# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.97.0.121
changelog:
  - !904 [sync] PR-903: backport block bugfix
  - !962 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !959 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - !955 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - !930  xfs: missing lts patchs
  - !935 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - !917 [sync] PR-880: LoongArch: kdump: Add high memory reservation
  - !916 [sync] PR-868: LoongArch: fix compile error caused by __ffs not defined
  - !915 [sync] PR-792: LoongArch: add ls2k500 bmc support
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - xfs: validate inode fork size against fork format
  - xfs: reorder iunlink remove operation in xfs_ifree
  - !912 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - LoongArch: kdump: Add high memory reservation
  - LoongArch: fix __ffs not defined compile error
  - LoongArch: fix ls2k500 bmc not work when installing iso
  - LoongArch: defconfig: enable CONFIG_FB_LS2K500=m.
  - ipmi: add ls2k500 bmc ipmi support.
  - fbdev: add ls2k500sfb driver for ls2k500 bmc.
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !867  arm64: kdump: Avoid reserving low memory repeatedly
  - !854 [sync] PR-793: LoongArch: kvm: add pv ipi support
  - !853 [sync] PR-809: LoongArch: defconfig: enable memory and pci hotplug related configs for LoongArch
  - arm64: kdump: Avoid reserving low memory repeatedly
  - LoongArch: LSVZ: Support PV IPI to reduce VM exit
  - LoongArch: defconfig: Add PCI hotplug support
  - LoongArch: defconfig: Add memory hotplug support


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.98.0.122
changelog:
  - !1103 [sync] PR-1089:  power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - !1108 [sync] PR-1090:  fs/ntfs3: Check fields while reading
  - !1117 [sync] PR-1084: LoongArch: fix wrong 7a1000 int_clear register write
  - !1116 [sync] PR-1083: LoongArch: fix system hang caused by 2k500 bmc driver
  - irqchip/loongson-pch-pic: 7a1000 int_clear reg must use 64bit write.
  - ipmi_si: ls2k500 kcs driver add wait bmc reboot done and rebind support.
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
  - !1008 [sync] PR-941: LoongArch: fix 2k500 sfb driver not work during reboot
  - !1031  nbd: get config_lock before sock_shutdown
  - !1060  Support dynamic_hugetlb on arm64 and fix some bug
  - !1057 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !1034  io_uring: fix the problem of
  - fs: hfsplus: fix UAF issue in hfsplus_put_super
  - !1050 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - scripts: Fix issue of module signing with openssl 3.x
  - !994 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !999 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1010 [sync] PR-924:  dm: add disk before alloc dax
  - !1013 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - !950 [sync] PR-929:  xfs: rework feature flags
  - nbd: get config_lock before sock_shutdown
  - !971 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !986 [sync] PR-954:  block: iocost bugfix
  - !983 [sync] PR-946:  icost bugfix
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown
  - Revert "PCI: Add quirk for LS7A to avoid reboot failure"
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !975 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - !936 [sync] PR-897: LoongArch: improve dma ops and interrupt process
  - !939 [sync] PR-869: LoongArch: defconfig: Enable a large number of configurations
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - LoongArch: defconfig: Enable a large number of configurations
  - LoongArch: Add swiotlb backups buffer
  - LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS
  - pci: irq: Add early_param pci_irq_limit to limit pci irq numbers


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.99.0.123
changelog:
  - !1176 MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1167 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1171  mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - !1163 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !1145 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - !1024 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
  - !1073 [sync] PR-1042:  xfrm: Reinject transport-mode packets through workqueue
  - xfrm: Reinject transport-mode packets through workqueue
  - locking/rwsem: Prevent potential lock starvation
  - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
  - locking/rwsem: Better collate rwsem_read_trylock()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.100.0.124
changelog:
  - !1250  hugetlb: Fix some incorrect behavior
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - !1238 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - relayfs: fix out-of-bounds access in relay_file_read
  - !1209 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1232 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1224 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1198 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - memstick: r592: Fix UAF bug in r592_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.101.0.126
changelog:
  - !1311 Fix CVE-2023-2860
  - !1237 [sync] PR-1194:  fix memleak with efi_fake_mem
  - ipv6: sr: fix out-of-bounds read when setting HMAC data.
  - !1274 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1303 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1299 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1269  arm64: Add AMPERE1 to the Spectre-BHB affected list
  - !1264 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1187 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1202 [sync] PR-1148: LoongArch: cleanup swiotlb bakcup buffer related code
  - arm64: Add AMPERE1 to the Spectre-BHB affected list
  - !1255 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1128 [sync] PR-1077:  drm/qxl: Fix missing free_irq
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - Revert "LoongArch: Add ARCH_HAS_SETUP_DMA_OPS and DMA_OPS"
  - Revert "LoongArch: Add swiotlb backups buffer"
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - drm/qxl: Fix missing free_irq


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.102.0.128
changelog:
  - !1366 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1369 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - !1342 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.103.0.130
changelog:
  - !1289 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1455 [sync] PR-1358:  Remove DECnet support from kernel
  - !1438 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1459 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1462 [sync] PR-1436: Fix CVE-2023-3117
  - !1429  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1419 [sync] PR-1415:  Fix generic/299 fail
  - !1348 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1411 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1388 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1391 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1307 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1328 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1331 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - !1339 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


