# changelog

author: Li Nan <linan122@huawei.com> - 5.10.0-237.0.0.136
changelog:
  - !13310  fs/ntfs3: Additional check in ni_clear()
  - !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
  - !13344  mm,hwpoison: check mm when killing accessing process
  - mm,hwpoison: check mm when killing accessing process
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - !13318 Fix objtool error for AMX instruction decoding
  - !13196  fs/ntfs3: Additional check in ntfs_file_release
  - !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
  - !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
  - !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
  - !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
  - !13276  mailbox: bcm2835: Fix timeout during suspend mode
  - !13294 sdma-dae: change authority of debugfs
  - x86/insn: Add AMX instructions to the x86 instruction decoder
  - !13277  CVE-2023-52920
  - fs/ntfs3: Additional check in ni_clear()
  - !13227  fs/ntfs3: Add rough attr alloc_size check
  - !13225  fs/ntfs3: Check if more than chunk-size bytes are written
  - !13226  fs/ntfs3: Fix possible deadlock in mi_read
  - !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
  - !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13194  fix CVE-2024-50115
  - bpf, arm64: Fix address emission with tag-based KASAN enabled
  - driver:misc:sdma:change authority of sdma device
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - !13178  bpf: Use raw_spinlock_t in ringbuf
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking
  - bpf: mostly decouple jump history management from is_state_visited()
  - bpf: encapsulate precision backtracking bookkeeping
  - bpf: decouple prune and jump points
  - mailbox: bcm2835: Fix timeout during suspend mode
  - !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - platform/x86/intel/ifs: Initialize union ifs_status to zero
  - platform/x86/intel/ifs: release cpus_read_lock()
  - platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - !13221  aoe: fix the potential use-after-free problem in more places
  - !13239  scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13255  RDMA/hns: Fix the valid QP bank set to improve performance
  - RDMA/hns: Fix the valid QP bank set to improve performance
  - !12858 intel: backport GNR and SRF intel_idle fix for 5.10
  - !12154 v2  netfilter: flowtable: initialise extack before use
  - !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
  - !13212 v7  arm64: support page mapping percpu first chunk allocator
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - aoe: fix the potential use-after-free problem in more places
  - !13080  serial: core: Fix atomicity violation in uart_tiocmget
  - !13073  selinux: clarify return code in filename_trans_read_helper_compat()
  - !13128  drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
  - arm64: support page mapping percpu first chunk allocator
  - vmalloc: choose a better start address in vm_area_register_early()
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - serial: core: Fix atomicity violation in uart_tiocmget
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
  - intel_idle: Add a new flag to initialize the AMX state
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - netfilter: flowtable: initialise extack before use
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support


author: Li Nan <linan122@huawei.com> - 5.10.0-238.0.0.137
changelog:
  - !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13458  io_uring: fix CVE-2024-53052
  - !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
  - !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
  - !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
  - !13829  fix CVE-2024-50192
  - !13414  sched/topology: Prevent race condition in sched_domain topology
  - !13411  udf: fix uninit-value use in udf_get_fileshortad
  - !13800  media: av7110: fix a spectre vulnerability
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  - !13823 [HNS3]Add the reliability check of guid_tbl_space
  - !13448 bugfix of nfs
  - !13403 some bugfix of ksmbd smb2_open()
  - HNS3: Add the reliability check of guid_tbl_space.
  - !13418  btrfs: reinitialize delayed ref list after deleting it from the list
  - !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - !13419  media: s5p-jpeg: prevent buffer overflows
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - !13793  nilfs2: fix potential deadlock with newly created symlinks
  - !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - !13797  drm/amd/display: Initialize denominators' default to 1
  - !13792  CVE-2024-43817
  - media: av7110: fix a spectre vulnerability
  - drm/amd/display: Initialize denominators' default to 1
  - !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
  - !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nilfs2: fix potential deadlock with newly created symlinks
  - !13319  unicode: Don't special case ignorable code points
  - net: tighten bad gso csum offset check in virtio_net_hdr
  - udp: fix receiving fraglist GSO packets
  - net: drop bad gso csum_start and offset in virtio_net_hdr
  - gso: fix dodgy bit handling for GSO_UDP_L4
  - !13379  fbdev: sisfb: Fix strbuf array overflow
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - io_uring: use kiocb_{start,end}_write() helpers
  - fs: create kiocb_{start,end}_write() helpers
  - io_uring: rename kiocb_end_write() local helper
  - !13441  RDMA/cxgb4: Added NULL check for lookup_atid
  - !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - !13356  NFSD: Initialize struct nfsd4_copy earlier
  - NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  - RDMA/cxgb4: Added NULL check for lookup_atid
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  - netfilter: br_netfilter: fix panic with metadata_dst skb
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - media: s5p-jpeg: prevent buffer overflows
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - sched/topology: Prevent race condition in sched_domain topology
  - udf: fix uninit-value use in udf_get_fileshortad
  - ksmbd: fix return value of smb2_open()
  - !13303 v2  fix CVE-2024-50141
  - !13387  usb: musb: sunxi: Fix accessing an released usb phy
  - ksmbd: fix possible refcount leak in smb2_open()
  - !13392  CVE-2024-47745
  - !13371  CVE-2024-46713
  - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  - ntfs3: Add bounds checking to mi_enum_attr()
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - remap_file_pages: Use vma_lookup() instead of find_vma()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - usb: musb: sunxi: Fix accessing an released usb phy
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
  - fbdev: sisfb: Fix strbuf array overflow
  - !13323 [sync] PR-13302:  CVE-2024-50195
  - perf: Fix kabi problem by put mutex in front of perf_buffer
  - perf/aux: Fix AUX buffer serialization
  - NFSD: Initialize struct nfsd4_copy earlier
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - unicode: Don't special case ignorable code points
  - ACPI: PRM: Clean up guid type in struct prm_handler_info
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
  - RDMA/hns: Modify debugfs name
  - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*


author: Li Nan <linan122@huawei.com> - 5.10.0-239.0.0.138
changelog:
  - !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !10939  filelock: Correct the file lock owner in fcntl_setlk64
  - !11339  Fix xfs fsmap error
  - !11338  xfs: fix log recovery when unknown rocompat bits are set
  - !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
  - hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
  - !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
  - !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
  - !14014  *** CVE-2024-53063 ***
  - !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - !13337  fix CVE-2024-50135
  - !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
  - !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - !13936  wifi: rtw88: always wait for both firmware loading attempts
  - !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - !13934  net/sched: accept TCA_STAB only for root qdisc
  - !13933  net: ethernet: lantiq_etop: fix memory disclosure
  - !13932  net: Fix an unsafe loop on the list
  - !13931  net: stmmac: Fix zero-division error when disabling tc cbs
  - !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
  - ipvlan: fix UAF after skb has been consume by xdp generic
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  - media: dvbdev: prevent the risk of out of memory access
  - !13839  afs: Fix lock recursion
  - !13860 [2024.12.2]bugfix rdma to OLK-5.10
  - !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - !13921  wifi: ath10k: Fix memory leak in management tx
  - !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13967  bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13966  blk-mq/scsi: tracking device queue depth via sbitmap
  - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  - !13964 v3  arm64: mm: Stop use spinlock during pbha early init
  - scsi: core: Increase max device queue_depth to 4096
  - sbitmap: fix kabi broken in struct scsi_device
  - sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
  - sbitmap: fix kabi broken by adding struct sbitmap_extend
  - scsi: core: Fix scsi_device_max_queue_depth()
  - scsi: blk-mq: Fix build warning when making htmldocs
  - scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
  - scsi: core: Replace sdev->device_busy with sbitmap
  - scsi: core: Make sure sdev->queue_depth is <= max(shost->can_queue, 1024)
  - scsi: core: Add scsi_device_busy() wrapper
  - scsi: megaraid_sas: Replace sdev_busy with local counter
  - scsi: blk-mq: Return budget token from .get_budget callback
  - scsi: blk-mq: Add callbacks for storing & retrieving budget token
  - scsi: sbitmap: Add sbitmap_calculate_shift() helper
  - scsi: sbitmap: Export sbitmap_weight
  - scsi: sbitmap: Move allocation hint into sbitmap
  - scsi: sbitmap: Add helpers for updating allocation hint
  - scsi: sbitmap: Maintain allocation round_robin in sbitmap
  - sbitmap: optimise sbitmap_deferred_clear()
  - scsi: sbitmap: Remove sbitmap_clear_bit_unlock
  - arm64: mm: Stop use spinlock during pbha early init
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
  - !13802  pinctrl: ocelot: fix system hang on level based interrupts
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  - wifi: rtw88: always wait for both firmware loading attempts
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  - net/sched: accept TCA_STAB only for root qdisc
  - net: ethernet: lantiq_etop: fix memory disclosure
  - net: Fix an unsafe loop on the list
  - net: stmmac: Fix zero-division error when disabling tc cbs
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  - wifi: ath11k: fix array out-of-bound access in SoC stats
  - wifi: ath10k: Fix memory leak in management tx
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
  - !13890  ipmi: Use regspacings passed as a module parameter
  - !13898  drm/amd/display: Check link_index before accessing dc->links[
  - !13905  NFSD: Never decrement pending_async_copies on error
  - NFSD: Never decrement pending_async_copies on error
  - !13887  CVE-2024-49891
  - !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
  - !13881  RDMA/bnxt_re: Add a check for memory allocation
  - drm/amd/display: Check link_index before accessing dc->links[]
  - !13878  Fix problems of mounting nfs
  - ipmi: Use regspacings passed as a module parameter
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
  - !13854  CVE-2024-53059
  - !13853  sctp: properly validate chunk size in sctp_sf_ootb()
  - RDMA/bnxt_re: Add a check for memory allocation
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - wifi: iwlegacy: Clear stale interrupts before resuming device
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  - RDMA/hns: Fix cpu stuck caused by printings during reset
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - mac80211: always have ieee80211_sta_restart()
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
  - mac80211: Add support to trigger sta disconnect on hardware restart
  - mac80211: do drv_reconfig_complete() before restarting all
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - afs: Fix lock recursion
  - pinctrl: ocelot: fix system hang on level based interrupts
  - nvme-pci: fix race condition between reset and nvme_dev_disable()
  - nvme-pci: refactor the tagset handling in nvme_reset_work
  - nvme-pci: split nvme_dev_add
  - xfs: Fix missing interval for missing_owner in xfs fsmap
  - drivers: update Yunsilicon driver to version 2406_rc16.2
  - xfs: fix an agbno overflow in __xfs_getfsmap_datadev
  - xfs: fix interval filtering in multi-step fsmap queries
  - xfs: fix log recovery when unknown rocompat bits are set
  - filelock: Correct the file lock owner in fcntl_setlk64


author: Li Nan <linan122@huawei.com> - 5.10.0-240.0.0.139
changelog:
  - !14129  bus: integrator-lm: fix OF node leak in probe()
  - !14132 v2  ACPI: APEI: handle synchronous errors in task work
  - !14046  smb: client: Fix use-after-free of network namespace.
  - ACPI: APEI: handle synchronous exceptions in task work
  - mm: memory-failure: move return value documentation to function declaration
  - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
  - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
  - !13903  Script execution control
  - !14119  bpf: sync_linked_regs() must preserve subreg_def
  - bus: integrator-lm: fix OF node leak in probe()
  - !14124  media: cx24116: prevent overflows on SNR calculus
  - !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
  - media: cx24116: prevent overflows on SNR calculus
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - bpf: sync_linked_regs() must preserve subreg_def
  - !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
  - !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - !14086  ocfs2: uncache inode which has failed entering the group
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13401 IMA: Fix hungtask issue of digestlist importing
  - !14033  fix CVE-2024-50278
  - !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14092  USB: serial: io_edgeport: fix use after free in debug printk
  - !14064  vp_vdpa: fix id_table array not null terminated error
  - !14073  HID: core: zero-initialize the report buffer
  - !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - !14062  CVE-2024-53054
  - !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - !14054  net: sched: fix use-after-free in taprio_change()
  - !14006  filemap: Fix bounds checking in filemap_read()
  - !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - !14009  drm/vc4: Stop the active perfmon before being destroyed
  - !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - USB: serial: io_edgeport: fix use after free in debug printk
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - ocfs2: uncache inode which has failed entering the group
  - !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - HID: core: zero-initialize the report buffer
  - vp_vdpa: fix id_table array not null terminated error
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  - Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
  - !13327 cpufreq: Add SEEP governor for hardware-managed P-states
  - !13995  drm/radeon: Fix encoder->possible_clones
  - !13948  fix CVE-2024-49906
  - cpufreq: Add SEEP governor for hardware-managed P-states
  - !13988  CVE-2024-49861
  - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
  - ACPI: Fix Generic Initiator Affinity _OSC bit
  - !14043 v2  CVE-2024-40927
  - !14041 sdma-dae: bugfix of channel operation
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  - net: sched: fix use-after-free in taprio_change()
  - smb: client: Fix use-after-free of network namespace.
  - Support for auto_act_window and energy_perf in cppc_cpufreq
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
  - xhci: Handle TD clearing for multiple streams case
  - xhci: Fix failure to give back some cached cancelled URBs.
  - xhci: introduce a new move_dequeue_past_td() function to replace old code.
  - xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
  - xhci: fix giving back URB with incorrect status regression in 5.12
  - xhci: split handling halted endpoints into two steps
  - xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
  - drivers:misc:sdma-dae: bugfix of channel operation
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
  - ACPI: CPPC: Add three register ABIs
  - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
  - drm/vc4: Stop the active perfmon before being destroyed
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  - filemap: Fix bounds checking in filemap_read()
  - drm/radeon: Fix encoder->possible_clones
  - bpf: Fix kabi breakage in enum bpf_type_flag
  - selftests/bpf: Rename ARG_PTR_TO_LONG test description
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  - bpf: Fix helper writes to read-only maps
  - bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  - bpf: Allow helpers to accept pointers with a fixed size
  - bpf: Add MEM_UNINIT as a bpf_type_flag
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - fix kabi breakage due to exec is_check
  - IMA support script execution check
  - exec: Add a new AT_CHECK flag to execveat(2)
  - uselib: remove use of __FMODE_EXEC
  - exec: Check __FMODE_EXEC instead of in_execve for LSMs
  - execve: open the executable file before doing anything else
  - platform/x86/intel/pmt: telemetry: Export API to read telemetry
  - platform/x86/intel/pmt: Add header to struct intel_pmt_entry
  - platform/x86/intel/tpmi: Add additional TPMI header fields
  - platform/x86/intel/tpmi: Align comments in kernel-doc
  - platform/x86/intel/tpmi: Check major version change for TPMI Information
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
  - platform/x86/intel/tpmi: Change vsec offset to u64
  - platform/x86/intel/tpmi: Move TPMI ID definition
  - platform/x86/intel/tpmi: Modify external interface to get read/write state
  - platform/x86/intel/tpmi: Don't create devices for disabled features
  - platform/x86/intel/vsec: Remove nuisance message
  - platform/x86/intel/vsec: Add base address field
  - platform/x86/intel/vsec: Add intel_vsec_register
  - platform/x86/intel/vsec: Assign auxdev parent by argument
  - platform/x86/intel/vsec: remove platform_info from vsec device structure
  - platform/x86/intel/vsec: Move structures to header
  - platform/x86/intel/vsec: Remove unnecessary return
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
  - IMA: Fix hungtask issue of digestlist importing


author: Li Nan <linan122@huawei.com> - 5.10.0-241.0.0.140
changelog:
  - !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
  - !14145 Intel: backport ISST driver update and bugfix from 6.11
  - !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14193  nfs: fix the loss of superblock's initialized flags
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  - nfs: fix the loss of superblock's initialized flags
  - RDMA/hns: Fix flush cqe error when racing with destroy qp
  - !14180  xfs: allow inode inactivation during a ro mount log recovery
  - !14149  CVE-2024-53142
  - xfs: allow inode inactivation during a ro mount log recovery
  - !14123  mm: only enforce minimum stack gap size if it's sensible
  - !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - dmaengine: idxd: Let probe fail when workqueue cannot be enabled
  - !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
  - !14148 v2  xfs: revert fix patchs about attr inactive
  - initramfs: avoid filename buffer overrun
  - Revert "xfs: factor out __xfs_da3_node_read()"
  - Revert "xfs: atomic drop extent entries when inactiving attr"
  - platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
  - platform/x86: ISST: Fix return value on last invalid resource
  - platform/x86: ISST: Use only TPMI interface when present
  - platform/x86: ISST: Avoid some SkyLake server models
  - platform/x86: ISST: Add model specific loading for common module
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
  - !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
  - !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
  - mm: only enforce minimum stack gap size if it's sensible
  - config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
  - platform/x86/intel-uncore-freq: Don't present root domain on error
  - platform/x86/intel-uncore-freq: Increase minor number support
  - platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
  - platform/x86: ISST: Support SST-BF and SST-TF per level
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION
  - platform/x86: ISST: Add dev_fmt
  - platform/x86: ISST: Support partitioned systems
  - platform/x86: ISST: Shorten the assignments for power_domain_info
  - platform/x86: ISST: Use local variable for auxdev->dev
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems
  - platform/x86: ISST: Process read/write blocked feature status
  - EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
  - x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
  - EDAC/amd64: Rework hw_info_{get,put}
  - EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
  - EDAC/amd64: Issue probing messages only on properly detected hardware
  - EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
  - EDAC/amd64: Rename debug_display_dimm_sizes()
  - EDAC/amd64: Remove early_channel_count()
  - EDAC/amd64: Remove PCI Function 0
  - EDAC/amd64: Remove PCI Function 6
  - EDAC/amd64: Remove scrub rate control for Family 17h and later
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
  - x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
  - x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
  - x86/microcode/AMD: Rip out static buffers
  - x86/microcode/AMD: Fix mixed steppings support
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions
  - x86/microcode/AMD: Rename a couple of functions
  - crypto: ccp - Add support for PCI device 0x156E
  - crypto: ccp - Add support for PCI device 0x17E0
  - crypto: ccp - Add support for ringing a platform doorbell
  - crypto: ccp - Enable platform access interface on client PSP parts
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
  - crypto: ccp - Add support for an interface for platform features
  - crypto: ccp - Move some PSP mailbox bit definitions into common header
  - crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
  - crypto: ccp - Add support for new CCP/PSP device ID
  - i2c: designware: Fix improper usage of readl
  - i2c: designware: Add AMD PSP I2C bus support
  - genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
  - iommu/amd: Set iommu->int_enabled consistently when interrupts are set up
  - iommu/amd: Remove useless irq affinity notifier
  - x86/msi: Fix msi message data shadow struct
  - perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
  - perf script ibs: Support new IBS bits in raw trace dump
  - perf tool ibs: Sync AMD IBS header file
  - perf report: Add support to print a textual representation of IBS raw sample data
  - perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
  - perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
  - perf evlist: Use the right prefix for 'struct evlist' raw samples methods
  - perf report: Add tools/arch/x86/include/asm/amd-ibs.h
  - perf header: Record non-CPU PMU capabilities
  - perf inject: Keep some features sections from input file
  - libperf: Add preadn()
  - perf header: Add ability to keep feature sections
  - perf header: Store PMU caps in an array of strings
  - perf header: Pass "cpu" pmu name while printing caps
  - perf header: Support HYBRID_CPU_PMU_CAPS feature
  - perf header: Support HYBRID_TOPOLOGY feature
  - perf pmu: Add hybrid helper functions
  - perf pmu: Save detected hybrid pmus to a global pmu list
  - perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
  - perf pmu: Parse pmu caps sysfs only once
  - perf record ibs: Warn about sampling period skew
  - perf evsel: Make evsel__env() always return a valid env
  - perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
  - perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
  - perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
  - perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
  - perf record: Support new sample type for data page size
  - perf/x86/amd/core: Avoid register reset when CPU is dead
  - perf/x86/amd: Do not WARN() on every IRQ
  - iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
  - iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
  - iommu/amd: Fix union of bitfields in intcapxt support
  - iommu/amd: Use msi_msg shadow structs
  - iommu/intel: Use msi_msg shadow structs
  - x86/msi: Provide msi message shadow structs
  - genirq/msi: Allow shadow declarations of msi_msg:: $member
  - x86/apic: Always provide irq_compose_msi_msg() method for vector domain
  - x86/apic: Cleanup destination mode
  - x86/apic: Get rid of apic:: Dest_logical
  - x86/apic: Replace pointless apic:: Dest_logical usage
  - x86/apic: Cleanup delivery mode defines
  - x86/msi: Only use high bits of MSI address for DMAR unit


author: Li Nan <linan122@huawei.com> - 5.10.0-242.0.0.141
changelog:
  - !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - perf cs-etm: Use evlist__event2evsel() in cs-etm.c
  - !14109  RDMA/hns: backport some bugfix from maillist linux
  - !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
  - RDMA/hns: Fix flush cqe error when racing with destroy qp


author: Li Nan <linan122@huawei.com> - 5.10.0-243.0.0.142
changelog:
  - !14246  soc: hisilicon: hbmdev: Only support built-in
  - !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - soc: hisilicon: hbmdev: Only support built-in
  - !14060  etmem : fix page_ref count leak and head missing useing problem
  - !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
  - etmem : fix page_ref count leak and head missing useing problem


author: Li Nan <linan122@huawei.com> - 5.10.0-244.0.0.143
changelog:
  - !14314  x86/sgx: Fix deadlock in SGX NUMA node search
  - !14315  media: v4l2-tpg: prevent the risk of a division by zero
  - !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14289 v2  erofs: add ondemand mode support
  - !14269  iomap: fix zero padding data issue in concurrent append writes
  - !14235  xfs: fix attr inactive issue
  - !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14330  mm/khugepaged: fix ->anon_vma race
  - !14305  RDMA/hns: Some patches are integrated into OLK-5.10
  - !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm/khugepaged: fix ->anon_vma race
  - !13006  Fix CVE-2024-50086
  - !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
  - !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
  - media: v4l2-tpg: prevent the risk of a division by zero
  - x86/sgx: Fix deadlock in SGX NUMA node search
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - RDMA/hns: Don't query *except on hip10*
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix bonding failure due to wrong reset_state
  - config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
  - IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
  - !14208 Fix perf coredump and refcnt inccoret
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: modify fscache_hash_cookie() to enhance security
  - cachefiles: prefault in user pages to aovid ABBA deadlock
  - fscache/cachefiles: add a memory barrier for page_write
  - fscache/cachefiles: add a memory barrier for waking and waiting
  - fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
  - wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
  - s390: provide arch_test_bit_acquire() for architecture s390
  - wait_on_bit: add an acquire memory barrier
  - erofs: unify anonymous inodes for blob
  - erofs: remove unused device mapping in meta routine
  - fscache: fix assertion failure in cachefiles_put_object()
  - cachefiles: cyclic allocation of msg_id to avoid reuse
  - fscache: fix op leak due to abort init after parent ready
  - cachefiles: Set object to close if ondemand_id < 0 in copen
  - erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
  - cachefiles: Change the mark inactive sequence in erofs ondemand mode
  - cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - cachefiles: disallow to complete open requests with uninitialised ondemand_id
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  - fscache: Add the unhash_cookie mechanism to fscache_drop_object()
  - cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
  - cachefiles: Fix cookie reference count leakage error
  - cachefiles: Restrict monitor calls to read_page
  - cachefiles: flush all requests after setting CACHEFILES_DEAD
  - fscache: set the default value of object_max_active to 256
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: make on-demand read killable
  - cachefiles: never get a new anon fd if ondemand_id is valid
  - cachefiles: add spin_lock for cachefiles_ondemand_info
  - cachefiles: flush ondemand_object_worker during clean object
  - fscache: limit fscache_object_max_active to avoid blocking
  - cachefiles: flush all requests for the object that is being dropped
  - cachefiles: stop sending new request when dropping object
  - cachefiles: add consistency check for copen/cread
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  - cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
  - fscache: Fix trace UAF in fscache_cookie_put()
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
  - cachefiles: use mainline xattr in ondemand mode
  - fscache: rename new_location to new_version
  - erofs: switch to use new location
  - erofs: remove erofs_fscache_netfs
  - cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
  - cachefiles: use key_hash as csum for new location
  - cachefiles: skip volum csum cachefiles_cook_key() for new location
  - cachefiles: skip acc in cachefiles_cook_key() for new location
  - cachefiles: use volume key directly in cachefiles_cook_key() for new location
  - cachefiles: factor out helper to generate csum from cachefiles_cook_key()
  - cachefiles: factor out helper to generate acc from cachefiles_cook_key()
  - fscache: generate new key_hash for new location
  - fscache: add new helper to determine cachefile location
  - fscache: add a waiting mechanism when duplicate cookies are detected
  - erofs: maintain cookies of share domain in self-contained list
  - fscache: fix kernel BUG at __fscache_read_or_alloc_page
  - erofs: fix handling kern_mount() failure
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - erofs: check the uniqueness of fsid in shared domain in advance
  - fscache: fix assertion failure in fscache_put_object()
  - fscache: fix reference count leakage during abort init
  - cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
  - erofs: relinquish volume with mutex held
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - erofs: fix page unlock advance during readahead
  - openeuler_defconfig: enable erofs ondemand for x86 and arm64
  - anolis: cachefiles: fix potential NULL in error path
  - anolis: cachefiles: add missing lock protection when polling
  - anolis: cachefiles: reset object->private to NULL when it's freed
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
  - anolis: cachefiles: resend an open request if the read request's object is closed
  - anolis: cachefiles: extract ondemand info field from cachefiles_object
  - anolis: cachefiles: introduce object ondemand state
  - anolis: fscache: export fscache_object_wq
  - anolis: cachefiles: optimize on-demand IO path with buffer IO
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag
  - erofs: fix use-after-free of fsid and domain_id string
  - erofs: protect s_inodes with s_inode_list_lock for fscache
  - erofs: introduce 'domain_id' mount option
  - erofs: Support sharing cookies in the same domain
  - erofs: introduce a pseudo mnt to manage shared cookies
  - erofs: introduce fscache-based domain
  - erofs: code clean up for fscache
  - anolis: erofs: implement fscache-based data readahead
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper
  - anolis: cachefiles: maintain a file descriptor to the backing file
  - erofs: leave compressed inodes unsupported in fscache mode for now
  - anolis: erofs: fix the name of erofs_fscache_super_index_def
  - erofs: use kill_anon_super() to kill super in fscache mode
  - erofs: scan devices from device table
  - erofs: add 'fsid' mount option
  - erofs: implement fscache-based data read for inline layout
  - erofs: implement fscache-based data read for non-inline layout
  - erofs: implement fscache-based metadata read
  - erofs: register fscache context for extra data blobs
  - erofs: register fscache context for primary data blob
  - erofs: add anonymous inode caching metadata for data blobs
  - erofs: add fscache context helper functions
  - erofs: register fscache volume
  - erofs: add fscache mode check helper
  - erofs: make erofs_map_blocks() generally available
  - cachefiles: make on-demand request distribution fairer
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
  - cachefiles: fix error return code in cachefiles_ondemand_copen()
  - anolis: cachefiles: fix volume key setup for cachefiles_open
  - anolis: cachefiles: replace BUG_ON() with WARN_ON()
  - cachefiles: narrow the scope of flushed requests when releasing fd
  - anolis: cachefiles: skip check for n_children in on-demand mode
  - cachefiles: enable on-demand read mode
  - cachefiles: implement on-demand read
  - cachefiles: notify the user daemon when withdrawing cookie
  - cachefiles: unbind cachefiles gracefully in on-demand mode
  - cachefiles: notify the user daemon when looking up cookie
  - erofs: fix misbehavior of unsupported chunk format check
  - erofs: use meta buffers for erofs_read_superblock()
  - erofs: use meta buffers for zmap operations
  - erofs: use meta buffers for xattr operations
  - erofs: use meta buffers for super operations
  - erofs: use meta buffers for inode operations
  - erofs: introduce meta buffer operations
  - erofs: clean up erofs_map_blocks tracepoints
  - erofs: add multiple device support
  - erofs: decouple basic mount options from fs_context
  - erofs: introduce erofs_sb_has_xxx() helpers
  - erofs: fix double free of 'copied'
  - erofs: support reading chunk-based uncompressed files
  - erofs: introduce chunk-based file on-disk format
  - erofs: clean up file headers & footers
  - erofs: don't use erofs_map_blocks() any more
  - [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
  - [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
  - [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
  - [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - [Backport]scsi: hisi_sas: Add firmware information check
  - [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - iomap: fix zero padding data issue in concurrent append writes
  - xfs: handle attr node/leaf blocks atomically during inactive
  - xfs: factor out xfs_attr3_leaf_init
  - xfs: factor out xfs_da3_node_entry_remove
  - perf addr_location: Add init/exit/copy functions
  - perf maps: Use a pointer for kmaps
  - ksmbd: fix user-after-free from session log off
  - ksmbd: fix race condition between session lookup and expire


author: Li Nan <linan122@huawei.com> - 5.10.0-245.0.0.144
changelog:
  - !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14679  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14572  PCI: Fix use-after-free of slot->bus on hot remove
  - !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14777  tracing: Prevent bad count for tracing_cpumask_write
  - !14496  ovl: Filter invalid inodes with missing lookup function
  - !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14606  scsi: qla2xxx: Fix use after free on unload
  - !14579  io_uring: check for overflows in io_pin_pages
  - !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14734  Fix iBMA bug and change version
  - !14713  Fix CVE-2024-56705
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14601  nvme-pci: fix freeing of the HMB descriptor table
  - !14575  etmem: fix use-after-free of mm in the scan release process
  - !14381  virtiofs: use pages instead of pointer for kernel direct IO
  - !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - !14651  backport mainline bugfix patch
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14629  net/mlx5: Fix error path in multi-packet WQE transmit
  - !14627  crypto: hisilicon/qm - inject error before stopping queue
  - !14626  drm/amd/display: Check null pointers before using dc->clk_mgr
  - !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14700  CVE-2024-53158
  - !14457  cgroup: Fix potential overflow issue when checking max_depth
  - !14620  drm: zynqmp_kms: Unplug DRM device before removal
  - !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
  - media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: remove #ifdef HAS_NO_HMEM
  - !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14535  RDMA/mlx5: Move events notifier registration to be after device registration
  - !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14636  CVE-2024-56604_OLK-5.10
  - !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14523  The bugfix for LPM trie
  - !14650  memcg: fix soft lockup in the OOM process
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14436  crypto: bcm - add error check in the ahash_hmac_init function
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - memcg: fix soft lockup in the OOM process
  - !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - !14467  io_uring/tctx: work around xa_store() allocation error issue
  - !14503  net: phy: dp83869: fix memory corruption when enabling fiber
  - !14515  hfsplus: don't query the device logical block size multiple times
  - !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14388  CVE-2024-53173
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - net/mlx5: Fix error path in multi-packet WQE transmit
  - crypto: hisilicon/qm - inject error before stopping queue
  - drm/amd/display: Check null pointers before using dc->clk_mgr
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
  - drm: zynqmp_kms: Unplug DRM device before removal
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: qla2xxx: Fix use after free on unload
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - nvme-pci: fix freeing of the HMB descriptor table
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - io_uring: check for overflows in io_pin_pages
  - etmem: fix use-after-free of mm in the scan release process
  - PCI: Fix use-after-free of slot->bus on hot remove
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14366  EDAC/bluefield: Fix potential integer overflow
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14380  io_uring: check if iowq is killed before queuing
  - !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - hfsplus: don't query the device logical block size multiple times
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14371 [OLK-5.10] update AMD Zen5 Turin feature
  - net: phy: dp83869: fix memory corruption when enabling fiber
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - ovl: Filter invalid inodes with missing lookup function
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - io_uring/tctx: work around xa_store() allocation error issue
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - cgroup: Fix potential overflow issue when checking max_depth
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14409  bpf: fix OOB devmap writes when deleting elements
  - !14419  HID: wacom: fix when get product name maybe null pointer
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14268  Revert "unicode: Don't special case ignorable code points"
  - !14397  backport some patches from upstream about HCCS low power
  - !14392  arm64: stacktrace: Handle 'lr' in interrupt context
  - !14317  exfat: fix out-of-bounds access of directory entries
  - !14402  gpio: grgpio: Add NULL check in grgpio_probe
  - !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14363  CVE-2024-53217
  - HID: wacom: fix when get product name maybe null pointer
  - !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - !14407  NFSD: Prevent a potential integer overflow
  - !14378  ftrace: Fix regression with module command in stack_trace_filter
  - bpf: fix OOB devmap writes when deleting elements
  - !14375  fix CVE-2024-53197
  - NFSD: Prevent a potential integer overflow
  - gpio: grgpio: Add NULL check in grgpio_probe
  - soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
  - soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
  - soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
  - soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
  - soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
  - soc: hisilicon: kunpeng_hccs: Fix a PCC typo
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - arm64: stacktrace: Handle 'lr' in interrupt context
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - virtiofs: use pages instead of pointer for kernel direct IO
  - io_uring: check if iowq is killed before queuing
  - ftrace: Fix regression with module command in stack_trace_filter
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
  - EDAC/bluefield: Fix potential integer overflow
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - exfat: fix out-of-bounds access of directory entries
  - Revert "unicode: Don't special case ignorable code points"
  - gpiolib: fix memory use-after-free in gpiochip_setup_dev()
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans


author: Li Nan <linan122@huawei.com> - 5.10.0-246.0.0.145
changelog:
  - !14844  merge mainline patch into OLK-5.10
  - !14838 v2  fs: Filter specific inodes to prevent UAF issues
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  - mm: kfence: fix using kfence_metadata without initialization in show_object()
  - x86/mm: Do not shuffle CPU entry areas without KASLR
  - fs: Filter specific inodes to prevent UAF issues
  - !14599  CVE-2024-56701
  - !14560  CVE-2024-56567
  - !14801  CVE-2024-53237
  - !14793  jfs: fix shift-out-of-bounds in dbSplit
  - !14815  OLK-5.10
  - !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14822  ALSA: 6fire: Release resources at card release
  - !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
  - ALSA: 6fire: Release resources at card release
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - driver core: Introduce device_find_any_child() helper
  - Bluetooth: fix use-after-free in device_for_each_child()
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - jfs: fix shift-out-of-bounds in dbSplit
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - ad7780: fix division by zero in ad7780_write_raw()


author: Xiaoqian Lv <xiaoqian@nj.iscas.ac.cn> - 4.5-5
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: backport upstream 4.5-0.20 patches to support riscv64


author: Guofeng Yue <yueguofeng@h-partners.com> - 4.5-12
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: modify "--source_ip" to "--bind_source_ip" to fix init connection establishment with specific interface


author: wangkai <13474090681@163.com> - 1:0.78-13
changelog:
  - Fix CVE-2012-6687
  - Introduced environment variable-controlled polling timeouts 
    for the close and connection-keeping functions in the os_unix.c file.


author: duyiwei <duyiwei@kylinos.cn> - 1:3.4.4-4
changelog:
  - Type:bugfix
  - CVE:CVE-2024-9355、CVE-2019-9514、CVE-2024-24791、CVE-2022-32189、CVE-2022-41715、CVE-2022-2880、CVE-2022-1962、CVE-2023-45290、CVE-2024-24783、CVE-2024-24785
  - SUG:NA
  - DESC: Optimize spec files and fix CVE in batches through rebuild


author: yueyuankun <yueyuankun@kylinos.cn> - 1:3.16.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:arm64: Handle sp, lr, fp as DwReg in CfiExpr
         sync arm64-Handle-sp-lr-fp-as-DwReg-in-CfiExpr.patch


