# changelog

author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-318
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set


author: Yu Peng <yupeng@kylinos.cn> - 1.2.0-323
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix ctr snapshot mount produce invalid mount command for empty option.


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-44
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-46
changelog:
  - Type:CVE
  - CVE:CVE-2021-46848
  - SUG:NA
  - DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-47
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix log printing in tpcm_kunpeng moddule
         osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
         osdep: Introduce include/grub/osdep/major.h and use it
         disk/mdraid1x_linux: Prevent infinite recursion
         disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-49
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:commands/legacycfg: Avoid closing file twice
         disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end


author: sunhai <sunhai10@huawei.com> - 1:2.06-51
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.06-53
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Li Nan <linan122@huawei.com> - 5.10.0-283.0.0.186
changelog:
  - !18068  net: bridge: fix soft lockup in br_multicast_query_expired()
  - !18025  trace/fgraph: Fix error handling
  - !18100  Fix CVE-2022-50255
  - !18102  bpf: Fix memleak due to fentry attach failure
  - bpf: Fix memleak due to fentry attach failure
  - tracing: Have the user copy of synthetic event address use correct context
  - tracing: Fix reading strings from synthetic events
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header
  - net: bridge: fix soft lockup in br_multicast_query_expired()
  - trace/fgraph: Fix error handling


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-284.0.0.187
changelog:
  - !18283 RDMA/hns: Fix wrong WQE data when QP wraps around
  - !18262  net: dsa: Avoid cross-chip syncing of VLAN filtering
  - !17990 perf: backport community patches
  - !18229  net: ch9200: fix uninitialised access during mii_nway_restart
  - RDMA/hns: Fix wrong WQE data when QP wraps around
  - net: dsa: Avoid cross-chip syncing of VLAN filtering
  - !18251  mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - !18162  x86/MCE: Always save CS register on AMD Zen IF Poison errors
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
  - net: ch9200: fix uninitialised access during mii_nway_restart
  - perf: Always feature test reallocarray
  - perf comm str: Avoid sort during insert
  - perf comm: Fix comm_str__put() for reference count checking
  - perf comm: Add reference count checking to 'struct comm_str'
  - libperf rc_check: Make implicit enabling work for GCC
  - libperf rc_check: Enable implicitly with sanitizers
  - libperf: Add reference count checking macros
  - !18122  nfsd: call op_release, even when op_func returns an error
  - !18126  scsi: target: iscsi: Fix a race condition between login_work and the login thread
  - !17610 net: ravb: Fix missing rtnl lock in suspend/resume path
  - !17876 fs/ntfs3: cancle set bad inode after removing name fails
  - !17927 spufs: fix a leak on spufs_new_file() failure
  - !17929 bus: fsl-mc: fix double-free on mc_dev
  - !18138  VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
  - !18155  ARM: rockchip: fix kernel hang during smp initialization
  - x86/MCE: Always save CS register on AMD Zen IF Poison errors
  - ARM: rockchip: fix kernel hang during smp initialization
  - !18112  tee: fix NULL pointer dereference in tee_shm_put
  - !18070  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !18099  nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
  - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
  - scsi: target: iscsi: Fix a race condition between login_work and the login thread
  - nfsd: call op_release, even when op_func returns an error
  - tee: fix NULL pointer dereference in tee_shm_put
  - nfsd: replace wait_on_bit by wait_on_bit_acquire in nfsd_file_acquire
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - bus: fsl-mc: fix double-free on mc_dev
  - spufs: fix a leak on spufs_new_file() failure
  - fs/ntfs3: cancle set bad inode after removing name fails
  - net: ravb: Fix missing rtnl lock in suspend/resume path


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-285.0.0.188
changelog:
  - !18305  vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18278  sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - !18067  NFSD: Protect against send buffer overflow in NFSv2 READ
  - !18335  x86/paravirt: Fix build due to __text_gen_insn() backport
  - !18043 [OLK-5.10] Add SEV-ES hypervisor support
  - x86/paravirt: Fix build due to __text_gen_insn() backport
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  - !18052  fix oenetcls bugs
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - KVM: SVM: Add Hygon CSV2 detection for confidential computing support
  - KVM: x86: Revert "KVM: x86: Mark GPRs dirty when written"
  - KVM: SVM: Unconditionally sync GPRs to GHCB on VMRUN of SEV-ES guest
  - KVM: SVM: Add support for booting APs in an SEV-ES guest
  - KVM: SVM: fix 32-bit compilation
  - KVM: SVM: Add AP_JUMP_TABLE support in prep for AP booting
  - KVM: SVM: Provide support to launch and run an SEV-ES guest
  - KVM: SVM: Provide an updated VMRUN invocation for SEV-ES guests
  - KVM: SVM: Provide support for SEV-ES vCPU loading
  - KVM: SVM: Provide support for SEV-ES vCPU creation/loading
  - KVM: SVM: Update ASID allocation to support SEV-ES guests
  - KVM: SVM: Set the encryption mask for the SVM host save area
  - KVM: SVM: Add NMI support for an SEV-ES guest
  - KVM: SVM: Guest FPU state save/restore not needed for SEV-ES guest
  - KVM: SVM: Do not report support for SMM for an SEV-ES guest
  - KVM: x86: Update __get_sregs() / __set_sregs() to support SEV-ES
  - KVM: SVM: Add support for CR8 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR4 write traps for an SEV-ES guest
  - KVM: SVM: Add support for CR0 write traps for an SEV-ES guest
  - KVM: SVM: Add support for EFER write traps for an SEV-ES guest
  - KVM: SVM: Support string IO operations for an SEV-ES guest
  - KVM: SVM: Support MMIO for an SEV-ES guest
  - KVM: SVM: Create trace events for VMGEXIT MSR protocol processing
  - KVM: SVM: Create trace events for VMGEXIT processing
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x100
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x004
  - KVM: SVM: Add support for SEV-ES GHCB MSR protocol function 0x002
  - KVM: SVM: Add initial support for a VMGEXIT VMEXIT
  - KVM: SVM: Prepare for SEV-ES exit handling in the sev.c file
  - KVM: SVM: Cannot re-initialize the VMCB after shutdown with SEV-ES
  - KVM: SVM: Do not allow instruction emulation under SEV-ES
  - KVM: SVM: Prevent debugging under SEV-ES
  - KVM: SVM: Add required changes to support intercepts under SEV-ES
  - KVM: x86: introduce complete_emulated_msr callback
  - KVM: x86: use kvm_complete_insn_gp in emulating RDMSR/WRMSR
  - KVM: x86: remove bogus #GP injection
  - KVM: x86: Mark GPRs dirty when written
  - KVM: SVM: Add support for the SEV-ES VMSA
  - KVM: SVM: Add GHCB accessor functions for retrieving fields
  - KVM: SVM: Add support for SEV-ES capability in KVM
  - NFSD: Protect against send buffer overflow in NFSv2 READ
  - net/oenetcls: use workqueue for ntuple cfg
  - net/oenetcls: remove oenetcls trace hook
  - net/oenetcls: use raw_smp_processor_id() instead of smp_processor_id()
  - net/oenetcls: Fix oecls_numa_info_table memleak


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-286.0.0.189
changelog:
  - !18480  KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18463 scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
  - !18150  CVE-2022-50306
  - !18314  fs: quota: create dedicated workqueue for quota_release_work
  - !17400  fscrypt: Don't use problematic non-inline crypto engines
  - scsi/hifc: Fix rport dev loss tmo flag and function parameter check err
  - !15216  Fix kfree mismatch reported by cocci
  - !18424  net/hinic3: Modify driver version
  - net/hinic3: Modify driver version
  - !18202  blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
  - !18200  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - !18197 v2  loop: Avoid updating block size under exclusive owner
  - !18007  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - !17991  CVE-2025-39697
  - !18361  umount performance fix
  - !18353  net/oenetcls: Fix memleak when clean flow table
  - do_make_slave(): choose new master sanely
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
  - change_mnt_propagation() cleanups, step 1
  - net/oenetcls: Fix memleak when clean flow table
  - fs: quota: create dedicated workqueue for quota_release_work
  - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - loop: Avoid updating block size under exclusive owner
  - ext4: use ext4_fc_tl_mem in fast-commit replay path
  - ext4: fix potential out of bound read in ext4_fc_replay_scan()
  - ext4: factor out ext4_fc_get_tl()
  - ext4: introduce EXT4_FC_TAG_BASE_LEN helper
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - fscrypt: Don't use problematic non-inline crypto engines
  - Fix kfree mismatch reported by cocci


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-287.0.0.190
changelog:
  - !18584  hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
  - !18537  posix-timers: Ensure timer ID search-loop limit is valid
  - hisi: l0: update device name from hisi_l0 to hisi_soc_cache_mgmt
  - !18549  i40e: fix idx validation in config queues msg
  - i40e: fix idx validation in config queues msg
  - !18534 [OLK-5.10]:update patches for sw64 architecture
  - !18530 drivers:misc:sdma-dae: optimize kernel code
  - posix-timers: Ensure timer ID search-loop limit is valid
  - drivers:misc:sdma-dae: optimize kernel code
  - sw64: fix the condition for enabling hw_una_enabled
  - sw64: add trap related macros
  - sw64: add missing memory clobbers
  - sw64: optimize ipi handling
  - sw64: Add inline find_next_set/and/clear_bit()
  - sw64: optimize asid clearation
  - sw64: update cflags for new compiler
  - sw64: enable -relax when CONFIG_FUNCTION_TRACER=y
  - sw64: efi: fix compile error when CONFIG_EFI=n
  - sw64: powercap: fix misuse of an uninitialized temporary variable
  - sw64: powercap: increase the interval of polling mode
  - sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
  - sw64: powercap: avoid checking meaningless target freq
  - sw64: irqchip: update effective affinity for INTx
  - sw64: msi: fix affinity change of managed irq
  - sw64: use orig_r0 as syscall nr
  - sw64: revert ioremap() to __va() in ioport_map()
  - sw64: fix unresolved reference error when close pci
  - sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
  - !18487 RDMA/hns: Fix more wrong WQE data cases when QP wraps around
  - !18514  tracing: probes: Fix a possible race in trace_probe_log APIs
  - tracing: probes: Fix a possible race in trace_probe_log APIs
  - !18512  iio: adc: at91: call input_free_device() on allocated iio_dev
  - iio: adc: at91: call input_free_device() on allocated iio_dev
  - !18490 v2  Add some bugfix for l0.
  - hisi: l0: fix security risks for l0
  - hisi: l3t: use readl_poll_timeout_atomic to wait reg op finish
  - hisi: l3t: fix l3t unlock order
  - hisi: l3t: fix conflict between HISI050 and HISI021
  - !18397  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - !18470  e1000e: fix heap overflow in e1000_set_eeprom
  - RDMA/hns: Fix more wrong WQE data cases when QP wraps around
  - e1000e: fix heap overflow in e1000_set_eeprom
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-288.0.0.191
changelog:
  - !18738  fs: udf: fix OOB read in lengthAllocDescs handling
  - !2934 e1000e: Add support for the next LOM generation
  - !18783  padata: Reset next CPU when reorder sequence wraps around
  - !18737 [OLK-5.10] backport important bugfix for mpt3sas driver from upstream linux-5.10.y
  - !18743 [OLK-5.10] backport important bugfix for lpfc driver from upstream linux-5.10.y
  - padata: Reset next CPU when reorder sequence wraps around
  - !18722  dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - !14672 IXIC:add phytium ixic d2000 driver
  - !18729  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - !18728  *** CVE-2025-39973 ***
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  - fs: udf: fix OOB read in lengthAllocDescs handling
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - i40e: add validation for ring_len param
  - i40e: increase max descriptors for XL710
  - !13242 [OLK-5.10] openeuler_defconfig: clean up invalid kernel configurations
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  - !18687 v2  net/oenetcls: Balancing softirq to improve performance
  - !18686  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18018 Rate-limit the logging of dirty-page and SPECTRE_V2 messages
  - !18378 sched/fair: remove qos_reweight logic under non-SMP scenario
  - net/oenetcls: Balancing softirq to improve performance
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18663  perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
  - !18628  tracing: dynevent: Add a missing lockdown check on dynevent
  - perf test bpf: Address error about non-null argument for epoll_pwait 2nd arg
  - !18617  Fix CVE-2025-39993
  - tracing: dynevent: Add a missing lockdown check on dynevent
  - media: rc: fix races with imon_disconnect()
  - media: imon: grab lock earlier in imon_ir_change_protocol()
  - media: imon: Fix race getting ictx->lock
  - openeuler_defconfig: clean up invalid kernel configurations
  - sched/fair: remove qos_reweight logic under non-SMP scenario
  - Rate-limit the logging of dirty-page and SPECTRE_V2 messages
  - IXIC:add phytium ixic d2000 driver
  - IXIC:add phytium ixic d2000 DT binding docs
  - e1000e: Add support for the next LOM generation


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-289.0.0.192
changelog:
  - !18365 [OLK-5.10]Support request attestation report from CSV guest
  - !14859 net :stmmac add support for Phytium GMAC controller
  - !18665 [OLK-5.10] Fix repeated VM vcpu hotplug causing Qemu to abort
  - !9490 [OLK-5.10]RNPVF: NET: Fix os crash while enable sriov for rnp
  - !17396  Squashfs: check return result of sb_min_blocksize
  - !18430 [Intel-SIG] CWF PMU legacy support including core/uncore/event and their fixes
  - !18808  net/oenetcls: Add mode 2 for rps numa affinity
  - !18864  net/oenetcls: work around l0 cache
  - net/oenetcls: work around l0 cache
  - net: stmmac: Add Phytium GMAC glue layer
  - !18746  mainline patch backport
  - net/oenetcls: Add mode 2 for rps numa affinity
  - KVM: SVM: Enable SEV/SEV-ES functionality by default (when supported)
  - driver/virt/coco: Add HYGON CSV Guest dirver.
  - KVM: x86: Support VM_ATTESTATION hypercall
  - KVM: SVM: Append "_enabled" to module-scoped SEV/SEV-ES control variables
  - KVM: SVM: Move SEV module params/variables to sev.c
  - x86/sev: Drop redundant and potentially misleading 'sev_enabled'
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
  - x86/umip: Check that the instruction opcode is at least two bytes
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper
  - KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
  - KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE
  - KVM: x86/cpuid: generalize kvm_update_kvm_cpuid_base() and also capture limit
  - KVM: x86: Add dedicated helper to get CPUID entry with significant index
  - KVM: x86: Move lookup of indexed CPUID leafs to helper
  - KVM: x86: Check .flags in kvm_cpuid_check_equal() too
  - KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
  - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime()
  - KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES
  - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
  - KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
  - KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
  - KVM: x86: add guest_cpuid_is_intel
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - x86/cpu: Update Intel Family comments
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel/ds: Add PEBS format 6
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86/intel: Correct incorrect 'or' operation for PMU capabilities
  - perf/x86/intel: Fix broken fixed event constraints extension
  - perf/x86/intel: Add common intel_pmu_init_hybrid()
  - perf/x86/intel: Clean up the hybrid CPU type handling code
  - perf/x86/intel: Apply the common initialization code for ADL
  - perf/x86/intel: Factor out the initialization code for ADL e-core
  - perf/x86/intel: Factor out the initialization code for SPR
  - perf/x86/intel: Use the common uarch name for the shared functions
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - Squashfs: check return result of sb_min_blocksize
  - dt-bindings: net: Add bindings for Phytium GMAC
  - RNPVF: NET: Fix core-dump while enable sriov for rnp


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-290.0.0.193
changelog:
  - !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
  - !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
  - !19017 [OLK-5.10] Fix CVE-2025-39757
  - !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - x86/efi: Restore Firmware IDT before calling ExitBootServices()
  - x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  - x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
  - x86/boot/compressed/64: Add 32-bit boot #VC handler
  - x86/boot/compressed/64: Setup IDT in startup_32 boot path
  - x86/boot/compressed/64: Reload CS in startup_32
  - x86/boot/compressed/64: Cleanup exception handling before booting kernel
  - x86/sev-es: Split vc_decode_insn()
  - x86/sev-es: Remove subtraction of res variable
  - !18989  zcopy: A zero-copy data transfer mechanism
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  - !18951  Backport kunpeng920G to OLK-5.10
  - crypto: ccp: Add config to openeuler_defconfig
  - crypto: ccp: add new pci device id for HYGON C86-4G
  - crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
  - crypto: ccp - Don't initialize SEV support without the SEV feature
  - linux: tcm: add Hygon TCM2 driver
  - linux: tpm: add Hygon TPM2 driver
  - crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - crypto: tdm: Add Hygon TDM driver
  - crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - crypto: ccp: Add a new interface for X86 sending command to PSP
  - !18873  mm: introduce memalloc_flags_{save,restore}
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
  - iommu: avoid taking iova_rbtree_lock twice
  - dma-mapping: benchmark: Add support for multi-pages map/unmap
  - iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
  - !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
  - !18878  wakeup kswapd during node_reclaim
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arm64/numa: Make node reclaim distance adjustment always available
  - mm: introduce memalloc_flags_{save,restore}
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - memblock: use numa_valid_node() helper to check for invalid node ID


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-291.0.0.194
changelog:
  - !19062  mm: proc: use per_vma mmap_lock for vma traversal.
  - !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !19102  Fix CVE-2025-40123
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - !19094  zcopy: Remove the dump_pagetable interface
  - zcopy: Remove the dump_pagetable interface
  - !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - mm: proc: use per_vma mmap_lock for vma traversal.
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - usb: dwc3: gadget: check that event count does not exceed event buffer length


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-292.0.0.195
changelog:
  - !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19241  CVE-2025-40168
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
  - net: Add locking to protect skb->dev access in ip_output
  - !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
  - !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18866 [OLK-5.10] Fix CVE-2025-39766
  - !19004 [OLK-5.10]Fix CVE-2025-39751
  - !18816  CVE-2025-22121
  - !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
  - !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - !19169  crypto: essiv - Check ssize for decryption and in-place encryption
  - !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
  - !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
  - !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
  - !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
  - !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
  - !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
  - USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - crypto: zhaoxin - Update Kconfig dependencies and defaults
  - crypto: zhaoxin/padlock-sha - Update CPU matching
  - crypto: zhaoxin/padlock-aes: Update CPU matching
  - crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - EDAC/amd64: Correct the address translation for hygon family 18h model 4h
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - PCI/MSI: Set device flag indicating only 32-bit MSI support
  - configs: enable Zhaoxin I2C driver as module
  - i2c: Driver for Zhaoxin I2C controller
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - Revert "xhci: Adjust the UHCI Controllers bit value"
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - Update cputemp driver with using the same MSR uniformly
  - Add MWAIT Cx support for Zhaoxin CPUs.
  - Turning off Zhaoxin ahci controller runtime pm


author: xinghe <xinghe2@h-partners.com> - 2:1.6.38-3
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


