# changelog

author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-290.0.0.193
changelog:
  - !19001 [OLK-5.10] Support Trusted computing(TC) feature for hygon CPU
  - !19011 [OLK-5.10] : Backport the upstream SEV-ES 32-bit boot path support and other updates
  - !19017 [OLK-5.10] Fix CVE-2025-39757
  - !18860 KVM: arm64: Deactivate the spurious vtimer interrupt
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - x86/efi: Restore Firmware IDT before calling ExitBootServices()
  - x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  - x86/boot/compressed/64: Add CPUID sanity check to 32-bit boot-path
  - x86/boot/compressed/64: Add 32-bit boot #VC handler
  - x86/boot/compressed/64: Setup IDT in startup_32 boot path
  - x86/boot/compressed/64: Reload CS in startup_32
  - x86/boot/compressed/64: Cleanup exception handling before booting kernel
  - x86/sev-es: Split vc_decode_insn()
  - x86/sev-es: Remove subtraction of res variable
  - !18989  zcopy: A zero-copy data transfer mechanism
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  - !18951  Backport kunpeng920G to OLK-5.10
  - crypto: ccp: Add config to openeuler_defconfig
  - crypto: ccp: add new pci device id for HYGON C86-4G
  - crypto: ccp: Remove the dependency of the psp_do_cmd() interface on SEV devices
  - crypto: ccp - Don't initialize SEV support without the SEV feature
  - linux: tcm: add Hygon TCM2 driver
  - linux: tpm: add Hygon TPM2 driver
  - crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM
  - crypto: tdm: Add Hygon TDM driver
  - crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86
  - crypto: ccp: Add a new interface for X86 sending command to PSP
  - !18873  mm: introduce memalloc_flags_{save,restore}
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - iommu/iova: Put free_iova_mem() outside of spinlock iova_rbtree_lock
  - iommu: avoid taking iova_rbtree_lock twice
  - dma-mapping: benchmark: Add support for multi-pages map/unmap
  - iommu/arm-smmu-v3: Add a check to avoid invalid iotlb sync
  - !18890  ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - !18883  slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - !18392 Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D for 5.10
  - !18878  wakeup kswapd during node_reclaim
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arm64/numa: Make node reclaim distance adjustment always available
  - mm: introduce memalloc_flags_{save,restore}
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - memblock tests: fix implicit declaration of function 'numa_valid_node'
  - memblock: use numa_valid_node() helper to check for invalid node ID


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-291.0.0.194
changelog:
  - !19062  mm: proc: use per_vma mmap_lock for vma traversal.
  - !19002  usb: dwc3: gadget: check that event count does not exceed event buffer length
  - !19102  Fix CVE-2025-40123
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - !19094  zcopy: Remove the dump_pagetable interface
  - zcopy: Remove the dump_pagetable interface
  - !19042  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - mm: proc: use per_vma mmap_lock for vma traversal.
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - usb: dwc3: gadget: check that event count does not exceed event buffer length


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-292.0.0.195
changelog:
  - !19225  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19241  CVE-2025-40168
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
  - net: Add locking to protect skb->dev access in ip_output
  - !19036 [OLK-5.10] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18986 [OLK-5.10] USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - !18985 [OLK-5.10] USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - !18982 [OLK-5.10] crypto: zhaoxin - Update Kconfig dependencies and defaults
  - !19059 [OLK-5.10] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18866 [OLK-5.10] Fix CVE-2025-39766
  - !19004 [OLK-5.10]Fix CVE-2025-39751
  - !18816  CVE-2025-22121
  - !8955 [OLK-5.10] Revert "xhci: Adjust the UHCI Controllers bit value"
  - !9152 [OLK-5.10] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !15328 [OLK-5.10] PCI/MSI: Set device flag indicating only 32-bit MSI support
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !13848 [OLK-5.10] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !19040 [OLK-5.10] KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - !19169  crypto: essiv - Check ssize for decryption and in-place encryption
  - !9110 [OLK-5.10] Update cputemp driver with using the same MSR uniformly
  - !8973 [OLK-5.10] Driver for Zhaoxin I2C controller
  - !8972 [OLK-5.10] x86/acpi/cstate: Add MWAIT Cx support for Zhaoxin CPUs
  - !8971 [OLK-5.10] Turning off Zhaoxin ahci controller runtime pm
  - !9134 [OLK-5.10] hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - !19164  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - !18720 [Hygon][5.10][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - !18586 [Hygon][5.10][Bugfix] Bug fix for EDAC address translation on hygon family 18h model 4h
  - !19029 openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - KVM: x86: allow CPUID 0xC000_0000 to proceed on Zhaoxin CPUs
  - openeuler_defconfig: enable CONFIG_PAGE_CACHE_LIMIT for x86/arm64
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
  - USB: hcd-pci: Avoid modifying UHCI driver_data when bound to non-native drivers
  - crypto: zhaoxin - Update Kconfig dependencies and defaults
  - crypto: zhaoxin/padlock-sha - Update CPU matching
  - crypto: zhaoxin/padlock-aes: Update CPU matching
  - crypto: zhaoxin-aes: Rename paes_last_cword to zx_paes_last_cword
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - EDAC/amd64: Correct the address translation for hygon family 18h model 4h
  - ext4: Restore the deleted check paths of the xattr.
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - ext4: introduce ITAIL helper
  - PCI/MSI: Set device flag indicating only 32-bit MSI support
  - configs: enable Zhaoxin I2C driver as module
  - i2c: Driver for Zhaoxin I2C controller
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - Revert "xhci: Adjust the UHCI Controllers bit value"
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - hwrng: add Zhaoxin rng driver base on rep_xstore instruction
  - Update cputemp driver with using the same MSR uniformly
  - Add MWAIT Cx support for Zhaoxin CPUs.
  - Turning off Zhaoxin ahci controller runtime pm


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-293.0.0.196
changelog:
  - !19413  Fix CVE-2025-39994
  - !19432  Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
  - !19395  soc: qcom: socinfo: Avoid out of bounds read of serial number
  - !19396  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
  - !19394  usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19380 [OLK-5.10] Fix CVE-2025-22107
  - !19387 [OLK-5.10] Fix CVE-2025-21945
  - !19375 [OLK-5.10] Fix CVE-2025-37899
  - Revert "PCI/MSI: Set device flag indicating only 32-bit MSI support"
  - !19408  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19407  CVE-2025-37786
  - !19406  sctp: Fix MAC comparison to be constant-time
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - !19370 drivers:misc:sdma-dae: add channel depth info in debugfs
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - net: dsa: free routing table on probe failure
  - net: dsa: rename teardown_default_cpu to teardown_cpu_ports
  - sctp: Fix MAC comparison to be constant-time
  - !19379  mmc: core: use sysfs_emit() instead of sprintf()
  - !19221  NFSv4: Fix deadlock during the running of state manager
  - !19369  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19255  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19246  dmaengine: ti: k3-udma: Add missing locking
  - !19217  sbitmap: fix infinite loop caused by negative wait_cnt
  - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19363  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - ksmbd: fix use-after-free in smb2_lock
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - mmc: core: use sysfs_emit() instead of sprintf()
  - !19008 [OLK-5.10] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ksmbd: fix use-after-free in session logoff
  - !18836  CVE-2025-37997
  - drivers:misc:sdma-dae: add channel depth info in debugfs
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19351 fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
  - fuse: fix compile warning when CONFIG_FUSE_FASTPATH=y
  - !19345  sched: Fix race between yield_to() and try_to_wake_up()
  - !19340  mm: proc: fix compile warning when CONFIG_NUMA=n
  - !19347  Fixes of page cache limit
  - mm: Replace deferrable timer with delay timer for shrink worker
  - mm: Add page cache limit check before queueing shrink worker
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !19333  bpf: Sync pending IRQ work before freeing ring buffer
  - !19335  drm/omap: fix misleading indentation in pixinc()
  - mm: proc: fix compile warning when CONFIG_NUMA=n
  - drm/omap: fix misleading indentation in pixinc()
  - bpf: Sync pending IRQ work before freeing ring buffer
  - !19304  Add Support for Disabling Hugetlb in soft_offline_page
  - !19309  Fix CVE-2025-40200
  - !19084 [OLK-5.10] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - !9148 [OLK-5.10] x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - !18967 [OLK-5.10] force use dma api when AMD SEV is actived
  - !18818 [OLK-5.10]:update patches for sw64 architecture
  - !19307  net: Netdev use RCU protection
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - !19186  Squashfs: fix uninit-value in squashfs_get_parent
  - !19232  drm/vmwgfx: Fix Use-after-free in validation
  - !19259  scsi: ufs: core: Fix handling of lrbp->cmd
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - ipv4: use RCU protection in __ip_rt_update_pmtu()
  - net: dst: add four helpers to annotate data-races around dst->dev
  - !19299  pid: Add a judgment for ns null in pid_nr_ns
  - !19295  scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
  - !19210  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19283  fix cves
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19296  sched: Fix incorrect cluster mask
  - sched: Fix incorrect cluster mask
  - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm/hugetlb: unshare page tables during VMA split, not before
  - hugetlb: unshare some PMDs when splitting VMAs
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - media: davinci: vpif: Fix memory leak in probe error path
  - media: davinci: vpif: fix use-after-free on driver unbind
  - scsi: ufs: core: Fix handling of lrbp->cmd
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - dmaengine: ti: k3-udma: Add missing locking
  - drm/vmwgfx: Fix Use-after-free in validation
  - NFSv4: Fix deadlock during the running of state manager
  - ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states
  - Revert "ata: Add support for disabling PhyRdy Change Interrupt based on actual LPM capability"
  - Revert "ata: Add support for PxSCT.LPM set based on actual LPM capability"
  - sbitmap: fix infinite loop caused by negative wait_cnt
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Squashfs: fix uninit-value in squashfs_get_parent
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - virtio_ring: force use dma api when AMD SEV is actived
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - sw64: paravirt: add pv steal time support in guest side
  - sw64: kvm: add pv steal time support
  - sw64: use ioremap to map IO address in functions like __get_cpu_nums()
  - sw64: move non-boot core's kernel page table enabling logic to hmcode
  - sw64: define run_mode_host_key as false
  - sw64: add memclear template and ____memclr_simd()
  - sw64: optimize simd version of copy/clear_page()
  - sw64: disallow users modifying PS in pt_regs
  - sw64: enable kernel page table
  - sw64: use ioremap to map IO address
  - sw64: map legacy I/O to K segment
  - sw64: setup early_ioremap
  - sw64: reset ATC for kvm
  - sw64: setup mapping for efi_mm
  - sw64: set protection for kernel page table
  - sw64: modify codes with fixmap
  - sw64: map the early and the final page table
  - sw64: add fixmap support
  - sw64: control CSR_INT_EN directly in host kernel
  - sw64: pci: remove redundant debug control
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-294.0.0.197
changelog:
  - !19384 [OLK-5.10] Fix CVE-2025-22039
  - !19543 [OLK-5.10] Fix CVE-2025-21968
  - !19534 [OLK-5.10] Fix CVE-2024-57911
  - !19606 [OLK-5.10] Fix CVE-2023-53466
  - drm/amd/display: Fix slab-use-after-free on hdcp_work
  - !19542 [OLK-5.10] Fix CVE-2022-49196
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
  - !19583  CVE-2023-53491 v3
  - !19578  net/oenetcls: Prioritize oenetcls hooks over rps
  - !19575  Bugfix for three issues
  - !19574  Bluetooth: hci_event: call disconnect callback before deleting conn
  - !19573  Bluetooth: Fix hci_suspend_sync crash
  - !19572  net/smc: fix UAF on smcsk after smc_listen_out()
  - !19571  i40e: remove read access to debugfs files
  - !19570  ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - !19569  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19567  vsock: Do not allow binding to VMADDR_PORT_ANY
  - !19566  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19565  ipv6: reject malicious packets in ipv6_gso_segment()
  - start_kernel: use unreachable too fix __noreturn build warning
  - start_kernel: Add __no_stack_protector function attribute
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix invalid paging request while attach transhugepage to same addr
  - Bluetooth: hci_event: call disconnect callback before deleting conn
  - Bluetooth: Fix hci_suspend_sync crash
  - net/smc: fix UAF on smcsk after smc_listen_out()
  - i40e: remove read access to debugfs files
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - vsock: Do not allow binding to VMADDR_PORT_ANY
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: reject malicious packets in ipv6_gso_segment()
  - !19522  vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !19523  KVM: arm64: Prevent access to vCPU events before init
  - powerpc/pseries: Fix use after free in remove_phb_dynamic()
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
  - !19349 net:don't dump stack on queue timeout
  - KVM: arm64: Prevent access to vCPU events before init
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  - !19450  ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - !19449  ksmbd: fix Preauh_HashValue race condition
  - !19498  mainline patch backport
  - timers: Fix NULL function pointer race in timer_shutdown_sync()
  - arm64: mte: Do not flag the zero page as PG_mte_tagged
  - net: don't dump stack on queue timeout
  - !19461  arm64: kdump: Skip kmemleak scan reserved memory for kdump
  - arm64: kdump: Skip kmemleak scan reserved memory for kdump
  - !19315 [OLK-5.10] Fix CVE-2024-57907
  - !19308 [OLK-5.10] Fix CVE-2025-21905
  - !18648 [OLK-5.10] Fix CVE-2025-38729
  - !19003 [OLK-5.10]Fix CVE-2025-38706
  - !19445  memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ksmbd: fix Preauh_HashValue race condition
  - !19443  CVE-2025-22022
  - memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
  - !19436 RDMA/hns: Fix a memory issue in roce bonding
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19418  iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - !19428  Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - !19427  netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - !19426  RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - !19425  net: openvswitch: fix nested key length validation in the set() action
  - !19424  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - !19431  memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - !19420  vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - !19419  media: venus: hfi: add check to handle incorrect queue size
  - RDMA/hns: Fix a memory issue in roce bonding
  - RDMA/hns: Fix memory issues in roce reserve PD/CQ
  - RDMA/core: Reduce cond_resched() frequency in __ib_umem_release
  - RDMA/core: Prevent soft lockup during large user memory region cleanup
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
  - net: openvswitch: fix nested key length validation in the set() action
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - media: venus: hfi: add check to handle incorrect queue size
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer
  - wifi: iwlwifi: limit printed string from FW file
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-295.0.0.198
changelog:
  - !19075 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV{-ES} - part1
  - KVM: x86: Always set kvm_run->if_flag
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages()
  - KVM: SEV: WARN if SEV-ES is marked active but SEV is not
  - KVM: SEV-ES: Set guest_state_protected after VMSA update
  - !19046 [OLK-5.10] Backport the patch that allows guest access to the EFI confidential computing secret area
  - !19681  iommu/arm-smmu-v3-sva: Fix mm use-after-free
  - iommu/arm-smmu-v3-sva: Fix mm use-after-free
  - !18979 [OLK-5.10] ata: zhaoxin: update for rename symbols
  - !19065 [OLK-5.10] Add platform-specific quirks for ZX-200 device
  - !19664  Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
  - !19540  vfs: Don't leak disconnected dentries on umount
  - !19539  fs/proc: fix uaf in proc_readdir_de()
  - !19538  fs: Prevent file descriptor table allocations exceeding INT_MAX
  - !19537  Fix CVE-2025-40190
  - Bluetooth: MGMT: Fix deadlock in mgmt_pending_lock
  - !19651  CVE-2023-53254
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug
  - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
  - !19645  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - !19399  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - efi: Add CONFIG_EFI_COCO_SECRET to openeuler_defconfig
  - efi: Fix kabi breakage of efi
  - docs: security: Add secrets/coco documentation
  - efi: Register efi_secret platform device if EFI secret area is declared
  - virt: Add efi_secret module to expose confidential computing secrets
  - efi: Save location of EFI confidential computing area
  - vfs: Don't leak disconnected dentries on umount
  - fs/proc: fix uaf in proc_readdir_de()
  - fs: Prevent file descriptor table allocations exceeding INT_MAX
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: nested locking for xattr inode
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - KVM: SEV: Acquire vcpu mutex when updating VMSA
  - x86/insn-eval: Make 0 a valid RIP for insn_get_effective_ip()
  - KVM: SVM: Free sev_asid_bitmap during init if SEV setup fails
  - KVM: SVM: Do not set sev->es_active until KVM_SEV_ES_INIT completes
  - KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs
  - x86/sev-es: Optimize __sev_es_ist_enter() for better readability
  - KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  - ata: zhaoxin: update for rename symbols
  - Add platform-specific quirks for ZX-200 device


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-296.0.0.199
changelog:
  - !19740 merge refs/pull/19740/head into OLK-5.10
  - !19764 merge patch-1766387978 into OLK-5.10
  - hisi: l3t: enable l3t with specific cpuid
  - !19705 [OLK-5.10]:update patches for sw64 architecture
  - !19090 [OLK-5.10] Backport upstream bugfix or cleanup patches for SEV/dma-direct
  - !19372  padata: Fix pd UAF once and for all
  - !19022 [OLK-5.10] Backport the upstream patches for fixes and cleanups to SEV-ES string I/O emulation
  - !19016 [Hygon] [OLK-5.10] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
  - net: atlantic: fix fragment overflow handling in RX path
  - !19736  locking/rwsem: Optimize down_read_trylock() under highly contended case
  - locking/rwsem: Optimize down_read_trylock() under highly contended case
  - !19724  mm/mem_reliable: use percise count during limit check
  - mm/mem_reliable: use percise count during limit check
  - !19715 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
  - !19614  NFSD: Fix crash in nfsd4_read_release()
  - !19140 [OLK-5.10] Add ccp-mdev feature into hygon ccp driver
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  - !19673  firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - sw64: set PTBR_SYS before accessing vmalloc area
  - sw64: set execute permission for virtual machine's hmcode text section
  - sw64: fix simd version of copy/clear_page()
  - sw64: fix random mmap base range
  - firewire: net: fix use after free in fwnet_finish_incoming_packet()
  - NFSD: Fix crash in nfsd4_read_release()
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - padata: Fix pd UAF once and for all
  - KVM: SVM: Don't apply SEV+SMAP workaround on code fetch or PT access
  - KVM: SVM: Inject #UD on attempted emulation for SEV guest w/o insn buffer
  - KVM: SVM: WARN if KVM attempts emulation on #UD or #GP for SEV guests
  - KVM: x86: Pass emulation type to can_emulate_instruction()
  - KVM: SVM: Explicitly require DECODEASSISTS to enable SEV support
  - KVM: SVM: Don't intercept #GP for SEV guests
  - swiotlb: do not zero buffer in set_memory_decrypted()
  - crypto: ccp - Add SEV_INIT rc error logging on init
  - dma-direct: always leak memory that can't be re-encrypted
  - dma-direct: factor out dma_set_{de,en}crypted helpers
  - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
  - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
  - KVM: SEV-ES: fix another issue with string I/O VMGEXITs
  - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
  - KVM: SEV-ES: keep INS functions together
  - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
  - KVM: x86: split the two parts of emulator_pio_in
  - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
  - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
  - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
  - KVM: SEV-ES: fix length of string I/O
  - x86/sev-es: Do not unroll string I/O for SEV-ES guests
  - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-297.0.0.200
changelog:
  - !19833 merge patch-1766715015 into OLK-5.10
  - !19911 merge patch-1767492639 into OLK-5.10
  - !19635 merge refs/pull/19635/head into OLK-5.10
  - !19903 merge patch-1767161454 into OLK-5.10
  - !19864 merge patch-1766990471 into OLK-5.10
  - !19865 merge patch-1766990523 into OLK-5.10
  - mm: mem_reliable: prevent excessive direct reclaim loops
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
  - !19899 merge patch-1767098709 into OLK-5.10
  - erofs: validate the extent length for uncompressed pclusters
  - !19885 merge patch-1767076771 into OLK-5.10
  - !19876 merge patch-1767011340 into OLK-5.10
  - scsi: qla2xxx: Clear cmds after chip reset
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  - !19856 merge patch-1766976937 into OLK-5.10
  - !19857 merge patch-1766976979 into OLK-5.10
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  - RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
  - virtio-net: ensure the received length does not exceed allocated size
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
  - tracing: Fix memory leaks in create_field_var()
  - !19760 merge patch-1766370959 into OLK-5.10
  - !19786 merge patch-1766474397 into OLK-5.10
  - !19548 merge refs/pull/19548/head into OLK-5.10
  - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  - !19739 merge refs/pull/19739/head into OLK-5.10
  - !19732 merge refs/pull/19732/head into OLK-5.10
  - !19719 merge refs/pull/19719/head into OLK-5.10
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - x86/fpu: Ensure XFD state on signal delivery
  - drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()
  - usb: storage: Fix memory leak in USB bulk transport
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
  - cpufreq: ACPI: Fix max-frequency computation
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick TDX, Zen, APIC MSR fence changes
  - tools headers: Update tools's copy of x86/asm headers
  - tools headers cpufeatures: Sync with the kernel sources
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-298.0.0.201
changelog:
  - !19798 merge OLK-5.10 into OLK-5.10
  - !19972 merge patch-1767691219 into OLK-5.10
  - !19974 merge patch-1767691279 into OLK-5.10
  - !19973 merge patch-1767691254 into OLK-5.10
  - !19713 merge refs/pull/19713/head into OLK-5.10
  - !19832 merge OLK-5.10-ringbuffer into OLK-5.10
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
  - KVM: SVM: Skip SEV cache flush if no ASIDs have been used
  - KVM: SVM: Fix sev_pin_memory() error checks in SEV migration utilities
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages
  - mm: x86: Fix kabi breakage of pv_ops
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  - KVM: x86: Assume a 64-bit hypercall for guests with protected state
  - KVM: SVM: Remove an unnecessary prototype declaration of sev_flush_asids()
  - KVM: SVM: Fix SEV SEND_START session length & SEND_UPDATE_DATA query length after commit 238eca821cee
  - crypto: ccp: Fix definition of struct sev_data_send_update_vmsa
  - x86/kvm: Add kexec support for SEV Live Migration.
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature.
  - EFI: Introduce the new AMD Memory Encryption GUID.
  - mm: x86: Invoke hypercall when page encryption status is changed
  - x86/kvm: Add AMD SEV specific Hypercall3
  - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
  - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
  - KVM: SVM: fix missing sev_decommission in sev_receive_start
  - KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet header fails
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall
  - KVM: SVM: Add KVM_SEV_RECEIVE_FINISH command
  - KVM: SVM: Add KVM_SEV_RECEIVE_UPDATE_DATA command
  - KVM: SVM: Add support for KVM_SEV_RECEIVE_START command
  - KVM: SVM: Add support for KVM_SEV_SEND_CANCEL command
  - KVM: SVM: Add KVM_SEV_SEND_FINISH command
  - KVM: SVM: Add KVM_SEND_UPDATE_DATA command
  - KVM: SVM: Add KVM_SEV SEND_START command
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()


author: Tengda Wu <wutengda2@huawei.com> - 5.10.0-299.0.0.202
changelog:
  - !19047 [OLK-5.10] Fix CVE-2025-39839
  - !18614 [OLK-5.10] Fix CVE-2025-39737
  - !18654 [OLK-5.10] Fix CVE-2025-38705
  - !18782 【OLK-5.10】fix CVE-2025-38712
  - !18612 [OLK-5.10] Fix CVE-2025-38713
  - !18635 [OLK-5.10] Fix CVE-2025-38714
  - !18862 [OLK-5.10] Fix CVE-2025-38697
  - !20058  CVE-2025-38111
  - !20131  wifi: cfg80211: fix use-after-free in cmp_bss()
  - !20306  mm/kmemleak: move up cond_resched() call in page scanning loop
  - !20309 hwmon: constify pointers to hwmon_channel_info
  - hwmon: fix kabi of struct hwmon_channel_info
  - !20338  mlxsw: spectrum_router: Fix neighbour use-after-free
  - !20337  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - hwmon: constify pointers to hwmon_channel_info
  - mlxsw: spectrum_router: Fix neighbour use-after-free
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
  - !20316  um: virtio_uml: Fix use-after-free after put_device in probe
  - !20114  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - !19918 [OLK-5.10] Backport patches ACPI thermal for kunpeng soc
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - !20300  software node: Correct a OOB check in software_node_get_reference_args()
  - !20299  jfs: add sanity check for agwidth in dbMount
  - !20278  iavf: fix off-by-one issues in iavf_config_rss_reg()
  - !20277  e1000: fix OOB in e1000_tbi_should_accept()
  - !20285  hwmon: (ibmpex) fix use-after-free in high/low store
  - mm/kmemleak: move up cond_resched() call in page scanning loop
  - !19953 【OLK-5.10】 power_meter patchs from 6.6
  - software node: Correct a OOB check in software_node_get_reference_args()
  - jfs: add sanity check for agwidth in dbMount
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - !20269  drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !20271  KVM: x86: use array_index_nospec with indices that come from guest
  - !19788  ima: Handle error code returned by ima_filter_rule_match()
  - iavf: fix off-by-one issues in iavf_config_rss_reg()
  - e1000: fix OOB in e1000_tbi_should_accept()
  - !19038 [OLK-5.10] x86/microcode: Add Zhaoxin cpu microcode update driver
  - !20203  drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - !20202  scsi: qla2xxx: Fix premature hw access after PCI error
  - !19728  scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - !20236 RDMA/hns: Support config and query the CNP DSCP for HIP09
  - KVM: x86: use array_index_nospec with indices that come from guest
  - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
  - !19035 [OLK-5.10] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - RDMA/hns: Support config and query the CNP DSCP for HIP09
  - !20221 Revert "RDMA/hns: Fix mismatch exception rollback"
  - !20195  ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20068 [OLK-5.10] Merge continuous pages into a large range when notifying range enc status changes
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - RDMA/hns: Support drain SQ and RQ
  - RDMA/hns: Return actual error code instead of fixed EINVAL
  - RDMA/hns: Notify ULP of remaining soft-WCs during reset
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning
  - RDMA/hns: Fix RoCEv1 failure due to DSCP
  - !20161  cifs: fix session state check in reconnect to avoid use-after-free issue
  - !20050  smb: client: Fix use-after-free in cifs_fill_dirent
  - !19834 v2  md/raid0, raid10: Don't set discard sectors for request queue
  - !19816  scsi: sg: Do not sleep in atomic context
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - scsi: qla2xxx: Fix premature hw access after PCI error
  - ACPI: APEI: Handle repeated SEA error interrupts storm
  - !20150  tracing: Do not register unsupported perf events
  - !20163  tracing: Fix enabling of tracing on file release
  - !19938 net: hns3: add VLAN id validation before using
  - !19836 [OLK-5.10] Fixes for SEV-ES Guest Support
  - !20044 【openEuler-22.03-LTS-SP4】Memory copy error
  - !19803 [OLK-5.10] Backport the SEV{-ES} bugfix patches from upstream - part2
  - !20025 [OLK-5.10]Support SMT control on arm64.
  - !19922  NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - !19985  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - !19996  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - !19908 drivers:misc:sdma-dae: add NULL judgement of global variables
  - !20026  fs/buffer: fix use-after-free when call bh_read() helper
  - !19962  i40e: add max boundary check for VF filters
  - !20103  kmemleak: Fix kmemleak false warnings
  - !20169  HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - !20052  CVE-2024-21823
  - !18962  erofs: Fix erofs_bmap error
  - !20016  kernfs: Fix UAF issue
  - !19694  ARM: fix hash_name() issue
  - !20048  VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - !20065  Fix CVE-2022-50737
  - !20066  smb: client: fix race with concurrent opens in rename(2)
  - !20151 v2  Fix CVE-2025-40016
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register
  - hwmon: Fix the missing of 'average' word in hwmon_power_attr_templates
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  - ACPI: IPMI: Add helper to wait for when SMI is selected
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices().
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure
  - hwmon: (acpi_power_meter) Fix uninitialized variables
  - !20047  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method
  - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul
  - hwmon: (acpi_power_meter) Fix style issues
  - hwmon: (acpi_power_meter) Use acpi_bus_get_acpi_device()
  - hwmon: acpi_power_meter: Get rid of ACPICA message printing
  - ACPI: utils: Introduce acpi_evaluation_failure_warn()
  - ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE
  - hwmon: (acpi_power_meter) clean up freeing code
  - x86/sev: merge continuous pages into a large range when notifying range enc status changes
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  - tracing: Fix enabling of tracing on file release
  - cifs: fix session state check in reconnect to avoid use-after-free issue
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - media: uvcvideo: Allow extra entities
  - tracing: Do not register unsupported perf events
  - wifi: cfg80211: fix use-after-free in cmp_bss()
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
  - arm64: kdump: fix kmemleak unknown object warning when crash base is set
  - arm64: kdump: fix kmemleak unknown object warning
  - x86/sev: Use "SEV: " prefix for messages from sev.c
  - x86/sev: Propagate #GP if getting linear instruction address failed
  - smb: client: fix race with concurrent opens in rename(2)
  - fs/ntfs3: Add null pointer checks
  - fs/ntfs3: Validate buffer length while parsing index
  - fs/ntfs3: Validate index root when initialize NTFS security
  - net/mdiobus: Fix potential out-of-bounds read/write access
  - net: mdio: C22 is now optional, EOPNOTSUPP if not provided
  - dmaengine: idxd: Fix ->poll() return value
  - dmaengine: idxd: Fix allowing write() from different address spaces
  - dmaengine: idxd: Fix passing freed memory in idxd_cdev_open()
  - dmaengine: idxd: add idxd_copy_cr() to copy user completion record during page fault handling
  - dmaengine: idxd: add per DSA wq workqueue for processing cr faults
  - dmaengine: idxd: add a write() method for applications to submit work
  - dmaengine: idxd: add a new security check to deal with a hardware erratum
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - tools headers: Update the copy of x86's mem{cpy,set}_64.S used in 'perf bench'
  - x86: don't use REP_GOOD or ERMS for small memory clearing
  - x86: don't use REP_GOOD or ERMS for small memory copies
  - fs/buffer: fix use-after-free when call bh_read() helper
  - powerpc/kexec: Enable SMT before waking offline CPUs
  - cpu/SMT: Enable SMT only if a core is online
  - cpu/SMT: Create topology_smt_thread_allowed()
  - powerpc/topology: Check if a core is online
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - cpu/SMT: Provide a default topology_is_primary_thread()
  - powerpc: Add HOTPLUG_SMT support
  - Revert "arm64: Kconfig: Enable HOTPLUG_SMT"
  - kernfs: Fix kabi broken in struct kernfs_root
  - kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
  - kernfs: fix potential NULL dereference in __kernfs_remove
  - kernfs: fix NULL dereferencing in kernfs_remove
  - kernfs: remove redundant kernfs_rwsem declaration.
  - kernfs: prevent early freeing of root node
  - kernfs: switch global kernfs_rwsem lock to per-fs lock
  - KVM: SVM: Make sure GHCB is mapped before updating
  - KVM: SVM: check CR4 changes against vcpu->arch
  - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests
  - x86/insn: Extend error reporting from insn_fetch_from_user[_inatomic]()
  - x86/sev: Fix error message in runtime #VC handler
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
  - i40e: add max boundary check for VF filters
  - net: hns3: add VLAN id validation before using
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - ACPI: thermal: Move to dedicated function sysfs extra attr creation
  - ACPI: thermal: Use thermal_zone_device()
  - thermal: core: Encapsulate tz->device field
  - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL
  - drivers:misc:sdma-dae: add NULL judgement of global variables
  - md/raid0, raid10: Don't set discard sectors for request queue
  - scsi: sg: Do not sleep in atomic context
  - ima: Handle error code returned by ima_filter_rule_match()
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  - ARM: fix hash_name() fault
  - ARM: allow __do_kernel_fault() to report execution of memory faults
  - configs: enable CONFIG_MICROCODE_ZHAOXIN
  - x86/microcode: Add Zhaoxin cpu microcode update driver
  - drm/amd/pm: fix null pointer access
  - batman-adv: fix OOB read/write in network-coding decode
  - PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - erofs: Fix erofs_bmap error
  - jfs: upper bound check of tree index in dbAllocAG
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()


