# changelog

author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-270.0.0.173
changelog:
  - !16892 v5  HiSock Redirect Framework
  - !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - samples/bpf: Add HiSock Redirect sample
  - openeuler_defconfig: Enable CONFIG_HISOCK
  - bpf: Add bpf_ext_memcpy extension helper for arm64
  - arm64: insn: Add some opcodes to instruction decoder
  - bpf: Add bpf_change_skb_dev helper
  - bpf: Add bpf_set_ingress_dst helper
  - bpf: Add hisock_xdp_buff wrapper for xdp_buff
  - bpf: Add bpf_get_ingress_dst helper
  - bpf: Add HISOCK_EGRESS hook on network egress path
  - bpf: Add BPF_PROG_TYPE_HISOCK prog type
  - bpf: Add XDP_HISOCK_REDIRECT action
  - bpf: Add CONFIG_HISOCK
  - bpf: fix potential 32-bit overflow when accessing ARRAY map element
  - !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
  - !16860  arm64: kaslr: fix nokaslr cmdline parsing
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
  - !16816  CVE-2024-26798
  - !15234 Add support edac for hygon family 18h model 10h
  - arm64: kaslr: fix nokaslr cmdline parsing
  - !16849 v4  Introduce soft domain v4
  - sched: Fix might sleep in atomic section issue
  - sched: Balance newly task to soft domain
  - config: Configurate CONFIG_SCHED_SOFT_DOMAIN
  - sched: Add cmdline sched_soft_domain switch for soft domain feature
  - sched: fair: Disable numa migrate for soft domian task
  - sched: fair: Select idle cpu in soft domain
  - sched: Attach task group to soft domain
  - sched: topology: Build soft domain for LLC
  - !16847  net/oenetcls: Support cluster sched
  - !16840  A small fix for ftrace preemption count
  - !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - net/oenetcls: Support cluster sched
  - !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - ftrace: Fix preemption accounting for stacktrace trigger command
  - ftrace: Fix preemption accounting for stacktrace filter command
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
  - !15238 Add LS and IF mce types for Hygon family 18h model 7h
  - !15239 Add IOAPIC support for Hygon family 18h model 10h
  - !16819  nfsd: don't ignore the return code of svc_proc_register()
  - nfsd: don't ignore the return code of svc_proc_register()
  - fbcon: always restore the old font data in fbcon_do_set_font()
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed
  - fbdev: fbcon: Properly revert changes when vc_resize() failed
  - !16786  Fix CVE-2022-50230
  - !16801 v4  add soft quota
  - sched: Fix kabi broken in struct task_group and struct cfs_rq
  - sched: More flexible use of CPU quota when CPU is idle
  - !16794  eventpoll: Fix soft lockup in xcall_read()
  - crypto: hct: update hct driver to support both guest and host.
  - crypto: hct: provides hygon crypto technology ccp device driver.
  - crypto: ccp: support sm2 on Hygon generation 4th CPU
  - crypto: ccp: remove repeated sm4-hs mode
  - crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
  - crypto: ccp: Process multiple VQ commands once for SM3 ccp.
  - crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
  - crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
  - crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
  - crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
  - crypto: ccp: Only handle interrupts by completion.
  - crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
  - crypto: ccp: Support SM4 algorithm for hygon ccp.
  - crypto: ccp: Support SM3 algorithm for hygon ccp.
  - crypto: ccp: Support SM2 algorithm for hygon ccp.
  - eventpoll: Fix soft lockup in xcall_read()
  - arm64: set UXN on swapper page tables
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
  - EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
  - x86/amd_nb: Add helper function to identify Hygon family 18h model 10h


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-271.0.0.174
changelog:
  - !17015 [OLK-5.10]:update patches for sw64 architecture
  - !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
  - !12159 Add the spidev.ko to OLK-5.10
  - !16992  selinux: ignore unknown extended permissions
  - !15235 correct address translation for Hygon family 18h model 4h~10h
  - sw64: kvm: save the virtual address of irqs_pending in vcpucb
  - sw64: delete useless I/O access in VM and emulator
  - sw64: kvm: fix perf kvm support for CORE4
  - sw64: pci: remove zx200 dma mask reset
  - sw64: fix for executing syscall(-1)
  - sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
  - sw64: pci: add base address of devmn
  - sw64: adjust the notrace in the code
  - !16776  cachefiles: Fix the potential ABBA deadlock issue
  - selinux: ignore unknown extended permissions
  - !16970  Fix CVE-2025-38170
  - !16966  net: openvswitch: Fix the dead loop of MPLS parse
  - !16965  dma-buf: insert memory barrier before updating num_fences
  - arm64/fpsimd: Discard stale CPU state when handling SME traps
  - net: openvswitch: Fix the dead loop of MPLS parse
  - EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
  - dma-buf: insert memory barrier before updating num_fences
  - !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
  - !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
  - !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
  - !16935 [OLK-5.10] Add gpio-hisi softdepend
  - xhci: Limit time spent with xHC interrupts disabled during bus resume
  - xhci: add helpers for enabling and disabling interrupters
  - iommu: Add support for ACPI device direct mapping
  - !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - !16916  Backport mainline patches
  - !16914  net: fix slab-use-after-free read in decode_session6
  - sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
  - Add gpio-hisi softdepend
  - PCI/DPC: Ignore Surprise Down error on hot removal
  - hwtracing: hisi_ptt: Check duplicate filters before allocation
  - hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
  - EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
  - EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
  - EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
  - !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16901  uprobes: check anon before compound when unregister
  - net: virtio: Fix kabi broken
  - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  - net: add more sanity check in virtio_net_hdr_to_skb()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - net: fix slab-use-after-free read in decode_session6
  - !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
  - !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
  - mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
  - uprobes: check anon before compound when unregister
  - libnvdimm/labels: Fix divide error in nd_label_data_init()
  - !16752  nfs: handle failure of nfs_get_lock_context in unlock path
  - x86/cpufeatures: Add CSV3 CPU feature
  - x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
  - x86/cpu: Detect memory encryption features on Hygon CPUs
  - KVM: SVM: Print Hygon CSV support info if support is detected
  - crypto: ccp: Print Hygon CSV API version when CSV support is detected
  - x86/mm: Print CSV info into the kernel log
  - x86/config: Set CONFIG_HYGON_CSV by default
  - x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
  - Documentation/arch/x86: Add HYGON secure virtualization description
  - cachefiles: Fix the potential ABBA deadlock issue
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
  - EDAC/amd64: Get instance id for Hygon family 18h model 10h
  - EDAC/amd64: Calculate instance id for hygon family 18h model 7h
  - EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
  - Open the CONFIG for spidev.ko


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-272.0.0.175
changelog:
  - !17048  RDMA/hns: Stability and Security Fixes and Improvements
  - !16839 Add gpio-hisi softdepend
  - !16852 net: hns3: fix a use of uninitialized variable problem
  - !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
  - !16855 ptp: hisi: the print of element in ptp need protected by lock
  - !16881 net: hns3: fix kernel crash when uninstalling driver
  - RDMA/hns: Fix double destruction of rsv_qp
  - RDMA/hns: Fix address information leakage of DCA memory
  - RDMA/hns: Fix scc_param failed logic judgments
  - RDMA/hns: Fix congestion control algorithm parameter range
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
  - RDMA/hns: Fix divide-by-zero error in dca debugfs
  - RDMA/hns: Fix descriptions of stars api
  - RDMA/hns: Fix poe memory leak in error flow
  - RDMA/hns: Fix accessing uninitialized resources
  - RDMA/hns: Add check between dca_min_size and dca_max_size
  - io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - iio: light: opt3001: fix deadlock due to concurrent flag access
  - net: hns3: fix kernel crash when uninstalling driver
  - ptp: hisi: the print of element in ptp need protected by lock
  - ptp: hisi: fix list not delete problem
  - net: hns3: fix a use of uninitialized variable problem
  - net: hns3: avoid unnecessary checking when unmap buffer
  - net: hns3: disable interrupt when ptp init failed
  - Add gpio-hisi softdepend


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-273.0.0.176
changelog:
  - !17045  arm64: Fix a typo in xcall_init_task()
  - !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17099  arm64: exec: add mcs support for prepare_binprm
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - !17104  hugetlb: drain pcp for movable zone before alloc
  - !16949  media: uvcvideo: Remove dangling pointers
  - hugetlb: drain pcp for movable zone before alloc
  - arm64: exec: add mcs support for prepare_binprm
  - iov_iter: add copy_mc_page_to_kvec_iter
  - !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
  - !16429 CVE-2025-21855
  - !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - !17058  media: cxusb: no longer judge rbuf when the write fails
  - !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - media: cxusb: no longer judge rbuf when the write fails
  - ibmvnic: Don't reference skb after sending to VIOS
  - !17002  net_sched: red: fix a race in __red_change()
  - EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
  - arm64: Fix a typo in xcall_init_task()
  - net_sched: red: fix a race in __red_change()
  - media: uvcvideo: Remove dangling pointers
  - KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  - cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-274.0.0.177
changelog:
  - !17195  smb: client: fix use-after-free in crypt_message when using async crypto
  - !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
  - !17077  smb: client: fix use-after-free in cifs_oplock_break
  - !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
  - ima: prevent concurrent list operations in ima_lsm_update_rules
  - net: hns3: Change the function return type from int to bool
  - !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - !17233  hugeltb: Fix null ptr exception during drain movable pcp
  - soc: hisilicon: kunpeng_hccs: Fix incorrect log information
  - net: hns3: defer calling ptp_clock_register()
  - net: hns3: fix an interrupt residual problem
  - hugeltb: Fix null ptr exception during drain movable pcp
  - net: hns3: store rx VLAN tag offload state for VF
  - !17204 v2  CVE-2022-49961
  - !16809  vhost-scsi: protect vq->log_used with vq->mutex
  - !16885  fs: Backport two namespace fix patches
  - !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - selftests/bpf: Add regression test for pruning fix
  - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
  - !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
  - !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - smb: client: fix use-after-free in crypt_message when using async crypto
  - wifi: ath9k_htc: Abort software beacon handling if disabled
  - !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - arm64/mpam: Only inform the CPUs running tasks of the group
  - arm64/mpam: Fix the potential deadlock when updating the rmid
  - arm64/mpam: Fix task CLOSID/RMID update race
  - arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
  - arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
  - !17123  crypto: algif_hash - fix double free in hash_accept
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - !17125  EDAC/skx_common: Fix general protection fault
  - !17131  modify xcall xint proc file permissions
  - modify xcall proc file permissions to 640
  - modify xint proc file permissions to 640
  - EDAC/skx_common: Fix general protection fault
  - crypto: algif_hash - fix double free in hash_accept
  - smb: client: fix use-after-free in cifs_oplock_break
  - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - vhost-scsi: protect vq->log_used with vq->mutex


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-275.0.0.178
changelog:
  - !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  - !17252 ROH:fix security issues and eliminate redundancies
  - !17241 gpiolib: Get rid of ARCH_NR_GPIOS
  - !17010  perf: Fix sample vs do_exit()
  - !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - ROH:fix security issues and eliminate redundancies
  - !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - !17300  jfs: add check read-only before txBeginAnon() call
  - !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - !17288 RDMA/hns: Support querying DIP SCC context
  - jfs: add check read-only before txBeginAnon() call
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - RDMA/hns: Support querying DIP SCC context
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - !17279 RDMA/hns: Remove MW support
  - RDMA/hns: Remove MW support
  - RDMA/hns: Drop GFP_NOWARN
  - RDMA/hns: Fix -Wframe-larger-than issue
  - RDMA/hns: Fix HW resources are not cleared in error flow
  - RDMA/hns: Fix remove debugfs after device has been unregistered
  - RDMA/hns: Add trace for MR/MTR attribute dumping
  - RDMA/hns: Add trace for WQE dumping
  - RDMA/hns: Add trace for CMDQ dumping
  - RDMA/hns: Add trace for AEQE dumping
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
  - RDMA/hns: Inappropriate format characters cleanup
  - RDMA/hns: Add trace for flush CQE
  - !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - gpiolib: Get rid of never false gpio_is_valid() calls
  - perf: Fix sample vs do_exit()
  - nvmet-tcp: don't restore null sk_state_change
  - x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
  - iommu/amd: Keep track of amd_iommu_irq_remap state
  - iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
  - iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
  - x86/ioapic: Correct the PCI/ISA trigger type selection
  - x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
  - x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
  - iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
  - x86/apic: Support 15 bits of APIC ID in MSI where available
  - x86/ioapic: Handle Extended Destination ID field in RTE
  - iommu/vt-d: Simplify intel_irq_remapping_select()
  - x86: Kill all traces of irq_remapping_get_irq_domain()
  - x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
  - x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
  - iommu/hyper-v: Implement select() method on remapping irqdomain
  - iommu/vt-d: Implement select() method on remapping irqdomain
  - iommu/amd: Implement select() method on remapping irqdomain
  - x86/apic: Add select() method on vector irqdomain
  - genirq/irqdomain: Implement get_name() method on irqchip fwnodes
  - x86/ioapic: Generate RTE directly from parent irqchip's MSI message
  - x86/ioapic: Cleanup IO/APIC route entry structs
  - x86/io_apic: Cleanup trigger/polarity helpers
  - x86/msi: Remove msidef.h
  - x86/pci/xen: Use msi_msg shadow structs
  - x86/kvm: Use msi_msg shadow structs
  - PCI: vmd: Use msi_msg shadow structs
  - x86/hpet: Move MSI support into hpet.c
  - x86/devicetree: Fix the ioapic interrupt type table
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-276.0.0.179
changelog:
  - !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - !17315  ovl: fix general protection fault in security_inode_getattr
  - !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - !17424  bcache: fix NULL pointer in cache_set_flush()
  - !17433  ACPICA: Refuse to evaluate a method if arguments are missing
  - !17417  drm/dp_mst: Fix MST sideband message body length check
  - !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - !17407  usb: net: sierra: check for no status endpoint
  - !17429  drm/v3d: Disable interrupts before resetting the GPU
  - !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - drm/v3d: Disable interrupts before resetting the GPU
  - !17394  selftests/tracing: Fix false failure of subsystem event test
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  - bcache: fix NULL pointer in cache_set_flush()
  - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
  - drm/dp_mst: Fix MST sideband message body length check
  - usb: net: sierra: check for no status endpoint
  - !17389  CVE-2025-21702
  - !17388  ipvlan: ensure network headers are in skb linear part
  - !17383  net/sched: act_ct: fix ref leak when switching zones
  - !17382  net: annotate races around sk->sk_bound_dev_if
  - !17381  net: sched: Disallow replacing of child qdisc from one parent to another
  - !17377  net: sched: fix ets qdisc OOB Indexing
  - !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - selftests/tracing: Fix false failure of subsystem event test
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - ipvlan: ensure network headers are in skb linear part
  - net/sched: act_ct: fix ref leak when switching zones
  - net: annotate races around sk->sk_bound_dev_if
  - !17359 [OLK 5.10] AMD HSMP driver support patches backport
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - !17374  RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17365  atm: clip: Fix infinite recursive call of clip_push().
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  - net: sched: fix ets qdisc OOB Indexing
  - !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - !17373  drm/amd/display: Add null pointer check for get_first_active_display()
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  - !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
  - drm/amd/display: Add null pointer check for get_first_active_display()
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - atm: clip: Fix infinite recursive call of clip_push().
  - !17350  scsi: lpfc: Use memcpy() for BIOS version
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
  - platform/x86/amd/hsmp: switch to use device_add_groups()
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
  - platform/x86/amd/hsmp: Add support for ACPI based probing
  - platform/x86/amd/hsmp: Restructure sysfs group creation
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs
  - platform/x86/amd/hsmp: Create static func to handle platdev
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
  - platform/x86/amd/hsmp: Move hsmp_test to probe
  - platform/x86/amd/hsmp: Fix iomem handling
  - platform/x86/amd/hsmp: improve the error log
  - platform/x86/amd/hsmp: add support for metrics tbl
  - platform/x86/amd/hsmp: create plat specific struct
  - platform/x86: Move AMD platform drivers to separate directory
  - !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
  - KVM: x86: work around QEMU issue with synthetic CPUID leaves
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature
  - x86/cpu, kvm: Add the Null Selector Clears Base feature
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
  - x86/mm: Refactor cond_ibpb() to support other use cases
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful
  - KVM: x86: skip host CPUID call for hypervisor leaves
  - KVM: x86: add support for CPUID leaf 0x80000021
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
  - x86/asm: Have the __ASM_FORM macros handle commas in arguments
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
  - scsi: lpfc: Use memcpy() for BIOS version
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
  - ovl: fix general protection fault in security_inode_getattr
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-277.0.0.180
changelog:
  - !17505  CVE-2024-58237
  - !17504  net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - !17503  sctp: detect and prevent references to a freed transport in sendmsg
  - !17461 drivers:misc:sdma-dae: fix incorrect debugfs print
  - !17506 ROH: fix variable type inconsistency issue
  - !17437 [OLK-5.10]:update patches for sw64 architecture
  - ROH: fix variable type inconsistency issue
  - bpf: consider that tail calls invalidate packet pointers
  - bpf: refactor bpf_helper_changes_pkt_data to use helper number
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  - sctp: detect and prevent references to a freed transport in sendmsg
  - !17486  net: atm: fix use after free in lec_send()
  - !17485  vlan: enforce underlying device type
  - !17484  net: gso: fix ownership in __udp_gso_segment
  - net: atm: fix use after free in lec_send()
  - vlan: enforce underlying device type
  - net: gso: fix ownership in __udp_gso_segment
  - !17466  arm-smmu-v3: adjust ecmdq log level
  - drivers:misc:sdma-dae: fix incorrect debugfs print
  - arm-smmu-v3: adjust ecmdq log level
  - !17457 v2  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
  - sw64: ptrace: return -EIO in invalid PEEKUSR/POKEUSR requests
  - sw64: kvm: fix compile error of kvm.ko
  - sw64: kvm: remove the duplicated Kconfig selection of KVM
  - sw64: cpuidle: add dedicated driver
  - sw64: crypto: implement crc32 assembly optimization
  - sw64: efi: remove meaningless code from asm/efi.h
  - sw64: cpufreq: using PLL0 to provide clock for idle cores
  - sw64: kvm: enable dirty log gradually in small chunks for core4
  - sw64: fix guest kdump function
  - sw64: use wait/complete for smp boot
  - sw64: fix sw64_rrk_store() wrap handling


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-278.0.0.181
changelog:
  - !17568  comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17545  net_sched: drr: Fix double list add in class with netem as child qdisc
  - comedi: aio_iiro_16: Fix bit shift out of bounds
  - !17566  hugelb: do not sleep during spinlock hugetlb_lock
  - hugelb: do not sleep during spinlock hugetlb_lock
  - !17480  HID: core: fix __hid_request when no report ID is used
  - !17554  arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - arm64: mm: fix EFI_BUFFER_TOO_SMALL problem for MemoryOnChipMode
  - !17544  net_sched: qfq: Fix double list add in class with netem as child qdisc
  - !17543  net: sch: Fix CVE-2025-37798
  - !17539  wifi: at76c50x: fix use after free access in at76_disconnect
  - !17536  net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17532  sched: Fix sched tunable parameter range overflow
  - !15064  arm64: mm: Update PBHA related variable name
  - net_sched: drr: Fix double list add in class with netem as child qdisc
  - net_sched: qfq: Fix double list add in class with netem as child qdisc
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  - sch_ets: make est_qlen_notify() idempotent
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - wifi: at76c50x: fix use after free access in at76_disconnect
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - !17531 RDMA/hns: Fix dip entries leak on devices newer than hip09
  - sched: Fix sched tunable parameter range overflow
  - !17494 v2  kernfs performance optimization
  - RDMA/hns: Fix dip entries leak on devices newer than hip09
  - !17527  PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17525  fix CVE-2022-49623
  - PCI/ASPM: Fix link state exit during switch upstream function removal
  - !17522  CVE-2025-38180
  - powerpc/xive/spapr: correct bitmap allocation size
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()'
  - net: atm: fix /proc/net/atm/lec handling
  - net: atm: add lec_mutex
  - kernfs: don't create a negative dentry if inactive node exists
  - kernfs: also call kernfs_set_rev() for positive dentry
  - kernfs: dont call d_splice_alias() under kernfs node lock
  - kernfs: use i_lock to protect concurrent inode updates
  - kernfs: switch kernfs to use an rwsem
  - kernfs: use VFS negative dentry caching
  - kernfs: add a revision to identify directory node changes
  - HID: core: do not bypass hid_hw_raw_request
  - HID: core: ensure __hid_request reserves the report ID as the first byte
  - HID: core: ensure the allocated report buffer can contain the reserved report ID
  - arm64: mm: Update PBHA related variable name


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-279.0.0.182
changelog:
  - !17745  trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17726  perf/core: Don't leak AUX buffer refcount on allocation failure
  - !17675  ftrace: Also allocate and copy hash for reading of filter files
  - !17670  ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !15618  partitions: mac: fix handling of bogus partition table
  - trace/fgraph: Fix the warning caused by missing unregister notifier
  - !17723  mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17727  CVE-2025-38465
  - !17454  md/raid1: Fix stack memory use after return in raid1_reshape
  - !17452  blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - netlink: avoid infinite retry looping in netlink_unicast()
  - netlink: make sure we allow at least one dump skb
  - netlink: Fix rmem check in netlink_broadcast_deliver().
  - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  - perf/core: Don't leak AUX buffer refcount on allocation failure
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - !17631  perf/core: Exit early on perf_mmap() fail
  - ftrace: Also allocate and copy hash for reading of filter files
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  - !17603  two bugfix for arm64 support HVO
  - !17657  selftests/bpf: Add remaining ASSERT_xxx() variants
  - selftests/bpf: Add remaining ASSERT_xxx() variants
  - !17614  xfrm: state: fix out-of-bounds read during lookup
  - !17626  Fix CVE-2025-37780
  - !17627  Fix CVE-2024-58069
  - !17624  rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - !17623  net_sched: hfsc: Fix a UAF vulnerability in class handling
  - !17622  tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - !17621  CVE-2025-38052
  - !17619  tipc: Fix use-after-free in tipc_conn_close().
  - !17620  net: clear the dst when changing skb protocol
  - !17618  net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - !17617  net: fix udp gso skb_segment after pull from frag_list
  - !17616  atm: Fix NULL pointer dereference
  - !17615  udp: Fix memory accounting leak.
  - !17613  macsec: fix UAF bug for real_dev
  - !17612  vfio/pci: Properly hide first-in-list PCIe extended capability
  - perf/core: Exit early on perf_mmap() fail
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  - isofs: Prevent the use of too small fid
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  - net_sched: hfsc: Fix a UAF vulnerability in class handling
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  - net: tipc: fix refcount warning in tipc_aead_encrypt
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  - net: clear the dst when changing skb protocol
  - tipc: Fix use-after-free in tipc_conn_close().
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  - net: fix udp gso skb_segment after pull from frag_list
  - atm: Fix NULL pointer dereference
  - udp: Fix memory accounting leak.
  - xfrm: state: fix out-of-bounds read during lookup
  - macsec: fix UAF bug for real_dev
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - !17376 net_sched: Flush gso_skb list too during ->change()
  - !17576  net/sched: Fix CVE-2025-37890
  - arm64: mm: HVO: fix deadlock in split vmemmap pmd
  - mm: HVO: fix hard lockup in split_vmemmap_huge_pmd under x86
  - !17581  tracing: Add down_write(trace_event_sem) when adding trace event
  - !17580  iio: adc: ti-ads8688: fix information leak in triggered buffer
  - tracing: Add down_write(trace_event_sem) when adding trace event
  - !17579 v2  two cve fix
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - vfio/platform: check the bounds of read/write syscalls
  - powerpc/mm/fault: Fix kfence page fault reporting
  - net/sched: ets: use old 'nbands' while purging unused classes
  - net/sched: Always pass notifications when child class becomes empty
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
  - net_sched: Flush gso_skb list too during ->change()
  - partitions: mac: fix handling of bogus partition table


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: yaoxin <1024769339@qq.com> - 8.0.42-1
changelog:
  - Update to 8.0.42 for fix CVEs(CVE-2025-21574,CVE-2025-21575,CVE-2025-21577,
    CVE-2025-21580,CVE-2025-21581,CVE-2025-21584,CVE-2025-21585,CVE-2025-30681,
    CVE-2025-30682,CVE-2025-30683,CVE-2025-30684,CVE-2025-30685,CVE-2025-30687,
    CVE-2025-30688,CVE-2025-30689,CVE-2025-30693,CVE-2025-30695,CVE-2025-30696,
    CVE-2025-30699,CVE-2025-30703,CVE-2025-30704,CVE-2025-30705,CVE-2025-30710,
    CVE-2025-30715,CVE-2025-30721,CVE-2025-30722


author: yaoxin <1024769339@qq.com> - 8.0.43-1
changelog:
  - Update to 8.4.6 for fix CVEs (CVE-2025-50068,CVE-2025-50077,CVE-2025-50078,
    CVE-2025-50079,CVE-2025-50080,CVE-2025-50081,CVE-2025-50082,CVE-2025-50083,
    CVE-2025-50084,CVE-2025-50085,CVE-2025-50086,CVE-2025-50087,CVE-2025-50091,
    CVE-2025-50092,CVE-2025-50093,CVE-2025-50094,CVE-2025-50096,CVE-2025-50097,
    CVE-2025-50098,CVE-2025-50099,CVE-2025-50100,CVE-2025-50101,CVE-2025-50102,
    CVE-2025-50104,CVE-2025-53023)


