into OLK-5.10
  - !14838 v2  fs: Filter specific inodes to prevent UAF issues
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - mm: kfence: fix using kfence_metadata without initialization in show_object()
  - x86/mm: Do not shuffle CPU entry areas without KASLR
  - fs: Filter specific inodes to prevent UAF issues
  - !14599  CVE-2024-56701
  - !14560  CVE-2024-56567
  - !14801  CVE-2024-53237
  - !14793  jfs: fix shift-out-of-bounds in dbSplit
  - !14815  OLK-5.10
  - !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14822  ALSA: 6fire: Release resources at card release
  - !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
  - ALSA: 6fire: Release resources at card release
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - driver core: Introduce device_find_any_child() helper
  - Bluetooth: fix use-after-free in device_for_each_child()
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - jfs: fix shift-out-of-bounds in dbSplit
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - ad7780: fix division by zero in ad7780_write_raw()


author: Li Nan <linan122@huawei.com> - 5.10.0-247.0.0.146
changelog:
  - !14414 sdma-dae: add print in exceptional branch
  - !14870  quota: flush quota_release_work upon quota writeback
  - !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14866  NFS: Fix up nfs_ctx_key_to_expire()
  - !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - quota: flush quota_release_work upon quota writeback
  - !14663  xsk: Add generic xdp multi-buffer send support
  - NFS: Fix up nfs_ctx_key_to_expire()
  - !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14857  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  - xsk: Add generic xdp multi-buffer send support
  - drivers:misc:sdma-dae: add print in exceptional branch


author: Li Nan <linan122@huawei.com> - 5.10.0-248.0.0.147
changelog:
  - !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14875  *** jffs2: Prevent rtime decompress memory corruption ***
  - !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
  - !14937 v2  Two CVE fixes for ksmbd
  - !14966  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14943  fix CVE-2024-57892
  - !14954  zram: fix NULL pointer in comp_algorithm_show()
  - !14948 Mainline patch to olk-5.10 v3
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
  - !14947  mm/slub: Reduce memory consumption in extreme scenarios
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
  - mm/slub: Reduce memory consumption in extreme scenarios
  - !14917  merge CVE patches into OLK-5.10
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - net: wangxun: change netdev uc addr num maxmium
  - net: wangxun: fix resolving ipv6 pakets extension header errors
  - net: wangxun: fix tx csum by soft except tcp udp sctp
  - drm/i915: Fix potential context UAFs
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
  - media: uvcvideo: Require entities to have a non-zero unique ID
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - um: net: Do not use drvdata in release
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
  - 9p/xen: fix release of IRQ
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - fbdev/sh7760fb: Alloc DMA memory from hardware device
  - ionic: Fix netdev notifier unregister on failure
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-248.0.0.148
changelog:
  - kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel


author: Li Nan <linan122@huawei.com> - 5.10.0-249.0.0.152
changelog:
  - !15061  ALSA: seq: oss: Fix races at processing SysEx messages
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
  - !15059  RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - RDMA/hns: Fix free_mr_qp not assigning qp->device in error flow
  - !15051  iio: light: vcnl4035: fix information leak in triggered buffer
  - !9883 AMD QoS new features BMEC and SMBA
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14956  nbd: don't allow reconnect after disconnect
  - !15046  pinmux: Use sequential access to access desc->pinmux data
  - !15015  spi: mpc52xx: Add cancel_work_sync before module remove
  - !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
  - [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
  - pinmux: Use sequential access to access desc->pinmux data
  - !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
  - !15014 v2  nilfs2: prevent use of deleted inode
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  - !15010  nvme-rdma: unquiesce admin_q before destroy it
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - nilfs2: prevent use of deleted inode
  - nvme-rdma: unquiesce admin_q before destroy it
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - tools headers cpufeatures: Sync with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Add per-rmid arch private storage for overflow and chunks
  - x86/resctrl: Group struct rdt_hw_domain cleanup
  - x86/resctrl: Add domain online callback for resctrl work
  - x86/resctrl: Merge mon_capable and mon_enabled
  - x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
  - x86/resctrl: Split struct rdt_domain
  - x86/resctrl: Add interface to write mbm_local_bytes_config
  - x86/resctrl: Add interface to write mbm_total_bytes_config
  - x86/resctrl: Add interface to read mbm_local_bytes_config
  - x86/resctrl: Add interface to read mbm_total_bytes_config
  - x86/resctrl: Support monitor configuration
  - x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
  - x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
  - x86/resctrl: Move MSR defines into msr-index.h
  - x86/resctrl: Include new features in command line options
  - x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
  - x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
  - x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
  - x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
  - x86/resctrl: Split struct rdt_resource
  - x86/resctrl: Fix kernel-doc in internal.h
  - x86/resctrl: Correct MBM total and local values
  - nbd: don't allow reconnect after disconnect
  - s390/cpum_sf: Handle CPU hotplug remove during sampling
  - fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-250.0.0.154
changelog:
  - !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
  - !15085  ila: call nf_unregister_net_hooks() sooner
  - !15100  ila: serialize calls to nf_register_net_hooks()
  - !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
  - !15096  net: inet: do not leave a dangling sk pointer in inet_create()
  - !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - !15086  net: Fix CVE-2024-50125
  - !15117 v3  net: Fix CVE-2024-56658
  - !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - !15124 v2  fix CVE-2024-53056 for olk-5.10
  - !15129  comedi: Flush partial mappings in error case
  - !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
  - comedi: Flush partial mappings in error case
  - iomap: avoid avoid truncating 64-bit offset to 32 bits
  - mm: resolve faulty mmap_region() error path behaviour
  - mm: unconditionally close VMAs on error
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
  - !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - ila: serialize calls to nf_register_net_hooks()
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
  - net: inet: do not leave a dangling sk pointer in inet_create()
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - Bluetooth: call sock_hold earlier in sco_conn_del
  - ila: call nf_unregister_net_hooks() sooner
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error


author: Li Nan <linan122@huawei.com> - 5.10.0-251.0.0.155
changelog:
  - !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
  - !15137  net/mlx5: Fix variable not being completed when function returns
  - !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - !15134  usb: typec: altmode should keep reference to parent
  - !15198  CVE-2024-57857
  - !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15199  power: supply: gpio-charger: Fix set charge current limits
  - power: supply: gpio-charger: Fix set charge current limits
  - RDMA/siw: Remove direct link to net_device
  - RDMA/siw: Fabricate a GID on tun and loopback devices
  - RDMA/siw: Use helper function to set sys_image_guid
  - RDMA/siw: Enable siw on tunnel devices
  - iio: pressure: zpa2326: fix information leak in triggered buffer
  - !15186  CVE-2024-57795
  - !15177  iio: imu: kmx61: fix information leak in triggered buffer
  - RDMA/rxe: Remove the direct link to net_device
  - RDMA: Export ib_device_get_netdev()
  - iio: imu: kmx61: fix information leak in triggered buffer
  - !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !15139  apparmor: fix 'Do simple duplicate message elimination'
  - !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
  - !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - !15077  kasan: fix incorrect return type of quarantine_put()
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
  - apparmor: fix 'Do simple duplicate message elimination'
  - net/mlx5: Fix variable not being completed when function returns
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  - usb: typec: altmode should keep reference to parent
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - kasan: fix incorrect return type of quarantine_put()
  - mm: Enhanced copy capabilities for Hygon processor


author: Li Nan <linan122@huawei.com> - 5.10.0-252.0.0.156
changelog:
  - !15293 ras: ACPI: HED: Always initialize before evged
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
  - ras: ACPI: HED: Always initialize before evged
  - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
  - EDAC/skx_common: Differentiate memory error sources
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC, i10nm: make skx_common.o a separate module
  - !15246  UBI/UBIFS mainline patch backport
  - !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
  - ubi: Add a check for ubi_num
  - ubifs: skip dumping tnc tree when zroot is null
  - !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
  - EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU


author: Li Nan <linan122@huawei.com> - 5.10.0-253.0.0.157
changelog:
  - !15447  Some bug fix patches for RDMA/hns to olk-5.10
  - !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - RDMA/hns: Fix default congestion control algorithm not set for kernel QP
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - RDMA/hns: Fix wrong value of max_sge_rd
  - RDMA/hns: Fix missing xa_destroy()
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
  - RDMA/hns: Fix invalid sq params not being blocked
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
  - RDMA/hns: Fix DCA error path in alloc_wqe_buf()
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15300 net: hns3: some bugfixes for hns3 driver
  - !15422  ocfs2: handle a symlink read error correctly
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15426 Some bug fix patches for OLK-5.10 hns RoCE
  - !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
  - RDMA/hns: Fix ifnullfree static warning
  - RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
  - RDMA/hns: Fix unmatched kmalloc and kvfree
  - RDMA/hns: Fix delay-destruction mechanism not processing kernel db
  - RDMA/hns: Fix delayed destruction of db not taking effect
  - RDMA/hns: Move mtr_node into the mtr struct
  - RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
  - net: hns3: add command queue trace for hns3
  - net: hns3: Revert "net: hns3: add command queue trace for hns3"
  - ocfs2: handle a symlink read error correctly
  - net: hns3: add mac tunnel number query
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
  - !15413  CVE-2025-21756
  - !15413  CVE-2025-21756
  - vsock: Orphan socket after transport release
  - vsock: Keep the binding until socket destruction
  - !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - !15295  netfilter: nf_set_pipapo: fix initial map fill
  - ipmr: do not call mr_mfc_uses_dev() for unres entries
  - net: hns3: fix oops when unload drivers paralleling
  - !15382  srcu: Tighten cleanup_srcu_struct() GP checks
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - !15387  crypto: qat - add param check for DH
  - !15389  orangefs: fix a oob in orangefs_debug_write
  - !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - !15241 KVM: arm64: pvsched bugfix and module param
  - orangefs: fix a oob in orangefs_debug_write
  - crypto: qat - add param check for DH
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
  - !15217 Add device HID for Hygon GPIO controller
  - !15217 Add device HID for Hygon GPIO controller
  - srcu: Tighten cleanup_srcu_struct() GP checks
  - !15232  smb: client: Fix netns refcount imbalance
  - !15232  smb: client: Fix netns refcount imbalance
  - !15348  Mainline Patch
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
  - bpf: Use preempt_count() directly in bpf_send_signal_common()
  - bpf: Send signals asynchronously if !preemptible
  - KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
  - !15307  net: sfc: add missing xdp queue reinitialization
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - !15279 [OLK-5.10]:update patches for sw64 architecture
  - net: sfc: add missing xdp queue reinitialization
  - netfilter: nf_set_pipapo: fix initial map fill
  - sw64: pci: add new files to help support ACPI-based PCI initialization
  - sw64: acpi: disable INTC initialization via ACPI MADT table
  - sw64: pci: bypass legacy PCI initialization when ACPI enabled
  - sw64: acpi: use early param to control whether ACPI is enabled
  - sw64: acpi: disable all ACPI features by default
  - pci: let pcibios_root_bridge_prepare() access bridge->windows
  - sw64: fix kernel crash caused by unaligned access exception
  - sw64: iommu: adjust iova map space
  - sw64: msi: split the msi file
  - sw64: use generic dma_direct_ops
  - sw64: fix cpu reduction bug in cpuautoplug
  - sw64: use generated macro in vrt_sigreturn.S
  - sw64: do not allow assembler reorder in __copy_user()
  - sw64: expand vmemmap
  - sw64: iommu: fix dma_supported of dma_ops
  - sw64: add support for TIF_NOTIFY_SIGNAL
  - sw64: fix stack trace error
  - sw64: register suspend entry for cpu 0 only
  - sw64: do not discard exit text at link time
  - sw64: fix syscall restart
  - sw64: usb: redefine some macros
  - sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
  - sw64: fix syscall sigreturn and rt_sigreturn
  - sw64: optimize hmcall rdusp() and wrusp()
  - sw64: rewrite syscall invocation in C
  - sw64: expand struct pt_regs
  - sw64: kvm: delete kvm_sw64_ops structure
  - sw64: add imemb at the end of fixup_hmcall()
  - sw64: c3b: get MCLK rate dynamically according to specification
  - sw64: fix default short clock rate
  - sw64: use call and br in kernel entry
  - sw64: modify do_[rt_]sigreturn
  - sw64: modify fixup_exception()
  - sw64: rewrite struct pt_regs
  - sw64: simplify pt_regs related code
  - sw64: fix pt_regs related code
  - sw64: avoid using wrusp()
  - sw64: use sp in pt_regs
  - sw64: kvm: move bind vcpu init code into kvm_core3.c
  - sw64: add arch/sw_64/Kbuild
  - sw64: Kconfig: clean up out-of-date deep sleep options
  - sw64: Kconfig: rename BUILTIN_DTB option
  - sw64: optimize C4 compilation
  - sw64: kprobe: allow kprobe in atomic sequence on C4
  - sw64: lib: optimize lib functions for C4
  - sw64: optimize __fpstate_save on C4
  - sw64: add new match interface for C4
  - sw64: add C4 FPE_INTDIV support
  - sw64: update default FPCR value
  - sw64: defconfig: add junzhang_defconfig for C4 serials
  - sw64: add basic support for C4 ISA
  - sw64: use PAGE_OFFSET as ktext address head
  - sw64: dts: add an empty dts to support SW8A temporarily
  - sw64: kconfig: add SW8A platform support
  - sw64: kvm: rebuild Core3 and Core4 virtualization
  - sw64: kvm: add support for Core4 memory virtualization
  - sw64: kvm: add config guard for C3B implementation
  - sw64: kvm: add C4 vcpu support
  - sw64: iommu: add new iommu v2 support
  - sw64: pci: add C4 PCI_MSI support
  - sw64: pci: add C4 PCI support
  - sw64: irq: add basic C4 irq support
  - sw64: timer: add C4 timer support
  - sw64: unify io operations interface for C3B and C4
  - sw64: add SW8A io addresses
  - sw64: mm: add C4 hugetlb support
  - sw64: mm: add C4 MMU support
  - sw64: topology: add C4 topology info
  - sw64: add C4 CSRs
  - sw64: add C4 barriers support
  - sw64: add C4 xchg operations support
  - sw64: add C4 bit operations support
  - sw64: add C4 atomic operations support
  - sw64: redesign __cpu_to_rcid initialization
  - sw64: topology: modify topology defines
  - sw64: rename some fields of struct vcpucb
  - sw64: mm: use static ZERO_PAGE
  - sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
  - sw64: mm: add more helpers to pgtable.h
  - sw64: mm: fix _PFN_MASK
  - sw64: mm: add _PAGE_CONT helpers
  - sw64: pci: rename PCI_DEVICE_ID_CHIP3
  - sw64: mm: rename _PAGE_PHU and _PAGE_PSE
  - sw64: remove unused file
  - sw64: remove out-of-date LOCK_FIXUP
  - sw64: fix compile error when CONFIG_PM is not set
  - sw64: kconfig: fix config error when PCI_MSI is not set
  - sw64: cpufreq: fix clockevents update method
  - sw64: fix excessive timer interrupts
  - sw64: simplify PMC interfaces
  - sw64: remove sw64_platform_ops
  - sw64: remove chip directory
  - sw64: reorganize pci setup related code
  - sw64: reorganize chip setup code
  - sw64: reorganize msi related code
  - sw64: reorganize basic irq handling code
  - sw64: reorganize pci related quirks
  - sw64: reorganize usb quirks related code
  - sw64: reorganize i2c related code
  - sw64: reorganize timer related code
  - sw64: reorganize cpu frequency related code
  - i2c: designware: add parameter MODEL_SUNWAY
  - sw64: fix compile warnings
  - sw64: cleanup hugetlb code
  - sw64: drop fpga and simulator support
  - sw64: fix indent of inline assembly
  - sw64: fix header include guards
  - sw64: add missing fallthrough
  - sw64: add missing break
  - sw64: Kconfig: remove out-of-date rwsem options
  - sw64: fix frequency in cpufreq_frequency_table
  - sw64: fix incorrect hmcalls in the virtual machine
  - sw64: remove arch overridden RLIM_INFINITY
  - sw64: do not set __ARCH_SI_TRAPNO
  - sw64: remove C3A support
  - sw64: fix s4 sleep bug
  - sw64: reorganize dependency of devmap helpers
  - i2c: sunway: do some cleanup for old i2c driver
  - i2c: designware: add sunway system I2C support
  - sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
  - sw64: modify lock instruction
  - sw64: update openeuler_defconfig
  - sw64: add save_stack_trace_regs()
  - sw64: tools: fix selftests/sigaltstack for sw64
  - sw64: determine external clock according to specification
  - sw64: fix uretprobe implementation
  - sw64: fix some cpu autoplug bugs
  - sw64: kvm: add support for cpu offline and online in guest
  - fbdev: sw64 use __raw I/O memory api
  - sw64: correct the definition of MAX_DMA_ADDRESS
  - sw64: remove S3 flag
  - sw64: rename ptrace macros
  - sw64: fix audit_syscall_exit()
  - sw64: fix some include format
  - sw64: update cpufreq's info when cpu frequency changed
  - sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
  - sw64: selftests/ftrace: add sw64 support for kprobe args tests
  - sw64: hibernation: update ktp to vcpucb after restoring it
  - sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
  - sw64: kvm: fix memory hotplug support for guest
  - sw64: hugetlbfs: add arch_hugetlb_valid_size
  - sw64: kvm: fix some build errors for KVM module
  - sw64: perf: add libbfd-buildid and disassembler-four-args support
  - sw64: fix a compile error for headers_install
  - sw64: fix shared_cpu_map of tcache's cacheinfo
  - sw64: kvm: fix an error with non-8MB aligned guest RAM size
  - sw64: selftests/vm: fix virtual address range mapping test
  - sw64: fix KBUILD_DEFCONFIG
  - sw64: send a fake signal to all blocking tasks
  - sw64: clean up useless cpu_idle wrap
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
  - pinctrl: Add device HID for Hygon GPIO controller
  - block: fix kabi broken due to removing bip_slab
  - block: fix kabi broken
  - block: fix rq-qos breakage from skipping rq_qos_done_bio()
  - block: only mark bio as tracked if it really is tracked
  - block: add a BUILD_BUG_ON() for adding more bio flags than we have space
  - block: use bi_max_vecs to find the bvec pool
  - md/raid10: remove dead code in reshape_request
  - block: mark the bio as cloned in bio_iov_bvec_set
  - block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
  - block: remove the 1 and 4 vec bvec_slabs entries
  - block: streamline bvec_alloc
  - block: factor out a bvec_alloc_gfp helper
  - block: move struct biovec_slab to bio.c
  - block: reuse BIO_INLINE_VECS for integrity bvecs


author: Li Nan <linan122@huawei.com> - 5.10.0-254.0.0.158
changelog:
  - !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
  - !15456  soc: hisilicon: Fix one printing issue and simplify some printing
  - !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
  - soc: hisilicon: Add checks against NULL pointer reference
  - soc: hisilicon: Fix one printing issue and simplify some printing
  - !15391  backport mainline bugfix patch
  - RDMA/hns: Fix mbox timing out by adding retry mechanism
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
  - genirq: Make handle_enforce_irqctx() unconditionally available


author: Li Nan <linan122@huawei.com> - 5.10.0-256.0.0.159
changelog:
  - !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - !15606  Fix instance dir use-after-free in tracefs
  - !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
  - tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
  - tracing: Avoid use-after-free in tracing_open_file_tr()
  - !15591 【olk 5.10】revert and backport a bugfix
  - net: hns3: add mac tunnel number query
  - Revert "net: hns3: add mac tunnel number query"
  - !15501  module: fix [e_shstrndx
  - !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
  - module: fix [e_shstrndx].sh_size=0 OOB access
  - !2893 igc: add default intel igc driver module support
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
  - x86/cpu: Add model number for Intel Clearwater Forest processor
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
  - igc:add default intel igc driver support


author: Li Nan <linan122@huawei.com> - 5.10.0-257.0.0.160
changelog:
  - !15643 drivers:misc:sdma-dae: sync code to openEuler
  - drivers:misc:sdma-dae: remove unnecessary return in void function
  - drivers:misc:sdma-dae fix incorrect resource release
  - drivers:misc:sdma-dae remove lock while pausing channels
  - drivers:misc:sdma-dae add mmu_notifier
  - drivers:misc:sdma-dae: add MODULE_VERSION to control version


author: Li Nan <linan122@huawei.com> - 5.10.0-258.0.0.161
changelog:
  - !15699  Push 2 self-developed patches to OLK-5.10
  - !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - !15669  arm64: mm: add mc support for __buffer_migrate_page
  - !15630  Fix CVE-2022-49553
  - !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - printk: Skip log flush in NMI context when logbuf_lock is held
  - x86: reboot: Initialize the printk locks to avoid deadlock
  - !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - !15646  nilfs2: do not force clear folio if buffer is referenced
  - !15676  sched/fair: Optimize the dynamic smt
  - !15330 [OLK-5.10]:update patches for sw64 architecture
  - sched/fair: Optimize the dynamic smt
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
  - arm64: mm: add mc support for __buffer_migrate_page
  - !15595  io_uring: prevent opcode speculation
  - nilfs2: do not force clear folio if buffer is referenced
  - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
  - fs/ntfs3: validate BOOT sectors_per_clusters
  - fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
  - io_uring: prevent opcode speculation
  - sw64: distribute intx interrupts by hose
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: fix msi interrupt for guest os
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: kvm: remove some unused codes
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: iommu: support acpi init
  - sw64: spi: update spi controller driver
  - sw64: irqchip: fix compatibility with old dts
  - sw64: kvm: fix pmd_trans_cont
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: acpi: fix coding style and typos
  - sw64: irq: fix compilation error
  - sw64: improve the verification logic of DTB
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: perf: add core4 pmu support
  - sw64: redesign struct kvm_regs for C4
  - sw64: store topology and numa info by each cpu itself
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: msi: fix sw64_set_affinity function in msi-v2
  - sw64: dynamically switch between lib implementation
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: iommu: adjust iova range
  - sw64: iommu: introduce generic DMA ops to iommu_v2
  - sw64: iommu: fix iommu_v2 compile problems
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: mm: fix PTE bits check
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: fix coding style and typos
  - sw64: acpi: fix function acpi_numa_processor_affinity_init()
  - sw64: fix rd_f compatibility issue for C4
  - sw64: export mclk for guest os
  - sw64: refactor device interrupt domain
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: add missing c4 intc kconfig
  - sw64: fix macro definition compilation error
  - i2c: designware: Do not complete i2c read without RX_FULL interrupt
  - sw64: add macros for mother board config info
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: pci: reset dma mask for devices on zx200
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
  - sw64: iommu: add default DMA ops for passthrough domains
  - sw64: iommu: recognize potential multiple aliases for devices
  - sw64: iommu: fix group allocation semantics
  - sw64: iommu: rename sunway iommu filenames
  - sw64: iommu: remove unnecessary locking for sunway iommu driver
  - sw64: fix dtb address validity check
  - sw64: iommu: use a generic implementation of DMA ops
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: kvm: add trace kvm function
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: make sure _PAGE_LEAF is zero for swap pte
  - sw64: get cpufreq_policy with standard interface
  - sw64: mm: fix function numa_clear_node()
  - sw64: acpi: enable upgrade acpi tables via initrd
  - sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
  - sw64: acpi: fix the function for parsing CPU affinity
  - sw64: acpi: use common functions about parsing SRAT and SLIT
  - sw64: acpi: enable CONFIG_ACPI_NUMA
  - sw64: move function setup_smp() before NUMA initialization
  - sw64: acpi: move ACPI initialization before NUMA initialization
  - sw64: pci: adjust the directory structure of PCI-related source files
  - sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
  - sw64: pci: support ACPI-based PCI initialization
  - sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
  - sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
  - sw64: pci: use pci_bus_to_pci_controller to get pci_controller
  - sw64: pci: add quirks for ACPI-based ECAM


author: Li Nan <linan122@huawei.com> - 5.10.0-259.0.0.162
changelog:
  - !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15802  hrtimers: Handle CPU state correctly on hotplug
  - hrtimers: Handle CPU state correctly on hotplug
  - !15679  list: fix a data-race around ep->rdllist
  - !15683  CVE-2025-21726
  - !15682  padata: fix UAF in padata_reorder
  - !15728  *** CVE-2025-21823 ***
  - !15782 sdma-dae: modify ttl_processes reduce logic
  - Revert "arm64: mm: add mc support for __buffer_migrate_page"
  - !15409  CVE-2025-21715
  - sdma-dae: modify ttl_processes reduce logic
  - !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - !15766  bpf, sockmap: Fix race between element replace and close()
  - !15765  CVE-2024-56642
  - drm/drm_vma_manager: Add drm_vma_node_allow_once()
  - !15769  gpio: aggregator: protect driver attr handlers against module unload
  - !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - gpio: aggregator: protect driver attr handlers against module unload
  - bpf, sockmap: Fix race between element replace and close()
  - tipc: fix NULL deref in cleanup_bearer()
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
  - !15365 mm/init: Add quirk for phytium ps23064 SoC
  - !15690  net: rose: fix timer races against user threads
  - !15716  CVE-2022-49513
  - !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - !15449  vrf: use RCU protection in l3mdev_l3_out()
  - batman-adv: Drop unmanaged ELP metric worker
  - batman-adv: Ignore neighbor throughput metrics in error case
  - batman-adv: fix panic during interface removal
  - batman-adv: Drop initialization of flexible ethtool_link_ksettings
  - batman-adv: Add new include for min/max helpers
  - !15701  usb: gadget: f_tcm: Don't free command immediately
  - !15510 v3  CVE-2025-21816
  - !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - mm/init: Add quirk for phytium ps23064 SoC
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - usb: gadget: f_tcm: Don't free command immediately
  - net: rose: fix timer races against user threads
  - padata: avoid UAF for reorder_work
  - padata: add pd get/put refcnt helper
  - padata: fix UAF in padata_reorder
  - list: fix a data-race around ep->rdllist
  - hrtimer: Fix kabi broken of struct hrtimer_cpu_base
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
  - hrtimer: Report offline hrtimer enqueue
  - PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
  - vrf: use RCU protection in l3mdev_l3_out()
  - net: davicom: fix UAF in dm9000_drv_remove


author: Li Nan <linan122@huawei.com> - 5.10.0-260.0.0.163
changelog:
  - !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - !15837  CVE-2025-21858
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - geneve: Fix use-after-free in geneve_find_dev().
  - !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15717  media: uvcvideo: Fix double free in error path
  - !15759  Fix kmemleak false positive
  - mt76: fix use-after-free by removing a non-RCU wcid pointer
  - !15378  ASoC: atmel: Fix error handling in snd_proto_probe
  - !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - !15816 perf: Configure BRBE correctly on VHE host
  - perf: Configure BRBE correctly on VHE host
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
  - media: uvcvideo: Fix double free in error path
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - ASoC: atmel: Fix error handling in snd_proto_probe


author: Li Nan <linan122@huawei.com> - 5.10.0-261.0.0.164
changelog:
  - !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15791  CVE-2025-21877
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
  - !15894  ftrace: Avoid potential division by zero in function_stat_show()
  - !15892  bnxt: Do not read past the end of test names
  - !15840  block: fix bugs in blk_register_queue()
  - !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
  - !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - !15756  powerpc: Fix save r13 on kprobe/ftrace entry
  - ftrace: Avoid potential division by zero in function_stat_show()
  - bnxt: Do not read past the end of test names
  - iommu/arm-smmu-v3: Fix the extra atc tlb flush
  - soc: hisilicon: Serialize the online and onfline the acpi devices
  - block: fix lock ordering in blk_register_queue() error path
  - block: fix resource leak in elevator registration error path
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  - usbnet: gl620a: fix endpoint checking in genelink_bind()
  - powerpc: Fix save r13 on kprobe/ftrace entry


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-262.0.0.165
changelog:
  - !16057 mailbox: pcc: Always clear the platform ack interrupt first
  - !16076  mpage: fix softlockup in mpage_readahead()
  - !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
  - !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - !16127  net: Fix CVE-2025-21763
  - !16125  ndisc: extend RCU protection in ndisc_send_skb()
  - !16129  arp: use RCU protection in arp_xmit()
  - arp: use RCU protection in arp_xmit()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - ndisc: extend RCU protection in ndisc_send_skb()
  - !16088  CVE-2024-58094
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - mpage: fix softlockup in mpage_readahead()
  - !16063  ndisc: Fix CVE-2025-21764
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - mailbox: pcc: Always clear the platform ack interrupt first
  - soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
  - !15776 [OLK-5.10] new bugfix from mainline for Turin
  - !15941  block: fix UAF in blk_mq_has_sqsched()
  - !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
  - !15938  md: bypass block throttle for superblock update
  - !15940  md/raid1: fix bitmap update when all write requests fail
  - !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
  - !15990  Backport the perf fix patch
  - perf: Really fix event_function_call() locking
  - perf: Fix event_function_call() locking
  - perf/core: Fix missing wakeup when waiting for context reference
  - perf/core: Fix perf_cgroup_switch()
  - block: Decode all flag names in the debugfs output
  - blk-mq: avoid to touch q->elevator without any protection
  - blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none
  - block: remove QUEUE_FLAG_DEAD
  - md/raid1: fix bitmap update when all write requests fail
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - md: bypass block throttle for superblock update
  - nvme-pci: fix multiple races in nvme_setup_io_queues
  - nvme-tcp: fix possible UAF in nvme_tcp_poll
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  - x86/CPU/AMD: Do the common init on future Zens too
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-263.0.0.166
changelog:
  - !16242  fuse: support fastpath
  - !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - fuse: support fastpath via fast_ipc
  - fuse: add fast path for fuse_range_is_writeback
  - fuse: fix matching of FUSE_DEV_IOC_CLONE command
  - fuse: 32-bit user space ioctl compat for fuse device
  - ipc: add fast_ipc module to enable fast process switching
  - !16036  proc: fix UAF in proc_get_inode()
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  - !16164  fix CVE-2023-53093
  - !16184  net/hinic3: Synchronize new NIC features and bug fixes
  - net/hinic3: Synchronize new NIC features and bug fixes
  - tracing/histograms: Allow variables to have some modifiers
  - tracing: Do not let histogram values have some modifiers
  - proc: fix UAF in proc_get_inode()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-264.0.0.167
changelog:
  - !16356  bugfixes for fuse fastpath and fast_ipc
  - !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - ipc: fix error kill signal handle in fast_ipc
  - fuse: add fuse fastpath forget cmd support
  - !16316  bpf: Fix kmemleak warning for percpu hashmap
  - !16343  ext4: fix OOB read when checking dotdot dir
  - !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
  - !16206  ext4: update s_journal_inum if it changes after journal replay
  - !16220  jbd2: remove wrong sb->s_sequence check
  - !15899  Backport mainline patches to avoid crash caused by rsize being 0
  - !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
  - !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - !15709 [OLK-5.10]:update patches for sw64 architecture
  - !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - ext4: fix OOB read when checking dotdot dir
  - !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
  - !16204  ext4: fix off-by-one error in do_split
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - bpf: Fix kmemleak warning for percpu hashmap
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  - !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
  - uffd: Fix bug of cannot set mode in userfaultfd_copy
  - !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - !13916 intel: backport intel_pstate driver update from 6.11
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - jbd2: remove wrong sb->s_sequence check
  - ext4: update s_journal_inum if it changes after journal replay
  - ext4: fix off-by-one error in do_split
  - cpufreq: intel_pstate: Support highest performance change interrupt
  - x86/cpufeatures: Add HWP highest perf change feature flag
  - iommu/vt-d: Set No Execute Enable bit in PASID table entry
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - sw64: provide arch_test_bit_acquire() for architecture sw64
  - sw64: ftrace: implement ftrace_modify_call
  - sw64: cpu: give preference to CPU information from SMBIOS
  - sw64: irqchip: use sunway as vendor prefix in device tree
  - sw64: irqchip: use pr_fmt instead of prefix string macro
  - sw64: numa: decrease CONFIG_NODES_SHIFT to 3
  - perf jitdump: Add SW64 support
  - sw64: emulator: add shutdown and restart functions
  - sw64: emulator: fix the multi-core boot issue
  - sw64: fix bad address error for vfio
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: add SO_NETNS_COOKIE definition
  - sw64: locking: Move qrwlock.h include after qspinlock.h
  - sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
  - sw64: fix kprobe function
  - sw64: perf: fix specific performance events can be sampled
  - sw64: bpf: optimize JIT for load imm
  - sw64: bpf: fix BPF_CALL JIT for multi-function programs
  - libbpf: add sw64 support
  - sw64: implementing VDSO with generic code
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: bpf: optimize some instructions
  - sw64: bpf: fix XADD32 and XADD64
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: update defconfig
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: cache: fix shared_cpu_map when PPTT is valid
  - sw64: kvm: fix tlb flush implementation of dirty page tracking
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: mm: support fdt memory reservation
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: perf: fix system hang problem when using perf callchain sampling
  - sw64: fix compilation issues on match.c
  - sw64: iommu: fix NULL hose check
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: pci: fix legacy PCI not initialized for XueLang platform
  - sw64: fix set_huge_pte_at for C4
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: pci: remove legacy io reservation
  - sw64: cache: give preference to cache information from PPTT table
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: fix judgements about legacy pci support
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: fix the register bug in do_entUna
  - sw64: iommu: improve iommu initialization
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - PCI: Allow architecture-specific pci_remap_iospace()
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: perf: remove redundant link options
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: pci: fix the policy of pci resource assignment
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
  - sw64: fix C4 INTx configuration
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: add __vdso_getcpu support
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: pciehp: get enabled/disabled status of RCs from firmware
  - sw64: reset the CSR:PTBR_USR
  - sw64: dts: support online-capable property for cpu device node
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq in guest os
  - sw64: handle null MSI irq
  - sw64: kvm: fix mmio GPA for C4
  - sw64: iommu: fix wrong devfn setup
  - sw64: iommu: fix some iova related checks
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: fix bugs in decreasing frequency
  - sw64: add cpu hotplug support for C4 guest
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: perf: hide hardware performance events in guest os for c4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix guest send ipi target
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: kvm: add numa support for memory hotplug
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: spi: fix compatibility with dts for xuelang
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: msi: modify msi migration strategy
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=start@size invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - cpufreq: intel_pstate: Simplify spinlock locking
  - cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
  - cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
  - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Revise global turbo disable check
  - cpufreq: intel_pstate: set stale CPU frequency to minimum
  - cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
  - cpufreq: intel_pstate: ITMT support for overclocked system
  - cpufreq: intel_pstate: Fix active mode offline/online EPP handling
  - cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
  - cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
  - cpufreq: intel_pstate: Process HWP Guaranteed change notification
  - cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
  - cpufreq: intel_pstate: Clean up frequency computations
  - cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
  - config: Enable the VGA and IGD features of vfio


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-265.0.0.168
changelog:
  - !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
  - !16357 [OLK-5.10]:update patches for sw64 architecture
  - !16258 修复CVE-2022-3238
  - !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
  - !16397 CVE-2025-37925
  - !16292 Fix CVE-2025-37773
  - !16318 Fix CVE-2025-37782
  - !16442 v4  io_uring patches backport
  - !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
  - !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
  - intel_idle: add Clearwater Forest SoC support
  - intel_idle: add Granite Rapids Xeon D support
  - io_uring/io-wq: do not use bogus hash value
  - io_uring/sqpoll: fix sqpoll error handling races
  - io_uring: protect register tracing
  - io_uring/sqpoll: close race on waiting for sqring entries
  - io_uring: check for iowq alloc_workqueue failure
  - io_uring: use private workqueue for exit work
  - io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
  - io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed
  - io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
  - io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
  - io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
  - drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
  - !16424  CVE-2024-57876
  - drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
  - drm/dp_mst: Fix resetting msg rx state after topology removal
  - sw64: gpu: replace __sw_64__ with CONFIG_SW64
  - sw64: kprobe on ftrace: fix bug in restoring regs
  - sw64: ioremap: map some IO space with ioremap
  - sw64: ioremap: fix an overflow in pci_remap_cfgspace
  - sw64: ioremap: support generic ioremap for C4
  - sw64: qspinlock: add CNA support for sw64
  - sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
  - sw64: move syscall handling to sys_sw64.c
  - sw64: improve sw64_rrk
  - sw64: fix printing issue when using kprobe on ftrace
  - sw64: add powercap driver
  - sw64: clocksource: fix the issue of clockevents not being notified
  - sw64: fix shared_cpu_map of L3 Cache
  - sw64: iommu: work around iova range check after resv_region
  - sw64: fix some compile issues for cpuautoplug.c
  - sw64: cpufreq: fix for emulator that do not support cpufreq
  - sw64: cpufreq: refactor cpufreq related code
  - sw64: cpufreq: remove some meaningless code
  - sw64: cpufreq: move cpufreq notifier to its user
  - sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
  - sw64: cpufreq: remove debugfs code
  - sw64: msi: fix guest msi interrupt handling
  - sw64: msi: clear the residual vector_irq information of cpu
  - sw64: ftrace: add notrace attribute to memset&memcpy
  - sw64: ftrace: fix bug in restoring regs
  - sw64: fix an error in BPF exception handling
  - sw64: fix cpu_autoplug error
  - sw64: msi: fix irq affinity setting during migration
  - sw64: use CONFIG_HZ_PERIODIC by default
  - sw64: fix specific performance counter error
  - sw64: enable all HW PMUs for max sampling period events
  - sw64: update exclusive counter handling
  - sw64: fix perf event L1I cache write support
  - sw64: kexec: add support for crashkernel=size[KMG]
  - sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
  - sw64: ftrace: save&restore more stack frame in ftrace_caller
  - sw64: fix secondary_cpu_start for CORE3B
  - sw64: fix inslb compiling error
  - sw64: vdso: add support for time namespaces
  - sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
  - sw64: kvm: optimize the compatibility of guest interrupt
  - sw64: kvm: optimize the implementation of guest interrupt
  - sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
  - sw64: ftrace: fix atomicity bugs in ftrace
  - sw64: fix nmi_[enter/exit] error in CORE3B
  - sw64: kvm: modify parameters of the exception functions
  - sw64: reimplement cmpxchg and xchg
  - sw64: enable -fsw-unalign-byte for new subarchs
  - sw64: reduce jump instructions in entUna
  - sw64: simplify GP handling for entUna
  - sw64: iommu: print more info for interrupts
  - sw64: add a 1ms delay before CPU offline
  - sw64: modify the interface for firmware to pass the running mode
  - sw64: change condition of some cflags
  - sw64: put cpu_set_node() in init text
  - sw64: make sw64_(read/write)_csr always inline
  - sw64: compile divide.S for c3b only
  - sw64: topology: discard topology information from PPTT
  - sw64/kvm: fix a bug for starting CORE3 VM
  - sw64: iommu: implement resv_region APIs
  - sw64: rename PT_REGS_SP to PT_REGS_R30
  - sw64: modify parameters of the exception functions
  - sw64: modify CPU autoplug initialization process
  - sw64: pci: fix secondary bus reset issue
  - sw64/vdso: support mremap() for vDSO
  - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  - jfs: reject on-disk inodes of an unsupported type
  - !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
  - sw64: sound: avoid pagefault in pcm driver's memset
  - sw64: flush TLB after modifying ptbr_sys
  - sw64: fix an error when running no main() program
  - !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
  - !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - sw64: perf: fix compilation error with undeclared EM_SW_64
  - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  - !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - fs/ntfs3: Fix double free on remount
  - Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
  - scsi: hisi_sas: Fixed failure to issue vendor specific commands
  - scsi: libsas: Abort all in-flight requests when device is gone
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
  - virtiofs: add filesystem context source name check


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-266.0.0.169
changelog:
  - !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
  - !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
  - !16535  CVE-2022-49647
  - !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
  - !16533  memcg: always call cond_resched() after fn()
  - !16452  xfs: read only mounts with fsopen mount API are busted
  - cgroup: fix kabi for css_set
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration
  - memcg: always call cond_resched() after fn()
  - !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
  - !16498  padata: do not leak refcount in reorder_work
  - !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
  - !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
  - !16457  fs/jfs: Prevent integer overflow in AG size calculation
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
  - padata: do not leak refcount in reorder_work
  - drivers:misc:sdma-dae: fix incorrect kmalloc flag
  - fs/jfs: Prevent integer overflow in AG size calculation
  - xfs: read only mounts with fsopen mount API are busted
  - powercap: intel_rapl_tpmi: Ignore minor version change
  - powercap: intel_rapl_tpmi: Fix bogus register reading
  - sched/fair: Fix the bug in dynamic smt when getting physical core load
  - cachefiles: Fix non-taking of sb_writers around set/removexattr
  - irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
  - irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
  - acpi/iort: Add func to get used deviceid bitmap


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-267.0.0.170
changelog:
  - !16640  IMA: use real_inode to get the i_version
  - !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - !16197 mm:fix return handling of cow_user_page
  - !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - IMA: use real_inode to get the i_version
  - mm:fix return handling of cow_user_page
  - !16584  tracing: Fix oob write in trace_seq_to_buffer()
  - !16625  Backport SMC-D feature
  - net: Fix kabi broken
  - net/smc: enable the smc-lo on the x86 and arm64 platforms
  - net/smc: use the correct ndev to find pnetid by pnetid table
  - s390/ism: add release function for struct device
  - net/smc: fix data error when recvmsg with MSG_PEEK flag
  - net/smc: delete pointless divide by one
  - net/smc: check return value of sock_recvmsg when draining clc data
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
  - net/smc: protect link down work from execute after lgr freed
  - net/smc: fix LGR and link use-after-free issue
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev()
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
  - net/smc: Fix memory leak when using percpu refs
  - net/smc: Address spelling errors
  - net/smc: Use static_assert() to check struct sizes
  - net/smc: add the max value of fallback reason count
  - net/smc: remove unused input parameters in smcr_new_buf_create
  - net/smc: remove redundant code in smc_connect_check_aclc
  - net/smc: remove the fallback in __smc_connect
  - net/smc: remove unreferenced header in smc_loopback.h file
  - net/smc: avoid overwriting when adjusting sock bufsizes
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
  - Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route()
  - net/smc: implement DMB-merged operations of loopback-ism
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged
  - net/smc: {at|de}tach sndbuf to peer DMB if supported
  - net/smc: add operations to merge sndbuf with peer DMB
  - net/smc: register loopback-ism into SMC-D device list
  - net/smc: ignore loopback-ism when dumping SMC-D devices
  - net/smc: mark optional smcd_ops and check for support when called
  - net/smc: implement DMB-related operations of loopback-ism
  - net/smc: implement ID-related operations of loopback-ism
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut
  - net/smc: decouple ism_client from SMC-D DMB registration
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings
  - net/smc: make smc_hash_sk/smc_unhash_sk static
  - net: smc: fix spurious error message from __sock_release()
  - net/smc: change the term virtual ISM to Emulated-ISM
  - net/smc: fix incorrect SMC-D link group matching logic
  - net/smc: manage system EID in SMC stack instead of ISM driver
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used
  - net/smc: support extended GID in SMC-D lgr netlink attribute
  - net/smc: compatible with 128-bits extended GID of virtual ISM device
  - net/smc: define a reserved CHID range for virtual ISM devices
  - net/smc: introduce virtual ISM device support feature
  - net/smc: support SMCv2.x supplemental features negotiation
  - net/smc: unify the structs of accept or confirm message for v1 and v2
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity
  - net/smc: fix missing byte order conversion in CLC handshake
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
  - s390/ism: ism driver implies smc protocol
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
  - net/smc: return the right falback reason when prefix checks fail
  - net/smc: fix smc clc failed issue when netdevice not in init_net
  - net/smc: Fix dependency of SMC on ISM
  - net/smc: Extend SMCR v2 linkgroup netlink attribute
  - net/smc: support max links per lgr negotiation in clc handshake
  - net/smc: support max connections per lgr negotiation
  - net/smc: support smc v2.x features validate
  - net/smc: add vendor unique experimental options area in clc handshake
  - net/smc: support smc release version negotiation in clc handshake
  - net/smc: Remove unused function declarations
  - s390/ism: Do not unregister clients with registered DMBs
  - s390/ism: Fix and simplify add()/remove() callback handling
  - s390/ism: Fix locking for forwarding of IRQs and events to clients
  - smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
  - s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
  - net/smc: Scan from current RMB list when no position specified
  - net/smc: Reset connection when trying to use SMCRv2 fails.
  - smc: Fix use-after-free in tcp_write_timer_handler().
  - net/smc: Use percpu ref for wr tx reference
  - net/smc: Introduce explicit check for v2 support
  - net/smc: Fix device de-init sequence
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
  - net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
  - net/smc: De-tangle ism and smc device initialization
  - s390/ism: Consolidate SMC-D-related code
  - net/smc: Separate SMC-D and ISM APIs
  - net/smc: Register SMC-D as ISM client
  - net/ism: Add new API for client registration
  - s390/ism: Introduce struct ism_dmb
  - net/smc: Terminate connections prior to device removal
  - net/smc: Fix an error code in smc_lgr_create()
  - net/smc: Support SO_REUSEPORT
  - net/smc: Pass on DMBE bit mask in IRQ handler
  - s390/ism: Cleanups
  - net/smc: Eliminate struct smc_ism_position
  - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
  - net/smc: Fix af_ops of child socket pointing to released memory
  - net/smc: use memcpy instead of snprintf to avoid out of bounds read
  - net/smc: Fix cleanup when register ULP fails
  - net/smc: return ETIMEDOUT when smc_connect_clc() timeout
  - net/smc: Limit backlog connections
  - net/smc: Remove unused function declaration
  - net/smc: Resolve the race between SMC-R link access and clear
  - net/smc: Resolve the race between link group access and termination
  - net/smc: Reset conn->lgr when link group registration fails
  - net/smc: add comments for smc_link_{usable|sendable}
  - net/smc: remove redundant re-assignment of pointer link
  - net/smc: Introduce TCP ULP support
  - net/smc: Print net namespace in log
  - net/smc: Introduce net namespace support for linkgroup
  - net/smc: Use the bitmap API when applicable
  - net/smc: Clean up local struct sock variables
  - net: make sock_inuse_add() available
  - net: inline sock_prot_inuse_add()
  - net/smc: stop links when their GID is removed
  - net/smc: add netlink support for SMC-Rv2
  - net/smc: extend LLC layer for SMC-Rv2
  - net/smc: add v2 support to the work request layer
  - net/smc: retrieve v2 gid from IB device
  - net/smc: add v2 format of CLC decline message
  - net/smc: add listen processing for SMC-Rv2
  - net/smc: add SMC-Rv2 connection establishment
  - net/smc: prepare for SMC-Rv2 connection
  - net/smc: save stack space and allocate smc_init_info
  - net/smc: add generic netlink support for system EID
  - net/smc: keep static copy of system EID
  - net/smc: add support for user defined EIDs
  - net/smc: no need to flush smcd_dev's event_wq before destroying it
  - net/smc: avoid possible duplicate dmb unregistration
  - net/smc: Remove redundant assignment to rc
  - net: smc: Remove repeated struct declaration
  - net/smc: Use active link of the connection
  - net/smc: use helper smc_conn_abort() in listen processing
  - net: smc: convert tasklets to use new tasklet_setup() API
  - net/smc: improve return codes for SMC-Dv2
  - Revert "anolis: net/smc: Resolve the race between link group access and termination"
  - Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
  - Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
  - Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
  - Revert "net/smc: Add size match for smc_buf_get_slot"
  - Partially revert 'net/smc: Clear memory when release and reuse buffer'
  - !16581  module: ensure that kobject_put() is safe for module type kobjects
  - SELinux: Add check for the user data passed to kcalloc in hashtab_init
  - !16566 [OLK-5.10]:update patches for sw64 architecture
  - !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
  - !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
  - !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
  - !16340 drivers: update Yunsilicon drivers to version 2412GA
  - !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
  - !16589  ipc: fix to protect IPCS lookups using RCU
  - !16572  sched: Support NUMA parallel scheduling for multiple processes
  - ipc: fix to protect IPCS lookups using RCU
  - tracing: Fix compilation warning on arm32
  - tracing: Fix oob write in trace_seq_to_buffer()
  - module: ensure that kobject_put() is safe for module type kobjects
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
  - sched: Support NUMA parallel scheduling for multiple processes
  - !16553  net/oenetcls: introduce oenetcls for network optimization
  - !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
  - vp_vdpa: fix the crash in hot unplug with vp_vdpa
  - sw64: sort arch/sw64/Kconfig
  - sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
  - sw64: optimize unaligned access
  - sw64: termios: implement BOTHER, IBSHIFT and termios2
  - sw64: ftrace: No need to save original function's temporary registers
  - sw64: mm: adjust userspace memory layout
  - sw64: cpufreq: fix the frequency returned by cpufreq_driver->get()
  - sw64: remove redundant qspinlock.h from Kbuild
  - net/oenetcls: introduce oenetcls for network optimization
  - media: venus: hfi_parser: refactor hfi packet parsing logic
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain
  - platform/x86/intel-uncore-freq: Use generic helpers for current frequency
  - platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
  - platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
  - platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
  - platform/x86/intel-uncore-freq: Get rid of magic min_max argument
  - platform/x86/intel-uncore-freq: Get rid of magic values
  - platform/x86/intel-uncore-freq: Re-arrange bit masks
  - iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
  - drivers: update Yunsilicon drivers to version 2412GA


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-268.0.0.171
changelog:
  - !16710 v10  arm64: Support xcall prefetch
  - !16615  pci:vga fix race condition in vga_arb_write
  - !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - !16713  usb: cdc-acm: Check control transfer buffer size before access
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - usb: cdc-acm: Check control transfer buffer size before access
  - !16664  Fix watchdog false positive problem
  - config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
  - xcall: Add tracepoints for different prefetching stages
  - eventpoll: Add /proc/xcall/cpu_list for performance tuning
  - eventpoll: Add /proc/xcall/prefetch dir for performance tuning
  - eventpoll: Support xcall async prefetch
  - arm64: Introduce xcall prefetch enable interface
  - arm64: Reserve a kabi in task_struct exclusively for xcall
  - arm64: Refactor the xcall proc code
  - arm64: revert kpti bypass
  - arm64: Add debugfs dir for xint
  - arm64: Introduce Xint software solution
  - arm64: Faster SVC exception handler with xcall
  - arm64: Introduce xcall a faster svc exception handling
  - !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
  - !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
  - !16693  arm64: uaccess: avoid blocking within critical sections
  - arm64: uaccess: avoid blocking within critical sections
  - !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
  - !16681  CVE-2023-53039
  - drivers:misc:sdma-dae: sdma fix uncorrect sleep time
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
  - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
  - devm-helpers: Add resource managed version of work init
  - workqueue: Add resource managed version of delayed work init
  - !15244 Add support for Hygon family 18h model 8h
  - !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
  - !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
  - mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
  - watchdog: fix the SOFTLOCKUP_DETECTOR=n case
  - watchdog: fix watchdog may detect false positive of softlockup
  - crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
  - crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
  - crypto: ccp: Don't check tee support on Hygon platform
  - crypto: ccp: Introduce hygon specific interface to support driver
  - iommu: smmuv3: Not print information of SMMU 0x10 event
  - pci:vga fix race condition in vga_arb_write
  - scsi: target: Fix WRITE_SAME No Data Buffer crash
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-269.0.0.172
changelog:
  - !16578  ext4: ignore xattrs past end
  - !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
  - !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
  - !16749  arm64: xcall: Fix GPR touch as the original step
  - !16774  bpf: Fix prog_array_map_poke_run map poke update
  - !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bpf: Fix prog_array_map_poke_run map poke update
  - !16768  RDMA/hns: Get messgae length of ack_req from FW
  - RDMA/hns: Get messgae length of ack_req from FW
  - !16750 v2  add-exec-ebpf-v3
  - !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - !16706  OLK-5.10 Bperf
  - !16735 [OLK-5.10]:update patches for sw64 architecture
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  - sched/ebpf: Add helper to set prefer cpumask for the task
  - sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
  - arm64: xcall: Fix GPR touch as the original step
  - sw64: irqchip: update effective affinity for PINTC
  - sw64: irqchip: add support for PINTC on all NUMA nodes
  - sw64: ioremap: fix IO interfaces
  - sw64: cpufreq: optimize the granularity of cpufreq
  - sw64: ftrace: remove temporary registers left in context saving
  - sw64: kvm: fix undefined compile issues for kvm module
  - sw64: pintc: fix guest pintc init
  - sw64: set module region to the 2GB space below vmalloc area
  - Fix type mismatch between struct perf_cpu and integer operations
  - perf test shell stat_bpf_counters: Fix test on Intel
  - perf stat: Fix error check for bpf_program__attach
  - perf stat: Fix error return code in bperf__load()
  - perf build: Properly guard libbpf includes
  - perf stat: Separate bperf from bpf_profiler
  - perf docs: Document bpf event modifier
  - perf stat: Fix handling of unsupported cgroup events when using BPF counters
  - bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
  - perf test: Use sqrtloop workload to test bperf event
  - perf test stat_bpf_counter.sh: Stabilize the test results
  - perf test bpf-counters: Add test for BPF event modifier
  - perf test: Add a shell test for 'perf stat --bpf-counters' new option
  - perf stat: Fix incorrect display of bperf when event count is 0
  - perf stat: Increase perf_attr_map entries
  - perf stat: Support inherit events during fork() for bperf
  - perf stat: Fix BPF program section name
  - perf bpf_skel: Do not use typedef to avoid error on old clang
  - perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
  - perf stat: Enable BPF counter with --for-each-cgroup
  - perf bpf_counter: Move common functions to bpf_counter.h
  - perf tools: Add cgroup_is_v2() helper
  - perf tools: Add read_cgroup_id() function
  - perf stat: Introduce bpf_counter_ops->disable()
  - perf stat: Introduce ':b' modifier
  - perf stat: Introduce config stat.bpf-counter-events
  - perf bpf: check perf_attr_map is compatible with the perf binary
  - perf util: Move bpf_perf definitions to a libperf header
  - perf stat: Measure 't0' and 'ref_time' after enable_counters()
  - perf stat: Introduce 'bperf' to share hardware PMCs with BPF
  - perf stat: Enable counting events for BPF programs
  - perf build: Support build BPF skeletons with perf
  - bpftool: Add Makefile target bootstrap
  - perf tools: Add 'cgroup-switches' software event
  - perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
  - perf core: Factor out __perf_sw_event_sched
  - bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
  - ext4: ignore xattrs past end
  - locking/qspinlock: Micro-optimize pending state waiting for unlock
  - bcache: allow allocator to invalidate bucket in gc
  - bcache: call force_wake_up_gc() if necessary in check_should_bypass()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-270.0.0.173
changelog:
  - !16892 v5  HiSock Redirect Framework
  - !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_ext_memcpy extension helper for arm64
  - arm64: insn: Add some opcodes to instruction decoder
  - bpf: Add bpf_change_skb_dev helper
  - bpf: Add bpf_set_ingress_dst helper
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_get_ingress_dst helper
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
  - !16860  arm64: kaslr: fix nokaslr cmdline parsing
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16816  CVE-2024-26798
  - !15234 Add support edac for hygon family 18h model 10h
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16849 v4  Introduce soft domain v4
  - sched: Fix might sleep in atomic section issue
  - sched: Balance newly task to soft domain
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - !16847  net/oenetcls: Support cluster sched
  - !16840  A small fix for ftrace preemption count
  - !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - net/oenetcls: Support cluster sched
  - !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - ftrace: Fix preemption accounting for stacktrace filter command
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !15238 Add LS and IF mce types for Hygon family 18h model 7h
  - !15239 Add IOAPIC support for Hygon family 18h model 10h
  - !16819  nfsd: don't ignore the return code of svc_proc_register()
  - nfsd: don't ignore the return code of svc_proc_register()
  - fbcon: always restore the old font data in fbcon_do_set_font()
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed
  - fbdev: fbcon: Properly revert changes when vc_resize() failed
  - !16786  Fix CVE-2022-50230
  - !16801 v4  add soft quota
  - sched: Fix kabi broken in struct task_group and struct cfs_rq
  - sched: More flexible use of CPU quota when CPU is idle
  - !16794  eventpoll: Fix soft lockup in xcall_read()
  - crypto: hct: update hct driver to support both guest and host.
  - crypto: hct: provides hygon crypto technology ccp device driver.
  - crypto: ccp: support sm2 on Hygon generation 4th CPU
  - crypto: ccp: remove repeated sm4-hs mode
  - crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
  - crypto: ccp: Process multiple VQ commands once for SM3 ccp.
  - crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
  - crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
  - crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
  - crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
  - crypto: ccp: Only handle interrupts by completion.
  - crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
  - crypto: ccp: Support SM4 algorithm for hygon ccp.
  - crypto: ccp: Support SM3 algorithm for hygon ccp.
  - crypto: ccp: Support SM2 algorithm for hygon ccp.
  - eventpoll: Fix soft lockup in xcall_read()
  - arm64: set UXN on swapper page tables
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h


author: lingsheng <lingsheng1@h-partners.com> - 3.5.2-9
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangkai <13474090681@163.com> - 1.76.0-1
changelog:
  - Update to 1.76.0 because firefox update 128ESR version
  - Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
  - Obsoletes rust-analysis


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-314
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-318
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: fuanan <fuanan3@h-partners.com> - 9.0-11
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch
        backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 9.0-12
changelog:
  - skip testcase for overlay filesystem because of no inotify_add_watch
    add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-16
changelog:
  - sync patches from community
  - add backport-pinky-fix-string-size-calculation.patch
        backport-cksum-consistently-validate-length-attributes.patch
        backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
        backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
        backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
        backport-coreutils-df-direct.patch
        backport-df-fix-memory-leak.patch
        backport-ls-avoid-triggering-automounts.patch
        backport-pr-don-t-use-uninitialized-var.patch
        backport-stat-only-automount-with-cached-never.patch
        backport-touch-fix-aliasing-bug.patch
        backport-putenv-Don-t-crash-upon-out-of-memory.patch
        backport-head-off_t-not-uintmax_t-for-file-offset.patch
        backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
        backport-shuf-fix-randomness-bug.patch


author: huyubiao <huyubiao@huawei.com> - 9.0-18
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the problem that function cpu_report_result() is called more than once
         fix error handling


author: zhuofeng <zhuofeng2@huawei.com> - 1.0.2-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix syssentry fails to be started when cpu_sentry is not installed


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:optimize the handing of cat-cli error msg in cpu_sentry
         over threshold should be warn level log in cat-cli


author: luckky <guodashun1@huawei.com> - 1.0.2-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix uint8 bug and change page isolation threshold default value


author: luckky <guodashun1@huawei.com> - 1.0.2-20
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: update the commit of the log level and format function of sysSentry


author: chenhaixiang <chenhaixiang3@huawei.com> - 8.0.2-2
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
    when corrupt stack pointer address is given


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.79.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: hanhuihui <hanhuihui5@huawei.com> - 4.14.0-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.14.0-20
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: renmingshuai <renmingshuai@huawei.com> - 2.86-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.86-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         adapt bugfix allow binding mac with ipv6


author: hankangknag <hankangknag5@huawei.com> - 21.11-68
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - mlx5: device should be started to set the flow


author: chenyi <chenyi211@huawei.com> - 21.11-69
changelog:
  Sync some patches from upstream about bugfix, modifies
   are as follow:
   - net/hns3: check Rx DMA address alignmnent


author: hankangknag <hankangknag5@huawei.com> - 21.11-70
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - net/af_xdp: parse UMEM map info from mempool
  - bpf: disable on 32-bit x86
  - net/af_xdp: remove unused local statistic
  - net/af_xdp: fix stats reset
  - net/af_xdp: count mbuf allocation failures
  - net/af_xdp: fix port ID in Rx mbuf
  - net/af_xdp: support AF_XDP device plugin pinned maps
  - net/af_xdp: fix multi-interface support for k8s
  - net/af_xdp: fix leak on XSK configuration failure
  - net/af_xdp: fix memzone leak on config failure
  - net/af_xdp: avoid error log for virtual interfaces
  - net/af_xdp: fix Rx and Tx queue state
  - net/af_xdp: fix missing UMEM feature
  - rework atomic intrinsics fetch operations
  - build: clarify configuration without IOVA field in mbuf
  - net/af_xdp: fix socket handler validation
  - net/af_xdp: support CNI Integration
  - net/af_xdp: parse NUMA node ID from sysfs
  - drivers: mark SW PMDs to support disabling IOVA as PA
  - net/af_xdp: make compatible with libbpf 0.8.0
  - net/af_xdp: add log on XDP program removal failures
  - net/af_xdp: avoid version-based check for program load
  - net/af_xdp: avoid version-based check for shared UMEM
  - net/af_xdp: make clear which libxdp version is required
  - net/af_xdp: move XDP library presence flag setting
  - net/af_xdp: allow using copy mode in XSK
  - net/af_xdp: fix shared UMEM fill queue reserve
  - net/af_xdp: fix custom program loading with multiple queues
  - net/af_xdp: reserve fill queue before socket create
  - net/af_xdp: ensure socket is deleted on Rx queue setup error
  - net/af_xdp: make compatible with libbpf >= 0.7.0
  - net/af_xdp: add missing trailing newline in logs
  - net/af_xdp: allow probing when multiprocess is disabled
  - ethdev: introduce generic dummy packet burst function
  - net/af_xdp: re-enable secondary process support
  - net/af_xdp: make UMEM configure more readable
  - net/af_xdp: use libxdp if available
  - net/af_xdp: fix build with -Wunused-function


author: chenyi <chenyi211@huawei.com> - 21.11-78
changelog:
  Sync some patches from upstream about bugfix, modifies are as follow:
  - bus/pci: fix UIO resource mapping in secondary process


author: xinghe <xinghe2@h-partners.com> - 2.0.11-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: yanglu <yanglu72@h-partners.com> - 2.0.11-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:rebuild package to ensure that the upgrade between branches is normal


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202011-14
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202011-16
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
  - SUG:NA
  - DESC: Batch fix cve through rebuild and sync release


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
    CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
    CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
    CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
    CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
    CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
    CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
    CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
    CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
    CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
    CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
    CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
    CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
    CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
    CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
    CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
    CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
    CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
    CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
    CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
    CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
    CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
    CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
    CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
    CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
    CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
    CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
    CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
    CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
    CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
    CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012


author: wangkai <13474090681@163.com> - 128.8.0-1
changelog:
  - Update to 128.8.0
  - Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
    CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938


author: wangkai <13474090681@163.com> - 128.10.0-1
changelog:
  - Update to 128.10.0
  - Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093


author: wangkai <13474090681@163.com> - 128.11.0-1
changelog:
  - Update to 128.11.0
  - Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
  - Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269


author: xinghe <xinghe2@h-partnres.com> - 1.0.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix zone combined forward must not default to True
         fix fw icmptype don't alter ipvs in io_object
         fix check config use the dictionary variants
         fix functions check config fails if direct.xml exists
         fix service adding includes


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         nftables always flush main table on start


author: zhanghao <zhanghao383@huawei.com> - 1.0.2-7
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
         related ko when stopping firewalld service


author: zhouyihang <zhouyihang3@h-partners.com> - 1.0.2-8
changelog:
  - Type:requirement
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix str2enum bug & data query refactor
  - add systemd service for anteater
  - remove 'sys-level' config param
  - add chinese descriptions
  - Update TCP Establish Model & Add Nic Loss Detector
  - Add disk throughput detector


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-47
changelog:
  - fix coredump when get empty from udp sendring
  - [virtio]: distribute pkg by dst_port
  - parse packages type in rx_poll
  - [virtio]: cfg ipv4 and ipv6 addr
  - fix build failed in 2003sp4
  - fix dpdk_bond_primary_set bug
  - cfg: del unnecessary logs
  - perftool: add latency tool


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-48
changelog:
  - add flow_bifurcation switch in lstack_cfg file
  - virtio: dfx data of virtio
  - virtio: update g_rule_port by reg_ring_type enum
  - virtio: mode actual_queue_num
  - fix poll init not clear old fd


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-50
changelog:
  - cleancode: rename gazelle files in lwip
  - add .gitignore
  - cleancode: improving makefile readability


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-10
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: Funda Wang <fundawang@yeah.net> - 9.55.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.55.0-19
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.33.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch


author: fuanan <fuanan3@h-partners.com> - 2.33.0-10
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.33.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.33.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.33.0-14
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: chengyechun <chengyechun1@huawei.com> - 2.34-148
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.34-149
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: shixuantong <shixuantong1@huawei.com> - 2.34-150
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:elf: Add TLS modid reuse test for bug 29039
         elf: Fix TLS modid reuse generation assignment
         elf: Check objname before calling fatal_error
         elf: Fix _dl_debug_vdprintf to work before self-relocation
         elf: ldconfig should skip temporary files created by package managers
         ldconfig: Fixes for skipping temporary files.


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: shixuantong <shixuantong1@huawei.com> - 2.34-162
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: avoid jumping over a needed declaration
         elf: Move __rtld_malloc_init_stubs call into _dl_start_final


author: shixuantong <shixuantong1@huawei.com> - 2.34-163
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:elf: Handle static PIE with non-zero load address
         elf: Introduce _dl_relocate_object_no_relro
         elf: Switch to main malloc after final ld.so self-relocation


author: hanchao <hanchao63@huawei.com> - 1.17.3-28
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.17.3-31
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: Funda Wang <fundawang@yeah.net> - 1.18.4-8
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: yangchenguang <yangchenguang@kylinsec.com.cn> - 3.24.30-8
changelog:
  - Fix the problem that the prompt information of network icon volume icon is not displayed
  - update xscreen size when x11 screen size change
  - always send the monitors changed signal when screen size change
  - Add function definition of gtk_image_set_from_pixbuf_with_scale


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: xinghe <xinghe2@h-partners.com> - 2.6.6-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:backport to fix potential coredump:
         errors: handle malloc failure in usermsgs_put
         ssl_sock: add check for ha_meth
         thread: add a check for pthread_creat


author: xinghe <xinghe2@h-partners.com> - 2.6.6-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:server: add missing free for server->rdr_pfx
         server: do not leak default-server in defaults


author: xinghe <xinghe2@h-partners.com> - 2.6.6-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.6.6-12
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         fix timehopping in freq_ctr_total


author: xinghe <xinghe2@h-partners.com> - 2.6.6-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.6.6-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: seuzw <930zhaowei@163.com> - 2.4.51-13
changelog:
  - Type:cves
  - ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Fix double encoding of the uri-path of the request
         Do not match the extention against possible query string
         Do not double encode slashes
         Check before forwarding that a nocanon path has not been rewriteen


author: panchenbo <panchenbo@kylinsec.com.cn> - 2.4.51-18
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-21
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-22
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.51-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-7
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: bugfix of background execution exec error command and setting negative cpu-rt issue


author: zhongtao <zhongtao17@huawei.com> - 2.1.5-8
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: gaoxingwang <gaoxingwang1@huawei.com> - 10.12-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: mufengyan <mufengyan@hisilicon.com> - 1:5.15.0-15
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liubo <liubo335@huawei.com> - 1:5.15.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: liubo <liubo335@huawei.com> - 1:5.15.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:f_flower: Treat port 0 as valid
         ip: error out if iplink does not consume all options
         iplink_bridge: fix incorrect root id dump
         ss: change aafilter port from int to long (inode support)
         ss: Fix socket type check in packet_show_line()
         ss: print unix socket "ports" as unsigned int (inode)
         Add utility to convert an unsigned int to string
         Add get_long utility and adapt get_integer accordingly
         utils: fix get_integer() logic


author: liweigang <liweiganga@uniontech.com> - 1:5.15.0-19
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: lnstat: Fix deref of null in print_json() function
          iproute2: prevent memory leak
          libnetlink: validate nlmsg header length first
          tc: remove tcindex classifier
          ip: fix memory leak in 'ip maddr show'
          ila: fix potential snprintf buffer overflow
          bridge: fix potential snprintf overflow
          mnl_utils: sanitize incoming netlink payload size in callbacks


author: caokeming <caokeming@huawei.com> - 1:5.15.0-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ctrl: Fix fd leak in ctrl_list()
         ctrl: Fix fd leak in ctrl_listen()
         devlink: use snprintf instead of sprintf


author: xinghe <xinghe2@h-partners.com> - 1:5.15.0-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.422-b05.4
changelog:
  - Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
  - Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.452.b09-0
changelog:
  - update to 8u452
  - modified add-missing-test-case.patch
  - modified GCC-12-reports-some-compiler-warnings.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:21.0.6.7-0
changelog:
  - update to jdk21.0.6-ga
  - delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
  - delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
  - delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
  - delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
  - delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
  - delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
  - delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
  - modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
  - modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch


author: wulongyao <wulongyao1@huawei.com> - 1:21.0.6.7-2
changelog:
  - add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add huawei-Add-KAE-Provider.patch
  - add huawei-Add-KAE-zip-feature.patch
  - add huawei-Fix-arm32-build-failed-undefined-reference.patch
  - add huawei-Add-Fast-Serialzer.patch
  - add huawei-Add-Hashmap-frontCache-opt.patch
  - add huawei-1-add-port-jbolt-feature.patch
  - add huawei-heap-dump-redact-support.patch
  - add huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-Add-KAE-SM2.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.6.7-3
changelog:
  - add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
  - add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
  - add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
  - add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
  - add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
  - add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:21.0.7.6-0
changelog:
  - update to jdk21.0.7-ga
  - delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
  - delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
  - delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
  - modify huawei-Adapt-to-clang-build-toolchain.patch
  - add huawei-fix-build-fail-realpath.patch
  - modify huawei-heap-dump-redact-support.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: sunhai <sunhai10@huawei.com> - 0.16-5
changelog:
  - Handle yet another out of memory condition
  - Fix issue 854 Set error json_tokener_error_memory in
  - Issue 857 fix a few places where json_tokener should
  - Handle NULL gracefully in json_tokener_free
  - Issue 881 don t allow json_tokener_new_ex with a dep


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ignore sssnic module when building hotpatch to fix sssnic wrongly dependency of sssnic


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.5-12
changelog:
  - Type:bugfix
  - ID:NA                                                                                                         
  - SUG:NA
  - DESC:adpat kpatch bundle symbols to kernel change


author: yanglongkang <yanglongkang@h-partners.com> - 2.37.2-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-Fix-ul_path_read_buffer.patch
         backport-fsck.minix-fix-possible-overrun.patch
         backport-wall-fix-possible-memory-leak.patch
         backport-wall-make-sure-unsigned-variable-not-underflow.patch


author: liyuzhe <liyuzhe@cqsoftware.com.cn> - 2.37.2-36
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-login-su-pam_end-compliance.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add]backport-lsmem-make-lsmem-to-check-for-the-nodes-more-robust.patch
         backport-cfdisk-fix-possible-integer-overflow-coverity-scan.patch
         backport-more-make-sure-we-have-data-on-stderr.patch
         backport-libblkid-apfs-validate-checksums.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-39
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-sys-utils-setpriv-fix-potential-memory-leak.patch
         backport-sys-utils-save_adjtime-fix-memory-leak.patch


author: zhangyao <zhangyao108@huawei.com> - 2.37.2-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         [add] backport-libblkid-ext-add-checksum-support.patch
         backport-libblkid-fix-spurious-ext-superblock-checksum-mismat.patch
         backport-libblkid-fix-potential-memory-leaks.patch
         backport-sys-utils-fix-add-NULL-check-for-mnt_fs_get_target-r.patch
         backport-sulogin-fix-POSIX-locale-use.patch
         backport-setpriv.c-fix-memory-leak-in-parse_groups-function.patch
         backport-whereis-avoid-accessing-uninitialized-memory.patch
         backport-dmesg-fix-notime-use.patch


author: liningjie <liningjie@xfusion.com> 2:0.8.1-10
changelog:
  - backport patches from openEuler-22.03-LTS-SP2:
    0001-remove-nonexistent-helper-functions-and-add-new-help.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-NULL-pointer-dereference-in_bpf_object__c.patch
    backport-libbpf-Fix-str_has_sfxs-return-value.patch
    backport-libbpf-Initialize-err-in-probe_map_create.patch


author: jinzhiguang <jinzhiguang@kylinos.cn> - 2:0.8.1-13
changelog:
  - backport patch from upstream:
    backport-libbpf-Modify-the-function-name-in-libbpf.c-to-match.patch


