# changelog

author: Li Nan <linan122@huawei.com> - 5.10.0-219.0.0.118
changelog:
  - !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - !10031  ipv6: prevent possible NULL dereference in rt6_probe()
  - !10060  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - !9990  netpoll: Fix race condition in netpoll_owner_active
  - !10040  lib/generic-radix-tree.c: Don't overflow in peek()
  - !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
  - !9968  CVE-2024-40972
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9926  ocfs2: fix races between hole punching and AIO+DIO
  - !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9908  sock_map: avoid race between sock_map_close and sk_psock_put
  - !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9936  fix CVE-2024-40934
  - !9953  drm/komeda: check for error-valued pointer
  - lib/generic-radix-tree.c: Don't overflow in peek()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - netpoll: Fix race condition in netpoll_owner_active
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - ext4: do not create EA inode under buffer lock
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
  - !9871  cifs: Fix deadlock in cifs_writepages during reconnect
  - drm/komeda: check for error-valued pointer
  - !9897  ionic: fix use after netif_napi_del()
  - !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9905  mptcp: ensure snd_una is properly initialized on connect
  - f2fs: remove clear SB_INLINECRYPT flag in default_options
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  - ocfs2: fix races between hole punching and AIO+DIO
  - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
  - !9884 roh/core: Support macvlan in roh.
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - !9825  smb: client: fix potential deadlock when releasing mids
  - !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - sock_map: avoid race between sock_map_close and sk_psock_put
  - mptcp: ensure snd_una is properly initialized on connect
  - ionic: fix use after netif_napi_del()
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9368  CVE-2024-27416
  - !9879  fs: improve dump_mapping() robustness
  - !9872  CVE-2024-38570
  - !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
  - fs: improve dump_mapping() robustness
  - roh/core: Support macvlan in roh.
  - gfs2: Fix potential glock use-after-free on unmount
  - gfs2: Rename sd_{ glock => kill }_wait
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - !9745  CVE-2024-39469
  - !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup
  - cgroup: Fix AA deadlock caused by cgroup_bpf_release
  - ksmbd: fix slab out of bounds write in smb_inherit_dacl()
  - smb: client: fix potential deadlock when releasing mids
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  - nilfs2: return the mapped address from nilfs_get_page()
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST


author: Li Nan <linan122@huawei.com> - 5.10.0-220.0.0.119
changelog:
  - !9035  keys: Fix overwrite of key expiration on instantiation
  - !9182  netfilter: nf_tables: restore set elements when delete set fails
  - !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
  - !10303  netfilter: nf_tables: do not compare internal table flags on updates
  - !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10280 v2  CVE-2022-48816
  - !9780  ksmbd: fix wrong DataOffset validation of create context
  - !10278  usb-storage: alauda: Check whether the media is initialized
  - netfilter: nf_tables: do not compare internal table flags on updates
  - !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - !10290 Backport 5.10.210 LTS patches from upstream
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
  - net: bcmgenet: Fix EEE implementation
  - drm/msm/dsi: Enable runtime PM
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
  - PM: runtime: add devm_pm_runtime_enable helper
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
  - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
  - scripts/decode_stacktrace.sh: optionally use LLVM utilities
  - scripts: decode_stacktrace: demangle Rust symbols
  - scripts/decode_stacktrace.sh: support old bash version
  - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
  - serial: 8250_exar: Set missing rs485_supported flag
  - serial: 8250_exar: Fill in rs485_supported
  - serial: Add rs485_supported to uart_port
  - mips: Fix max_mapnr being uninitialized on early stages
  - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
  - bus: moxtet: Add spi device table
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
  - tracing: Inform kmemleak of saved_cmdlines allocation
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - of: property: fix typo in io-channels
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit
  - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
  - nfp: flower: prevent re-adding mac index for bonded port
  - nfp: use correct macro for LengthSelect in BAR config
  - ALSA: hda/conexant: Add quirk for SWS JS201D
  - mmc: slot-gpio: Allow non-sleeping GPIO ro
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
  - serial: max310x: improve crystal stable clock detection
  - serial: max310x: set default value when reading clock ready bit
  - ring-buffer: Clean ring_buffer_poll_wait() error return
  - iio: accel: bma400: Fix a compilation problem
  - staging: iio: ad5933: fix type mismatch regression
  - tracing: Fix wasted memory in saved_cmdlines logic
  - misc: fastrpc: Mark all sessions as invalid in cb_remove
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
  - xen-netback: properly sync TX responses
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian
  - firewire: core: correct documentation of fw_csr_string() kernel API
  - lsm: fix the logic in security_inode_getsecctx()
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
  - modpost: trim leading spaces when processing source files list
  - usb: f_mass_storage: forbid async queue when shutdown happen
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
  - usb: ucsi_acpi: Fix command completion handling
  - HID: wacom: Do not register input devices until after hid_hw_start
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
  - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
  - i40e: Fix waiting for queues of all VSIs to be disabled
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
  - net: sysfs: Fix /sys/class/net/<iface> path for statistics
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
  - spi: ppc4xx: Drop write-only variable
  - of: unittest: Fix compile in the non-dynamic case
  - btrfs: send: return EOPNOTSUPP on unknown flags
  - btrfs: forbid deleting live subvol qgroup
  - btrfs: forbid creating subvol qgroups
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
  - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
  - USB: serial: cp210x: add ID for IMST iM871A-USB
  - USB: serial: option: add Fibocom FM101-GL variant
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
  - net/af_iucv: clean up a try_then_request_module()
  - netfilter: nft_ct: reject direction for ct id
  - netfilter: nft_compat: restrict match/target protocol to u16
  - netfilter: nft_compat: reject unused compat flag
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping
  - hwmon: (coretemp) Fix out-of-bounds memory access
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading
  - atm: idt77252: fix a memleak in open_card_ubr0
  - selftests: net: avoid just another constant wait
  - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
  - dmaengine: ti: k3-udma: Report short packet errors
  - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
  - bonding: remove print in bond_verify_device_path
  - HID: apple: Add 2021 magic keyboard FN key mapping
  - HID: apple: Add support for the 2021 Magic Keyboard
  - net: sysfs: Fix /sys/class/net/<iface> path
  - net: ipv4: fix a memleak in ip_setup_cork
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
  - ixgbe: Refactor overtemp event handling
  - ixgbe: Refactor returning internal error codes
  - ixgbe: Remove non-inclusive language
  - scsi: isci: Fix an error code problem in isci_io_request_build()
  - drm: using mul_u32_u32() requires linux/math64.h
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
  - perf: Fix the nr_addr_filters fix
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
  - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - libsubcmd: Fix memory leak in uniq()
  - PCI/AER: Decode Requester ID when no error info found
  - fs/kernfs/dir: obey S_ISGID
  - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
  - usb: hub: Replace hardcoded quirk value with BIT() macro
  - PCI: Only override AMD USB controller if required
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies
  - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
  - i3c: master: cdns: Update maximum prescaler value for i2c clock
  - um: net: Fix return type of uml_net_start_xmit()
  - um: Don't use vfprintf() for os_info()
  - um: Fix naming clash between UML and scheduler
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
  - drm/amdgpu: Let KFD sync with VM fences
  - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
  - drm/msm/dpu: Ratelimit framedone timeout msgs
  - media: ddbridge: fix an error code problem in ddb_probe
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
  - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
  - ALSA: hda: Intel: add HDA_ARL PCI ID support
  - PCI: add INTEL_HDA_ARL to pci_ids.h
  - media: rockchip: rga: fix swizzling for RGB formats
  - media: stk1160: Fixed high volume of stk1160_dbg messages
  - drm/mipi-dsi: Fix detach call without attach
  - drm/framebuffer: Fix use of uninitialized variable
  - drm/drm_file: fix use of uninitialized variable
  - f2fs: fix write pointers on zoned device after roll forward
  - drm/amd/display: Fix tiled display misalignment
  - fast_dput(): handle underflows gracefully
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
  - ALSA: hda: Refer to correct stream index at loops
  - i40e: Fix VF disable behavior to block all traffic
  - Bluetooth: L2CAP: Fix possible multiple reject send
  - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
  - md: Whenassemble the array, consult the superblock of the freshest device
  - block: prevent an integer overflow in bvec_try_merge_hw_page
  - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
  - ARM: dts: imx23/28: Fix the DMA controller node name
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
  - ARM: dts: imx27-apf27dev: Fix LED name
  - ARM: dts: imx25/27: Pass timing0
  - ARM: dts: imx25: Fix the iim compatible string
  - ionic: pass opcode to devcmd_wait
  - ARM: dts: imx1: Fix sram node
  - ARM: dts: imx27: Fix sram node
  - ARM: dts: imx: Use flash@0,0 pattern
  - ARM: dts: imx25/27-eukrea: Fix RTC node name
  - ARM: dts: rockchip: fix rk3036 hdmi ports node
  - bpf: Set uattr->batch.count as zero before batched update or deletion
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
  - scsi: libfc: Don't schedule abort twice
  - ARM: dts: imx7s: Fix nand-controller #size-cells
  - ARM: dts: imx7s: Fix lcdif compatible
  - ARM: dts: imx7d: Fix coresight funnel ports
  - scsi: arcmsr: Support new PCI device IDs 1883 and 1886
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices
  - selftests/bpf: Fix pyperf180 compilation failure with clang18
  - selftests/bpf: satisfy compiler by having explicit return in btf test
  - ext4: fix inconsistent between segment fstrim and full fstrim
  - ecryptfs: Reject casefold directory inodes
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
  - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
  - crypto: stm32/crc32 - fix parsing list of devices
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - ACPI: extlog: fix NULL pointer dereference check
  - PNP: ACPI: fix fortify warning
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
  - audit: Send netlink ACK before setting connection in auditd_set
  - regulator: core: Only increment use_count when enable_count changes
  - debugobjects: Stop accessing objects after releasing hash bucket lock
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
  - powerpc: Fix build error due to is_valid_bugaddr()
  - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
  - x86/entry/ia32: Ensure s32 is sign extended to s64
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
  - gpio: eic-sprd: Clear interrupt after set the interrupt type
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane
  - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
  - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
  - arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
  - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
  - drm/bridge: nxp-ptn3460: simplify some error checking
  - drm/tidss: Fix atomic_flush check
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
  - exec: Fix error handling in begin_new_exec()
  - rbd: don't move requests to the running list on errors
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
  - btrfs: don't warn if discard range is not aligned to sector
  - btrfs: tree-checker: fix inline ref size in error messages
  - btrfs: ref-verify: free ref cache before clearing mount opt
  - net: fec: fix the unhandled context fault from smmu
  - fjes: fix memleaks in fjes_hw_setup
  - selftests: netdevsim: fix the udp_tunnel_nic test
  - net: mvpp2: clear BM pool before initialization
  - netfilter: nf_tables: validate NFPROTO_* family
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
  - net/mlx5: DR, Use the right GVMI number for drop action
  - tcp: Add memory barrier to tcp_push()
  - afs: Hide silly-rename files from userspace
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - bnxt_en: Wait for FLR to complete during probe
  - mm: vmalloc: introduce array allocation functions
  - block: Remove special-casing of compound pages
  - nouveau/vmm: don't set addr on the fail path to avoid warning
  - rtc: Adjust failure return code for cmos_set_alarm()
  - mmc: mmc_spi: remove custom DMA mapped buffers
  - mmc: core: Use mrq.sbc in close-ended ffu
  - scripts/get_abi: fix source path leak
  - lsm: new security_file_ioctl_compat() hook
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
  - parisc/firmware: Fix F-extend for PDC addresses
  - PM: hibernate: Enforce ordering during image compression/decompression
  - crypto: api - Disallow identical driver names
  - ext4: allow for the last group to be marked as trimmed
  - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
  - iio: adc: ad7091r: Enable internal vref if external vref is not supplied
  - iio: adc: ad7091r: Allow users to configure device events
  - iio: adc: ad7091r: Set alert bit in config register
  - serial: sc16is7xx: add check for unsupported SPI modes during probe
  - spi: introduce SPI_MODE_X_MASK macro
  - serial: sc16is7xx: set safe default SPI clock frequency
  - units: add the HZ macros
  - units: change from 'L' to 'UL'
  - PCI: mediatek: Clear interrupt status before dispatching handler
  - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
  - usb: cdns3: fix iso transfer error when mult is not zero
  - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
  - usb: cdns3: fix uvc failure work since sg support enabled
  - usb: cdns3: Fixes for sparse warnings
  - !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10224  scsi: ufs: Fix a deadlock in the error handler
  - SUNRPC: Do not dereference non-socket transports in sysfs
  - SUNRPC: lock against ->sock changing during sysfs read
  - !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
  - usb-storage: alauda: Check whether the media is initialized
  - !10232  fix CVE-2024-41007
  - !10202  net: dsa: seville: register the mdiobus under devres
  - !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - !9430  CVE-2022-48703
  - !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10189  fix CVE-2024-40915
  - !10187  fix CVE-2021-47205
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  - RDMA/hns: Fix mbx timing out before CMD execution is completed
  - RDMA/hns: Fix insufficient extend DB for VFs.
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge
  - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR
  - RDMA/hns: Fix unmatch exception handling when init eq table fails
  - RDMA/hns: Check atomic wr length
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
  - !10210 hns3 udma: functions related to CQ bank IDs are supported.
  - !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
  - Bluetooth: hci_core: Fix leaking sent_cmd skb
  - !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport->dev
  - !9913  powerpc/pseries: Enforce hcall result buffer validity and size
  - !10217  CVE-2024-35931
  - !10061 Backport bugfixes for RDMA/hns from mainline linux
  - !10046  nfs: Ensure that the NFS client returns a correct writeback error code
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - !10222  bpf: Fix overrunning reservations in ringbuf
  - !10203  dma-mapping: benchmark: fix node id validation
  - !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
  - !10019  drm/exynos/vidi: fix memory leak in .get_modes()
  - !10178  ima: Fix use-after-free on a dentry's dname.name
  - scsi: ufs: Fix a deadlock in the error handler
  - bpf: Fix overrunning reservations in ringbuf
  - drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
  - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
  - drm/amdgpu : Add hive ras recovery check
  - hns3 udma: functions related to CQ bank IDs are supported.
  - !10135  ALSA: timer: Set lower bound of start tick time
  - !10104  ecryptfs: Fix buffer size for tag 66 packet
  - dma-mapping: benchmark: fix node id validation
  - net: dsa: seville: register the mdiobus under devres
  - !10138 [sync] PR-10095:  CVE-2024-40968
  - sched/fair: Take the scheduling domain into account in select_idle_core()
  - !10107  tracing: Build event generation tests only as modules
  - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  - clk: sunxi-ng: Unregister clocks/resets when unbinding
  - !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !9836  fpga: manager: add owner module and take its refcount
  - net: openvswitch: fix race on port output
  - ima: Fix use-after-free on a dentry's dname.name
  - !10165  drop_monitor: replace spin_lock by raw_spin_lock
  - !10162  RDMA/mlx5: Add check for srq max_sge attribute
  - !10048  tipc: force a dst refcount before doing decryption
  - !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10150  mips: bmips: BCM6358: make sure CBR is correctly set
  - drop_monitor: replace spin_lock by raw_spin_lock
  - RDMA/mlx5: Add check for srq max_sge attribute
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - mips: bmips: BCM6358: make sure CBR is correctly set
  - MIPS: Octeon: Add PCIe link status check
  - !10041  Fix CVE-2024-36939
  - !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - ALSA: timer: Set lower bound of start tick time
  - !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - !10009  xfs: fix mount hung while sb recover fail
  - !10088  fix CVE-2024-40995
  - !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
  - !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
  - !9931  nvdimm: Backport some bugfixs
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - tracing: Build event generation tests only as modules
  - ecryptfs: Fix buffer size for tag 66 packet
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Add mutex_destroy()
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - Revert "RDMA/hns: Add mutex_destroy()"
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - tipc: force a dst refcount before doing decryption
  - nfs: Ensure write and flush consume writeback errors
  - NFS: Don't report ENOSPC write errors twice
  - NFS: Use of mapping_set_error() results in spurious errors
  - nfs: ensure correct writeback errors are returned on close()
  - nfs: nfs_file_write() should check for writeback errors
  - sunrpc: fix KABI broken in struct rpc_create_args
  - nfs: Handle error of rpc_proc_register() in nfs_net_init().
  - nfs: make the rpc_stat per net namespace
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces
  - sunrpc: add a struct rpc_stats arg to rpc_create_args
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - xfs: fix mount hung while sb recover fail
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
  - nvdimm/pmem: use add_disk() error handling
  - powerpc/pseries: Enforce hcall result buffer validity and size
  - ipv6: fix possible race in __fib6_drop_pcpu_from()
  - fpga: manager: add owner module and take its refcount
  - arm64: mm: Pass pbha-performance-only bit under chosen node
  - ksmbd: fix wrong DataOffset validation of create context
  - thermal: int340x_thermal: Consolidate priv->data_vault checks
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
  - netfilter: nf_tables: restore set elements when delete set fails
  - keys: Fix overwrite of key expiration on instantiation


author: Li Nan <linan122@huawei.com> - 5.10.0-221.0.0.120
changelog:
  - !10436  CVE-2024-39476
  - !10418  net: move to_gnet_bpf_attach_type() to filter.c
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
  - !10065  iommu: Return right value in iommu_sva_bind_device()
  - net: move to_gnet_bpf_attach_type() to filter.c
  - !10334  fix CVE-2024-36479 for olk-5.10
  - !10408  iommu/arm-smmu-v3: Fix the compile warning
  - !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - !10058  net: mvpp2: clear BM pool before initialization
  - !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - iommu/arm-smmu-v3: Fix the compile warning
  - !10339  net/sched: initialize noop_qdisc owner
  - !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10336 v2  mm: numa-affinity: support THP migration
  - !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
  - !10342  CVE-2024-39471
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  - drm/amdgpu: add error handle to avoid out-of-bounds
  - net/sched: initialize noop_qdisc owner
  - mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
  - mm: numa-affinity: delete the duplicate numa_migrate_prep
  - mm: numa-affinity: backport some migrate policy from AutoNuma
  - mm: numa-affinity: support THP migration
  - mm: thp: skip make PMD PROT_NONE if THP migration is not supported
  - mm: migrate: check mapcount for THP instead of refcount
  - mm: migrate: don't split THP for misplaced NUMA page
  - mm/migrate: fix NR_ISOLATED corruption on 64-bit
  - mm: migrate: account THP NUMA migration counters correctly
  - mm: thp: refactor NUMA fault handling
  - mm: memory: make numa_migrate_prep() non-static
  - mm: fix KABI broken in struct vm_fault
  - mm: memory: add orig_pmd to struct vm_fault
  - !10333  BMA: Fix DMA reset problem and change the version
  - fpga: bridge: add owner module and take its refcount
  - fpga: remove redundant checks for bridge ops
  - fpga: bridge: properly initialize bridge device before populating children
  - fpga: bridge: Use standard dev_release for class driver
  - fpga: bridge: Rename dev to parent for parent device
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Change the version number.
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - media: i2c: et8ek8: Don't strip remove function when driver is builtin
  - net: phy: add set_loopback interface to realtek phy driver
  - !10316  sched: Add cfs_preferred_nid_init hook
  - !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - !10073  serial: imx: Introduce timeout when waiting on transmitter empty
  - !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - sched: Add cfs_preferred_nid_init hook
  - !10295 sdma-dae: fix interrupt handle logic
  - !10253  fbdev: savage: Handle err return when savagefb_check_var failed
  - !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - !10304 Backport 5.10.211 LTS patches from upstream
  - net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
  - block: ataflop: more blk-mq refactoring fixes
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
  - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
  - tls: rx: drop pointless else after goto
  - s390: use the correct count for __iowrite64_copy()
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
  - nouveau: fix function cast warnings
  - scsi: jazz_esp: Only build if SCSI core is builtin
  - bpf, scripts: Correct GPL license name
  - RDMA/srpt: fix function pointer cast warnings
  - arm64: dts: rockchip: set num-cs property for spi on px30
  - RDMA/bnxt_re: Return error for SRQ resize
  - mptcp: fix lockless access in subflow ULP diag
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered
  - usb: roles: fix NULL pointer issue when put module's reference
  - usb: cdns3: fix memory double free when handle zero packet
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
  - x86/alternative: Make custom return thunk unconditional
  - Revert "x86/alternative: Make custom return thunk unconditional"
  - x86/returnthunk: Allow different return thunks
  - x86/ftrace: Use alternative RET encoding
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
  - Revert "x86/ftrace: Use alternative RET encoding"
  - PCI/MSI: Prevent MSI hardware interrupt number truncation
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
  - s390/cio: fix invalid -EBUSY on ccw_device_start
  - erofs: fix lz4 inplace decompression
  - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
  - iwlwifi: mvm: write queue_sync_state only for sync
  - iwlwifi: mvm: do more useful queue sync accounting
  - platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
  - lan743x: fix for potential NULL pointer dereference with bare card
  - btrfs: do not pin logs too early during renames
  - btrfs: unify lookup return value when dir entry is missing
  - btrfs: introduce btrfs_lookup_match_dir
  - btrfs: tree-checker: check for overlapping extent items
  - task_stack, x86/cea: Force-inline stack helpers
  - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
  - ASoC: Intel: boards: get codec device with ACPI instead of bus search
  - ASoC: Intel: boards: harden codec property handling
  - mtd: spinand: macronix: Add support for MX35LFxGE4AD
  - cifs: add a warning when the in-flight count goes negative
  - powerpc/watchpoints: Annotate atomic context in more places
  - powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
  - block: ataflop: fix breakage introduced at blk-mq refactoring
  - seccomp: Invalidate seccomp mode to catch death failures
  - x86/uaccess: Implement macros for CMPXCHG on user addresses
  - hsr: Avoid double remove of a node.
  - hvc/xen: prevent concurrent accesses to the shared ring
  - media: av7110: prevent underflow in write_ts_to_decoder()
  - ASoC: fsl_micfil: register platform component before registering cpu dai
  - ARM: dts: imx: Set default tuning step for imx6sx usdhc
  - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs.
  - firewire: core: send bus reset promptly on gap count error
  - scsi: lpfc: Use unsigned type for num_sge
  - hwmon: (coretemp) Enlarge per package core count limit
  - efi: Don't add memblocks for soft-reserved memory
  - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
  - ext4: correct the hole length returned by ext4_map_blocks()
  - nvmet-fc: abort command when there is no binding
  - nvmet-fc: release reference on target port
  - nvmet-fcloop: swap the list_add_tail arguments
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
  - spi: sh-msiof: avoid integer overflow in constants
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
  - nvmet-tcp: fix nvme tcp ida memory leak
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
  - ahci: asm1166: correct count of reported ports
  - wifi: cfg80211: fix missing interfaces when dumping
  - dmaengine: fsl-qdma: increase size of 'irq_name'
  - dmaengine: shdma: increase size of 'dev_id'
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - zonefs: Improve error handling
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - smb: client: fix parsing of SMB3.1.1 POSIX create context
  - smb: client: fix potential OOBs in smb2_parse_contexts()
  - net/sched: Retire dsmark qdisc
  - net/sched: Retire ATM qdisc
  - net/sched: Retire CBQ qdisc
  - drivers: misc: sdma-dae: fix interrupt handle logic
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - netrom: Fix a memory leak in nr_heartbeat_expiry()
  - serial: imx: Introduce timeout when waiting on transmitter empty
  - iommu: Return right value in iommu_sva_bind_device()
  - net: mvpp2: clear BM pool before initialization
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"


author: Li Nan <linan122@huawei.com> - 5.10.0-222.0.0.121
changelog:
  - !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10764  CVE-2024-41027
  - !10666 v2  ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10624  ata: libata-core: Fix double free on error
  - !10652  nvme: avoid double free special payload
  - NFSD: Fix the behavior of READ near OFFSET_MAX
  - !10785  fix CVE-2024-42155
  - s390/pkey: Wipe copies of protected- and secure-keys
  - Revert "s390/pkey: Wipe copies of protected- and secure-keys"
  - !10742  irqchip/mbigen: Fix mbigen node address layout
  - !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
  - Fix userfaultfd_api to return EINVAL as expected
  - mm/userfaultfd: fail uffd-wp registration if not supported
  - !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
  - !10759  Fix CVE-2024-42160
  - !10530  ftruncate: pass a signed offset
  - !10679  ibmvnic: Add tx check to prevent skb leak
  - !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - !10489  backport mainline patches
  - !10717  CVE-2024-42101
  - !10713  CVE-2024-41079
  - media: mediatek: vcodec: Only free buffer VA that is not NULL
  - irqchip/mbigen: Fix mbigen node address layout
  - !10727  net/iucv: Avoid explicit cpumask var allocation on stack
  - !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - !10715  gve: Account for stopped queues when reading NIC stats
  - !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - net/dpaa2: Avoid explicit cpumask var allocation on stack
  - !10621  fix CVE-2024-42129
  - !9682  drm: vc4: Fix possible null pointer dereference
  - !10427  net: stmmac: move the EST lock to struct stmmac_priv
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible
  - !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
  - !10589 v2  ax25: Fix refcount imbalance on inbound connections
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  - gve: Account for stopped queues when reading NIC stats
  - nvmet: always initialize cqe.result
  - !10683  ocfs2: fix DIO failure due to insufficient transaction credits
  - !10566  gpio: davinci: Validate the obtained number of IRQs
  - !10670  net: can: j1939: Initialize unused data in j1939_send_one()
  - !10661  fix CVE-2024-41062
  - !10519  xfs: add bounds checking to xlog_recover_process_data
  - !10650  xfs: don't walk off the end of a directory data block
  - mm: prevent derefencing NULL ptr in pfn_section_valid()
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  - !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - !10630  sched/deadline: Fix task_struct reference leak
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - ibmvnic: Add tx check to prevent skb leak
  - !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - net: can: j1939: Initialize unused data in j1939_send_one()
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
  - !10636  RDMA/restrack: Fix potential invalid address access
  - !10648  net: dsa: mv88e6xxx: Correct check for empty list
  - !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - Bluetooth: L2CAP: Fix deadlock
  - bluetooth/l2cap: sync sock recv cb and release
  - !10503  fix CVE-2024-42155
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  - nvme: avoid double free special payload
  - xfs: don't walk off the end of a directory data block
  - net: dsa: mv88e6xxx: Correct check for empty list
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - !10557  CVE-2024-42105
  - RDMA/restrack: Fix potential invalid address access
  - sched/deadline: Fix task_struct reference leak
  - !10600  ppp: reject claimed-as-LCP but actually malformed packets
  - !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10603  IB/core: Implement a limit on UMAD receive List
  - ata: libata-core: Fix double free on error
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
  - locking/mutex: Introduce devm_mutex_init()
  - !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10536  CVE-2024-42082
  - !10594  fix CVE-2024-41046
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - !10569  ila: block BH in ila_output()
  - !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - IB/core: Implement a limit on UMAD receive List
  - ppp: reject claimed-as-LCP but actually malformed packets
  - !10586  filelock: Fix fcntl/close race recovery compat path
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - net: ethernet: lantiq_etop: fix double free in detach
  - net: lantiq_etop: add blank line after declaration
  - !10541  tap: add missing verification for short frame
  - !10540  tun: add missing verification for short frame
  - !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
  - !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - ax25: Fix refcount imbalance on inbound connections
  - filelock: Fix fcntl/close race recovery compat path
  - !10548  powerpc/eeh: avoid possible crash when edev->pdev changes
  - !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10420  stm class: Fix a double free in stm_register_device()
  - !10475  ALSA: emux: improve patch ioctl data validation
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  - ila: block BH in ila_output()
  - gpio: davinci: Validate the obtained number of IRQs
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  - nilfs2: fix inode number range checks
  - skmsg: Skip zero length skb in sk_msg_recvmsg
  - !10465  null_blk: fix validation of block size
  - powerpc/eeh: avoid possible crash when edev->pdev changes
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  - tap: add missing verification for short frame
  - tun: add missing verification for short frame
  - xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
  - xdp: Remove WARN() from __xdp_reg_mem_model()
  - xdp: Allow registering memory model without rxq reference
  - xdp: Move the rxq_info.mem clearing to unreg_mem_model()
  - !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
  - !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - !10454  fs/ntfs3: Validate ff offset
  - ipv6: prevent possible NULL deref in fib6_nh_init()
  - ftruncate: pass a signed offset
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - !10383  filelock: fix potential use-after-free in posix_lock_inode
  - xfs: add bounds checking to xlog_recover_process_data
  - !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - !10417 Backport 5.10.212 LTS patches from upstream
  - !10487  fix CVE-2024-42086
  - !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
  - s390/pkey: Wipe copies of protected- and secure-keys
  - !10425  kunit: Fix kthread reference
  - !10424  kunit: Fix kthread reference
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - irqdomain: Fixed unbalanced fwnode get and put
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - !10361  PCI/ROM: Fix PCI ROM header check bug
  - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
  - gpio: fix resource unwinding order in error path
  - gpiolib: Fix the error path order in gpiochip_add_data_with_key()
  - gpio: 74x164: Enable output pins after registers are reset
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
  - mptcp: fix possible deadlock in subflow diag
  - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
  - mmc: sdhci-xenon: fix PHY init clock stability
  - mmc: sdhci-xenon: add timeout for PHY init complete
  - mmc: core: Fix eMMC initialization with 1-bit bus connection
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
  - wifi: nl80211: reject iftype change with mesh ID change
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - afs: Fix endless loop in directory parsing
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
  - Bluetooth: Enforce validation on max value of connection interval
  - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - mtd: spinand: gigadevice: Fix the get ecc status issue
  - mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
  - crypto: virtio/akcipher - Fix stack overflow on memcpy
  - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
  - !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - !10404  Fix CVE-2024-41069
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - ALSA: emux: improve patch ioctl data validation
  - !10352  fix CVE-2024-40976
  - !10406  usb: gadget: ncm: Fix handling of zero block length packets
  - !10271  HID: core: remove unnecessary WARN_ON() in implement()
  - !10431  s390/qeth: fix deadlock during failing recovery
  - !10440  net/sched: Fix UAF when resolving a clash
  - !10328  net/smc: enable smcrv1 when RNIC supports rocev2
  - !10449  net: ena: Add validation for completion descriptors consistency
  - io_uring: fix possible deadlock in io_register_iowq_max_workers()
  - null_blk: fix validation of block size
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - fs/ntfs3: Validate ff offset
  - net: ena: Add validation for completion descriptors consistency
  - net/sched: Fix UAF when resolving a clash
  - s390/qeth: fix deadlock during failing recovery
  - net: stmmac: move the EST lock to struct stmmac_priv
  - kunit: Fix kthread reference
  - kunit: Fix kthread reference
  - stm class: Fix a double free in stm_register_device()
  - usb: gadget: ncm: Fix handling of zero block length packets
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Fix references to freed memory
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - filelock: fix potential use-after-free in posix_lock_inode
  - PCI/ROM: Fix PCI ROM header check bug
  - drm/lima: mask irqs in timeout path before hard reset
  - drm/lima: add mask irq callback to gp and pp
  - net/smc: enable smcrv1 when RNIC supports rocev2
  - HID: core: remove unnecessary WARN_ON() in implement()
  - drm: vc4: Fix possible null pointer dereference


author: Li Nan <linan122@huawei.com> - 5.10.0-223.0.0.122
changelog:
  - !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - !10878  orangefs: fix out-of-bounds fsid access
  - !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
  - !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
  - !10523 [OLK-5.10] drivers: add GDR support
  - !10885  crypto: aead,cipher - zeroize key buffer after use
  - !10888  s390/pkey: Wipe copies of clear-key structures on failure
  - !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - drivers: Fix kabi check failure
  - drivers: Add GDR(GPU Direct RDMA) support
  - !10842  netfilter: nf_tables: prefer nft_chain_validate
  - !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10873  USB: serial: mos7840: fix crash on resume
  - !10887 v3  sched/fair: Prefer physical cores when migrating tasks
  - s390/pkey: Wipe copies of clear-key structures on failure
  - sched/fair: Prefer physical cores when migrating tasks
  - crypto: aead,cipher - zeroize key buffer after use
  - orangefs: fix out-of-bounds fsid access
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - drm/i915/gt: Fix potential UAF by revoke of fence registers
  - USB: serial: mos7840: fix crash on resume
  - !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  - !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
  - !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10817  media: dvb-frontends: tda10048: Fix integer overflow
  - !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - !10801  fix CVE-2024-42095
  - !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - !10704  x86: stop playing stack games in profile_pc()
  - ext4: flexibly control whether to enable dioread_nolock by default
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses
  - !10836  wifi: mt76: replace skb_put with skb_put_zero
  - !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - netfilter: nf_tables: prefer nft_chain_validate
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - wifi: mt76: replace skb_put with skb_put_zero
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  - !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10810  tcp_metrics: validate source addr length
  - !10766 Backport 5.10.213 LTS patches from upstream
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - !10752  btrfs: qgroup: fix quota root leak after quota disable failure
  - media: dvb-frontends: tda10048: Fix integer overflow
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - !10781  nilfs2: fix kernel bug on rename operation of broken directory
  - tcp_metrics: validate source addr length
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10733  filelock: Remove locks reliably when fcntl/close race is detected
  - !10765 mbigen: add kvm dependency
  - !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
  - !10681  crypto: ecdh - explicitly zeroize private_key
  - !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  - serial: 8250_omap: Implementation of Errata i2310
  - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
  - mbigen: add kvm dependency
  - !10778  Fix CVE-2021-47582
  - !10784  s390/pkey: Wipe sensitive data on failure
  - serial: max310x: implement I2C support
  - serial: max310x: make accessing revision id interface-agnostic
  - Drivers: hv: vmbus: Drop error message when 'No request id available'
  - serial: max310x: Unprepare and disable clock in error path
  - getrusage: use sig->stats_lock rather than lock_task_sighand()
  - getrusage: use __for_each_thread()
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - getrusage: add the "signal_struct *sig" local variable
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  - hv_netvsc: use netif_is_bond_master() instead of open code
  - hv_netvsc: Make netvsc/VF binding check both MAC and serial number
  - hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  - hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  - hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
  - Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
  - ext4: convert to exclusive lock while inserting delalloc extents
  - ext4: refactor ext4_da_map_blocks()
  - ext4: make ext4_es_insert_extent() return void
  - lsm: fix default return value of the socket_getpeersec_*() hooks
  - lsm: make security_socket_getpeersec_stream() sockptr_t safe
  - bpf: net: Change sk_getsockopt() to take the sockptr_t argument
  - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
  - serial: max310x: prevent infinite while() loop in port startup
  - serial: max310x: use a separate regmap for each port
  - serial: max310x: use regmap methods for SPI batch operations
  - serial: max310x: Make use of device properties
  - serial: max310x: fail probe if clock crystal is unstable
  - serial: max310x: Try to get crystal clock rate from property
  - serial: max310x: Use devm_clk_get_optional() to get the input clock
  - xhci: handle isoc Babble and Buffer Overrun events properly
  - xhci: process isoc TD properly when there was a transaction error mid TD.
  - xhci: prevent double-fetch of transfer and transfer event TRBs
  - xhci: remove extra loop in interrupt context
  - um: allow not setting extra rpaths in the linux binary
  - selftests: mm: fix map_hugetlb failure on 64K page size systems
  - selftests/mm: switch to bash from sh
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count
  - netrom: Fix a data-race around sysctl_netrom_routing_control
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family
  - geneve: make sure to pull inner header in geneve_rx()
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
  - net: lan78xx: fix runtime PM count underflow on link stop
  - lan78xx: Fix race conditions in suspend/resume handling
  - lan78xx: Fix partial packet errors on suspend/resume
  - lan78xx: Add missing return code checks
  - lan78xx: Fix white space and style issues
  - vhost: Add smp_rmb() in vhost_enable_notify()
  - vhost: Add smp_rmb() in vhost_vq_avail_empty()
  - s390/pkey: Wipe sensitive data on failure
  - nilfs2: fix kernel bug on rename operation of broken directory
  - usb: core: Don't hold the device lock while sleeping in do_proc_control()
  - USB: core: Make do_proc_control() and do_proc_bulk() killable
  - leds: an30259a: Use devm_mutex_init() for mutex initialization
  - btrfs: qgroup: fix quota root leak after quota disable failure
  - filelock: Remove locks reliably when fcntl/close race is detected
  - x86: stop playing stack games in profile_pc()
  - crypto: ecdh - explicitly zeroize private_key
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.


author: Li Nan <linan122@huawei.com> - 5.10.0-224.0.0.123
changelog:
  - !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
  - !11007  mm: avoid overflows in dirty throttling logic
  - !10979  CVE-2024-42304
  - !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - mm: avoid overflows in dirty throttling logic
  - !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
  - !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
  - !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - !10963  sched: fix numa_group uninitialized in show_numa_stats()
  - !10614  can: mcp251xfd: fix infinite loop when xmit fails
  - !10951  Fix CVE-2024-36880
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
  - sched: fix numa_group uninitialized in show_numa_stats()
  - !10931  drm/lima: fix shared irq handling on driver remove
  - !10947  net: nexthop: Initialize all fields in dumped nexthops
  - !10945 v4  Some clean up and bugfix for hisi_hbmdev
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - Bluetooth: qca: fix firmware check error path
  - Bluetooth: qca: add missing firmware sanity checks
  - net: nexthop: Initialize all fields in dumped nexthops
  - soc/hisilicon: Remove the memdev kobj
  - soc/hisilicon: Clean the hbmcache state show sysfs
  - soc: hisilicon: Setting the demand_offline in sysfs interface
  - Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
  - Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
  - !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
  - drm/lima: fix shared irq handling on driver remove
  - !10745  jfs: xattr: fix buffer overflow for invalid xattr
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - !10912  Fix CVE-2024-40966
  - !10689 sdma: fix input validate problems
  - !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - tty: vt device use only n_tty ldisc
  - tty: add the option to have a tty reject a new ldisc
  - !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - !10813 ima: dont disable digest_list if the file is not processed
  - !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - perf/x86/intel: Add a distinct name for Granite Rapids
  - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
  - perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters
  - perf/x86/uncore: Cleanup unused unit structure
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
  - perf/x86/uncore: Support per PMU cpumask
  - perf/x86/uncore: Save the unit control address of all units
  - ima: dont disable digest_list if the file is not processed
  - drivers: misc: sdma-dae: fix input validate problems
  - jfs: xattr: fix buffer overflow for invalid xattr
  - can: mcp251xfd: fix infinite loop when xmit fails
  - powercap: intel_rapl_tpmi: Fix System Domain probing
  - powercap: intel_rapl_tpmi: Fix a register bug
  - powercap: intel_rapl: Fix locking in TPMI RAPL
  - powercap: intel_rapl: Fix a NULL pointer dereference
  - powercap: intel_rapl: Fix a sparse warning in TPMI interface


author: Li Nan <linan122@huawei.com> - 5.10.0-225.0.0.124
changelog:
  - !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
  - !11123  fix CVE-2024-42288
  - !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11151  protect the fetch of ->fd[fd
  - !10113  Fixed two memory leak issues of the Perf tool
  - !11092  mISDN: Fix a use after free in hfcmulti_tx()
  - btrfs: get rid of warning on transaction commit when using flushoncommit
  - !11071 【olk 5.10】net: hns3: add some feature patches
  - !11085  f2fs: fix to don't dirty inode for readonly filesystem
  - !11138 v2  drm/amd/display: Check for NULL pointer
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
  - !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
  - !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11070 IP notify code optimization
  - !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
  - !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - !11115  net/iucv: fix use after free in iucv_sock_close()
  - drm/amd/display: Check for NULL pointer
  - !11054  m68k: Fix spinlock race in kernel thread creation
  - !11055  phonet: fix rtm_phonet_notify() skb allocation
  - !11126  drm/amd/display: Check pipe offset before setting vblank
  - network_mgmt: Security check and modification.
  - Fix the issue that the debugfs query inconsistency.
  - UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
  - ubl: correct comments and delete unused EXPORT_SYMBOL
  - unic: fix issue that return value is not processed
  - unic: deleted redundant code and added default processing
  - drm/amd/display: Check pipe offset before setting vblank
  - scsi: qla2xxx: Fix for possible memory corruption
  - !11091  net/mlx5: Always drain health in shutdown callback
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  - net/iucv: fix use after free in iucv_sock_close()
  - exec: Fix ToCToU between perm check and set-uid/gid usage
  - !11027  landlock: Don't lose track of restrictions on cred_transfer
  - mISDN: Fix a use after free in hfcmulti_tx()
  - net/mlx5: Always drain health in shutdown callback
  - f2fs: fix to don't dirty inode for readonly filesystem
  - x86/head/64: Re-enable stack protection
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
  - kbuild: dummy-tools: adjust to stricter stackprotector check
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  - Bluetooth: btintel: Fixe build regression
  - virtio: reenable config if freezing device failed
  - drivers/nvme: Add quirks for device 126f:2262
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  - usb: typec: tcpci: add generic tcpci fallback compatible
  - tools: iio: replace seekdir() in iio_generic_buffer
  - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
  - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  - Input: allocate keycode for Display refresh rate toggle
  - RDMA/cm: add timeout to cm_destroy_id wait
  - libperf evlist: Avoid out-of-bounds access
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix nanosec stat overflow
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: add a hint for block bitmap corrupt state in mb_groups
  - media: sta2x11: fix irq handler cast
  - isofs: handle CDs with bad root inode but good Joliet root directory
  - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  - ionic: set adminq irq affinity
  - arm64: dts: rockchip: fix rk3399 hdmi ports node
  - arm64: dts: rockchip: fix rk3328 hdmi ports node
  - panic: Flush kernel log buffer at the end
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  - mptcp: don't account accept() of non-MPC client as fallback to TCP
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  - x86/bugs: Fix the SRSO mitigation on Zen3/4
  - riscv: Fix spurious errors from __get/put_kernel_nofault
  - s390/entry: align system call table on 8 bytes
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning
  - scsi: mylex: Fix sysfs buffer lengths
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  - arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
  - net: ravb: Always process TX descriptor ring
  - Revert "usb: phy: generic: Get the vbus supply"
  - scsi: qla2xxx: Update manufacturer detail
  - scsi: qla2xxx: Update manufacturer details
  - i40e: fix i40e_count_filters() to count only active/new filters
  - octeontx2-pf: check negative error code in otx2_open()
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  - selftests: reuseaddr_conflict: add missing new line at the end of the output
  - net: stmmac: fix rx queue priority assignment
  - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - io_uring: ensure '0' is returned on file registration success
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - Bluetooth: hci_event: set the conn encrypted before conn establishes
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  - dm integrity: fix out-of-range warning
  - Octeontx2-af: fix pause frame configuration in GMP mode
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  - usb: typec: ucsi: Ack unsupported commands
  - usb: dwc2: gadget: LPM flow fix
  - usb: dwc2: host: Fix ISOC flow in DDMA mode
  - usb: dwc2: host: Fix hibernation flow
  - usb: dwc2: host: Fix remote wakeup from hibernation
  - USB: core: Add hub_get() and hub_put() routines
  - staging: vc04_services: fix information leak in create_component()
  - staging: vc04_services: changen strncpy() to strscpy_pad()
  - usb: cdc-wdm: close race between read and workqueue
  - mmc: core: Avoid negative index with array access
  - mmc: core: Initialize mmc_blk_ioc_data
  - hexagon: vmlinux.lds.S: handle attributes section
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  - init: open /initrd.image with O_LARGEFILE
  - mm/migrate: set swap entry values of THP tail pages properly.
  - mm/memory-failure: fix an incorrect use of tail pages
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  - efivarfs: Request at most 512 bytes for variable names
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack
  - printk: Update @console_may_schedule in console_trylock_spinning()
  - tee: optee: Fix kernel panic caused by incorrect error handling
  - mei: me: add arrow lake point H DID
  - mei: me: add arrow lake point S DID
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  - usb: port: Don't try to peer unused USB ports based on location
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  - netfilter: nf_tables: reject constant set with timeout
  - comedi: comedi_test: Prevent timers rescheduling during deletion
  - scripts: kernel-doc: Fix syntax error due to undeclared args variable
  - x86/pm: Work around false positive kmemleak report in msr_build_context()
  - x86/stackprotector/32: Make the canary into a regular percpu variable
  - vxge: remove unnecessary cast in kfree()
  - drm/amd/display: Fix noise issue on HDMI AV mute
  - drm/amd/display: Return the correct HDCP error code
  - ahci: asm1064: asm1166: don't limit reported ports
  - ahci: asm1064: correct count of reported ports
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list
  - net: hns3: tracing: fix hclgevf trace event strings
  - cpufreq: dt: always allocate zeroed cpumask
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - memtest: use {READ,WRITE}_ONCE in memory scanning
  - drm/vc4: hdmi: do not return negative values from .get_modes()
  - drm/imx/ipuv3: do not return negative values from .get_modes()
  - drm/exynos: do not return negative values from .get_modes()
  - drm/panel: do not return negative error codes from drm_panel_get_modes()
  - ring-buffer: Fix full_waiters_pending in poll
  - ring-buffer: Fix resetting of shortest_full
  - ring-buffer: Do not set shortest_full when full target is hit
  - ring-buffer: Fix waking up ring buffer readers
  - PCI: dwc: endpoint: Fix advertised resizable BAR size
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  - PCI/AER: Block runtime suspend when handling errors
  - speakup: Fix 8bit characters from direct synth
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  - usb: gadget: tegra-xudc: Use dev_err_probe()
  - phy: tegra: xusb: Add API to retrieve the port number of phy
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  - nvmem: meson-efuse: fix function pointer type mismatch
  - hwmon: (amc6821) add of_match table
  - drm/etnaviv: Restore some id values
  - mmc: core: Fix switch on gp3 partition
  - dm-raid: fix lockdep waring in "pers->hot_add_disk"
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  - serial: Lock console when calling into driver before registration
  - printk/console: Split out code that enables default console
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  - fuse: don't unhash root
  - fuse: fix root lookup with nonzero generation
  - mmc: tmio: avoid concurrent runs of mmc_request_done()
  - PM: sleep: wakeirq: fix wake irq warning in system suspend
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  - USB: serial: option: add MeiG Smart SLM320 product
  - USB: serial: cp210x: add ID for MGP Instruments PDS100
  - USB: serial: add device ID for VeriFone adapter
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  - powerpc/fsl: Fix mfpmr build errors with newer binutils
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - PM: suspend: Set mem_sleep_current during kernel command line setup
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  - parisc: Fix csum_ipv6_magic on 64-bit systems
  - parisc: Fix csum_ipv6_magic on 32-bit systems
  - parisc: Fix ip_fast_csum
  - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  - mtd: rawnand: meson: fix scrambling mode value in command macro
  - ubi: correct the calculation of fastmap size
  - ext4: correct best extent lstart adjustment logic
  - selftests/mqueue: Set timeout to 180 seconds
  - crypto: qat - resolve race condition during AER recovery
  - crypto: qat - fix double free during reset
  - sparc: vDSO: fix return value of __setup handler
  - sparc64: NMI watchdog: fix return value of __setup handler
  - serial: max310x: fix NULL pointer dereference in I2C instantiation
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  - x86/bugs: Use sysfs_emit()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !11045  bpf: Fix a segment issue when downgrading gso_size
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: fixed vf get max channels bug
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - phonet: fix rtm_phonet_notify() skb allocation
  - m68k: Fix spinlock race in kernel thread creation
  - !11036 v2  Some bugfix for HNS RoCE
  - !10999  media: venus: fix use after free in vdec_close
  - !11013  media: mediatek: vcodec: Handle invalid decoder vsi
  - !10971  ext4: fix infinite loop when replaying fast_commit
  - !11022  udf: Avoid using corrupted block bitmap buffer
  - bpf: Fix a segment issue when downgrading gso_size
  - !11012  hfsplus: fix uninit-value in copy_name
  - !10993  ipvs: properly dereference pe in ip_vs_add_service
  - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
  - RDMA/hns: Fix integer overflow in calc_loading_percent()
  - RDMA/hns: Fix creating sysfs before allocating resources
  - RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
  - RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
  - RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  - RDMA/hns: Fix HW UAF when destroy context timeout
  - RDMA/hns: Fix different dgids mapping to the same dip_idx
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix a potential Sleep-in-Atomic-Context
  - RDMA/hns: Fix long waiting cmd event when reset
  - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
  - RDMA/hns: Use one CQ bank per context
  - !10976  CVE-2024-42126
  - !10990  drm/amd/display: Add NULL pointer check for kzalloc
  - !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11006  kvm: s390: Reject memory region operations for ucontrol VMs
  - !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - !10991  s390/sclp: Fix sclp_init() cleanup on failure
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL
  - !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - landlock: Don't lose track of restrictions on cred_transfer
  - !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - udf: Avoid using corrupted block bitmap buffer
  - net: usb: qmi_wwan: fix memory leak for not ip packets
  - !11010 roh/rdma: Support rdma_cm and cnp configure
  - !10995  CVE-2024-42290
  - !10965  perf: Optimize perf_pmu_migrate_context()
  - [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
  - media: mediatek: vcodec: Handle invalid decoder vsi
  - hfsplus: fix uninit-value in copy_name
  - [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
  - [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
  - [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
  - kvm: s390: Reject memory region operations for ucontrol VMs
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - media: venus: fix use after free in vdec_close
  - irqchip/imx-irqsteer: Handle runtime power management correctly
  - ipvs: properly dereference pe in ip_vs_add_service
  - s390/sclp: Fix sclp_init() cleanup on failure
  - drm/amd/display: Add NULL pointer check for kzalloc
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  - Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
  - ext4: fix infinite loop when replaying fast_commit
  - perf: Optimize perf_pmu_migrate_context()
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  - UNIC: bugfix for mguid's memory not be free after netdev init fail
  - UNIC: Solve the problem of redundant print in ub mode
  - ipv6: sr: fix missing sk_buff release in seg6_input_core
  - perf stat: Fix memory leakage when trying perf on an offline CPU
  - perf parse-events: Fix one memory leakage issue


author: Li Nan <linan122@huawei.com> - 5.10.0-226.0.0.125
changelog:
  - !11372  xdp: fix invalid wait context of page_pool_destroy()
  - !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
  - !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - !11358  kcm: Serialise kcm_sendmsg() for the same socket.
  - !11327  CPU inspect bugfix
  - !11340  soc: hisilicon: Support memory repair driver
  - !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - !11324  drm/amd/display: Add null checker before passing variables
  - !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
  - !11284  fix CVE-2024-43905
  - !11343  netfilter: ctnetlink: use helper function to calculate expect ID
  - !11330  jbd2: avoid mount failed when commit block is partial submitted
  - !11190  fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - !11201  ibmvnic: don't release napi in __ibmvnic_open()
  - !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
  - !10748 v2  CVE-2024-41016
  - !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11313  nvme-fabrics: use reserved tag for reg read/write command
  - !11310  drm/radeon: check bo_va->bo is non-NULL before using it
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - xdp: fix invalid wait context of page_pool_destroy()
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - kcm: Serialise kcm_sendmsg() for the same socket.
  - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
  - ext4: sanity check for NULL pointer after ext4_force_shutdown
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - config: enable CONFIG_HISI_MEM_RAS by default
  - docs: ABI: add ABI document for driver hisi_mem_ras
  - soc: hisilicon: Support memory repair driver on Kunpeng SoC
  - !11337 v3  Some features and fixs for hbmdev and hbm cache
  - ACPI/HMAT: Add missing locality information for hot-added device
  - hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
  - hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
  - soc:hisilicon: Use _ON and _OFF in hbmcache
  - jbd2: avoid mount failed when commit block is partial submitted
  - cpuinspect: fix [stop/start]_inspect_threads return type
  - cpuinspect: make inspector unregister reliable
  - drm/amd/display: Add null checker before passing variables
  - nvme-fabrics: use reserved tag for reg read/write command
  - hns3 udma: remove UBL dependency.
  - hns3 udma: add verify udata and in/out addr.
  - hns3 udma: fix bugs of code review.
  - hns3 udma: fixed some bugs.
  - drm/radeon: check bo_va->bo is non-NULL before using it
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - !11058  drm/amdgpu: change vm->task_info handling
  - !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - padata: Fix possible divide-by-0 panic in padata_mt_helper()
  - !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
  - !11246 [olk 5.10] hns3驱动一些bugfix patch
  - !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
  - !11273  serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
  - net: hns3: fixed reset failure issues caused by the incorrect reset type
  - net: hns3: fix missing features due to dev->features configuration too early
  - net: hns3: fix a deadlock problem when config TC during resetting
  - net: hns3: add sync command to sync io-pgtable
  - net: hns3: default enable tx bounce buffer when smmu enabled
  - net: hns3: don't add the len of vlan head if skb_vlan_pop failed
  - net: hns3: void array out of bound when loop tnl_num
  - !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11271 roh/core: Avoid null pointer access and optimize code.
  - UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
  - UNIC: Using UBL-related macros to isolate UB header files
  - roh/core: Avoid null pointer access and optimize code.
  - wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
  - !11267  net: bridge: mcast: wait for previous gc cycles when removing port
  - serial: core: check uartclk for zero to avoid divide by zero
  - net: hns3: use correct release function during uninitialization
  - net: hns3: delete redundant enabling actions for Layer 2 fowarding
  - net: hns3: use the user's cfg after reset
  - net: hns3: fix delete tc fail issue
  - net: bridge: mcast: wait for previous gc cycles when removing port
  - !11241  CVE-2024-43892
  - !11217  scsi: qla2xxx: validate nvme_local_port correctly
  - !11181  block: initialize integrity buffer to zero before writing it to media
  - !11111  sysctl: always initialize i_uid/i_gid
  - !11194  Fix mainline patchs
  - !11230  Bluetooth: MGMT: Add error handling to pair_device()
  - !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11171  tracing: Fix overflow in get_free_elt()
  - !11169  CVE-2024-42267
  - memcg: protect concurrent access to mem_cgroup_idr
  - !11174  md: restore 'noio_flag' for the last mddev_resume()
  - Bluetooth: MGMT: Add error handling to pair_device()
  - apparmor: Fix null pointer deref when receiving skb during sock creation
  - !11182  CVE-2024-42287
  - scsi: qla2xxx: validate nvme_local_port correctly
  - !11159  usb: vhci-hcd: Do not drop references before new references are gained
  - !11184 【OLK 5.10】spi: spidev some bugfix
  - drm/amdgpu: Fix the null pointer dereference to ras_manager
  - !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - !11147  powerpc/pseries: Fix scv instruction crash with kexec
  - jfs: Fix shift-out-of-bounds in dbDiscardAG
  - !11187  Bugfix patches for hns RoCE
  - ibmvnic: don't release napi in __ibmvnic_open()
  - perf/x86/amd/core: Fix overflow reset on hotplug
  - perf/x86/amd/core: Always clear status for idx
  - spi: spidev: fix a recursive locking error
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  - spi: spidev: fix a race condition when accessing spidev->spi
  - RDMA/hns: Fix list_*_careful() not being used in pairs
  - RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
  - RDMA/hns: Fix possible RAS when DCA is not attached
  - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
  - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
  - scsi: qla2xxx: Complete command early within lock
  - block: initialize integrity buffer to zero before writing it to media
  - md: restore 'noio_flag' for the last mddev_resume()
  - tracing: Fix overflow in get_free_elt()
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
  - usb: vhci-hcd: Do not drop references before new references are gained
  - powerpc/pseries: Fix scv instruction crash with kexec
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - sysctl: always initialize i_uid/i_gid
  - drm/amdgpu: change vm->task_info handling
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry()


author: Li Nan <linan122@huawei.com> - 5.10.0-227.0.0.126
changelog:
  - !11282  CVE-2024-44935
  - !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - !11437 sdma-dae:fix code review problems
  - ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - !11015  nvme-pci: add missing condition check for existence of mapped data
  - !11432 v2  mm/block: add bdi sysfs knobs
  - !11316  block: fix pin count management when merging same-page segments
  - drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - drivers:misc:sdma-dae: fix icsl code check problems
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - mm: fix arithmetic for bdi min_ratio
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: document /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add bdi_set_min_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add bdi_set_max_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add bdi_set_min_bytes() function
  - mm: split off __bdi_set_min_ratio() function
  - mm: add bdi_get_min_bytes() function
  - mm: document /sys/class/bdi/<bdi>/max_bytes knob
  - mm: add knob /sys/class/bdi/<bdi>/max_bytes
  - mm: add bdi_set_max_bytes() function
  - mm: split off __bdi_set_max_ratio() function
  - mm: add bdi_get_max_bytes() function
  - mm: use part per 1000000 for bdi ratios
  - mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
  - mm: document /sys/class/bdi/<bdi>/strict_limit knob
  - mm: add knob /sys/class/bdi/<bdi>/strict_limit
  - mm: add bdi_set_strict_limit() function
  - !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - !11207  kprobe support %pd/%pD type
  - !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !11391  fix CVE-2023-45896
  - !11405  dma: fix call order in dmam_free_coherent
  - !11237  CVE-2024-43907
  - !11409  btrfs: do not start relocation until in progress drops are done
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !10904 Incorporate some bonding patches as follows(OLK_5.10):
  - !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
  - !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - btrfs: do not start relocation until in progress drops are done
  - !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
  - !11403  btrfs: do not WARN_ON() if we have PageError set
  - dma: fix call order in dmam_free_coherent
  - !11394  dmaengine: idxd: Prevent use after free on completion memory
  - btrfs: do not WARN_ON() if we have PageError set
  - fuse: Initialize beyond-EOF page contents before setting uptodate
  - dmaengine: idxd: Prevent use after free on completion memory
  - fs/ntfs3: Add more attributes checks in mi_enum_attr()
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - block: fix pin count management when merging same-page segments
  - sctp: Fix null-ptr-deref in reuseport_add_sock().
  - sctp: move hlist_node and hashent out of sctp_ep_common
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - RDMA/hns: Fix concurrency issue between bond work and bond event
  - RDMA/hns: Fix UAF in clear bond printing
  - RDMA/hns: Encapsulate upper event and lowerstate event handlers
  - RDMA/hns: Register notifier block of bonding events in bond_grp
  - selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
  - Documentation: tracing: add new type '%pd' and '%pD' for kprobe
  - tracing/probes: support '%pD' type for print struct file's name
  - tracing/probes: support '%pd' type for print struct dentry's name
  - nvme-pci: add missing condition check for existence of mapped data


author: Li Nan <linan122@huawei.com> - 5.10.0-228.0.0.127
changelog:
  - !11504 sdma-dae support debugfs and fast mode
  - !10195  xfs: Fix agf_longest update error
  - !11505  Misc minor bugfix for HNS RoCE
  - RDMA/hns: Fix endian issues
  - RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
  - RDMA/hns: Fix "Should it be static?" warnings
  - RDMA/hns: Fix dereference of noderef expression
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - drivers:misc:sdma-dae: add fast mode
  - !11479 【OLK 5.10】some bugfixes for hns3 driver
  - driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
  - driver:misc:sdma-dae: add debugfs of sdma-dae
  - !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11478  coresight: etm4x: Fix CPU idle PM support for ETE
  - net: hns3: fix concurrent setting vlan filter issue
  - net: hns3: fix snprintf() is printing too much problem
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  - net: hns3:support enable or disable pfc strom prevent
  - !11491  Fix CVE-2022-48887
  - net: hns3: fix wrong use of semaphore up
  - !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - !11462  mptcp: pm: avoid possible UaF when selecting endp
  - !11470 OLK-5.10 Rever gpiolib bugfix
  - drm/vmwgfx: Remove rcu locks from user resources
  - drm/vmwgfx: Remove vmw_user_bo_noref_release
  - drm/vmwgfx: Introduce ttm reference object find function
  - RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11487  bna: ensure the copied buf is NUL terminated
  - bna: ensure the copied buf is NUL terminated
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - coresight: etm4x: add CPU hotplug support for probing
  - !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
  - !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
  - !11466 OLK-5.10 Rever spi bugfix
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - net: hns3: don't auto enable misc vector
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
  - Revert "spi: Add verification for the max_frequency provided by the firmware"
  - !11104  soc: qcom: pdr: protect locator_addr with the main mutex
  - !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
  - !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - mptcp: pm: avoid possible UaF when selecting endp
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - perf parse-event bugfix merge
  - perf test: Add parse-events test for aliases with hyphens
  - perf test: Add pmu-events test for aliases with hyphens
  - perf parse-events: Support event alias in form foo-bar-baz
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - xfs: Fix agf_longest update error
  - Fix x86 provides error symbol


author: shixuantong <shixuantong1@huawei.com> - 1.0.2-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the problem that function cpu_report_result() is called more than once
         fix error handling


author: wangkai <13474090681@163.com> - 20240312-1
changelog:
  - Update to 20240312 for fix CVE-2023-38575, CVE-2023-39368,
    CVE-2023-22655, CVE-2023-43490, CVE-2023-28746


author: fly_1997 <flylove7@outlook.com> -v1.0.1-6
changelog:
  - fix dependency error and add enable failed logs
  - fix dependency disabled failed and pre-enable illegal plugin


author: fly_1997 <flylove7@outlook.com> -v1.0.2-3
changelog:
  - add automatic startup based on the version
  - fix coredump when process exits
  - modify logger mode to append


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.1.3-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Set temporary single CPU affinity before cgroup cpuset transition


