# changelog

author: eastb233 <xiezhiheng@huawei.com> - 2.41-1
changelog:
  - Update binutils 2.41
  - Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils/-/tree/c10s
  - Retire: binutils-CVE-2023-1972.patch
  - Retire: binutils-objcopy-note-merge-speedup.patch
  - Retire: binutils-reloc-symtab.patch


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 2.41-3
changelog:
  - LoongArch: sync patch from binutils upstream
  - LoongArch: Modify inconsistent behavior of ld with --unresolved-symbols=ignore-all


author: fuanan <fuanan3@h-partners.com> - 0.189-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Remove unnecessary patch because this patch is contained in elfutils-0.189.tar


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: wangkai <13474090681@163.com> - 128.3.0-1
changelog:
  - Update to 128.3.0
  - Fix CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 CVE-2024-9396
    CVE-2024-9397 CVE-2024-9398 CVE-2024-9399 CVE-2024-9400 CVE-2024-9401
    CVE-2024-9402


author: wangkai <13474090681@163.com> - 128.4.0-1
changelog:
  - Update to 128.4.0
  - Fix CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462
    CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467


author: wangkai <13474090681@163.com> - 128.5.0-1
changelog:
  - Update to 128.5.0
  - Fix CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696
    CVE-2024-11697 CVE-2024-11699


author: wangkai <13474090681@163.com> - 128.6.0-1
changelog:
  - Update to 128.6.0
  - Fix CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241
    CVE-2025-0242 CVE-2025-0243


author: wangkai <13474090681@163.com> - 128.7.0-1
changelog:
  - Update to 128.7.0
  - Fix CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013
    CVE-2025-1014 CVE-2025-1016 CVE-2025-1017


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-61.0.0.60
changelog:
  - !13340 cpufreq: Add SEEP governor for hardware-managed P-states
  - ACPI: CPPC: fix bug that causes the value written in cpc register to be wrong.
  - cpufreq: Add SEEP governor for hardware-managed P-states
  - cpufreq: CPPC: Support for auto act window and energy perf in cppc_cpufreq
  - ACPI: CPPC: Add New ABIs for reading and writing three new CPPC registers
  - !14004  Support haltpoll feature
  - arm64: add config for cpuidle-haltpoll
  - arm64/delay: remove USECS_TO_CYCLES to avoid conflict
  - cpuidle: edit cpuidle-haltpoll driver module parameter
  - arm64: support WFET in smp_cond_relaxed_timeout()
  - arm64/delay: add some constants to a separate header
  - arm64: support cpuidle-haltpoll
  - arm64: idle: export arch_cpu_idle
  - cpuidle-haltpoll: condition on ARCH_CPUIDLE_HALTPOLL
  - governors/haltpoll: drop kvm_para_available() check
  - cpuidle-haltpoll: define arch_haltpoll_want()
  - ACPI: processor_idle: Support polling state for LPI
  - arm64: add support for polling in idle
  - arm64: define TIF_POLLING_NRFLAG
  - arm64: barrier: add support for smp_cond_relaxed_timeout()
  - Kconfig: move ARCH_HAS_OPTIMIZED_POLL to arch/Kconfig
  - cpuidle: rename ARCH_HAS_CPU_RELAX to ARCH_HAS_OPTIMIZED_POLL
  - cpuidle/poll_state: poll via smp_cond_load_relaxed_timeout()
  - asm-generic: add barrier smp_cond_load_relaxed_timeout()
  - !13402 【OLK-6.6】Support SMMU vSVA feature
  - arm-smmu-v3: remove limitation of S2FWB or CANWBS
  - iommufd: enable SVA when IOPF enabled
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
  - iommufd: modify iommufd_fault_iopf_enable limitation
  - Enable configs for vSVA tests
  - iommu/arm-smmu-v3: Implement arm_smmu_get_msi_mapping_domain
  - iommu: Fix kabi breakage due to "iommu/dma: Support MSIs through nested domains"
  - iommu/dma: Support MSIs through nested domains
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS
  - ACPI/IORT: Support CANWBS memory access flag
  - ACPICA: IORT: Update for revision E.f
  - iommu: Fix kabi breakage due to "vfio: Remove VFIO_TYPE1_NESTING_IOMMU"
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU
  - Documentation: userspace-api: iommufd: Update vDEVICE
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command
  - iommufd/selftest: Add mock_viommu_cache_invalidate
  - iommufd/viommu: Add iommufd_viommu_find_dev helper
  - iommu: Add iommu_copy_struct_from_full_user_array helper
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl
  - Documentation: userspace-api: iommufd: Update vIOMMU
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST
  - iommufd/selftest: Add refcount to mock_iommu_device
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested()
  - iommufd/selftest: Add container_of helpers
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl
  - iommufd: Verify object in iommufd_object_finalize/abort()
  - iommu: Fix kabi breakage due to "iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct"
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct
  - iommufd: Move _iommufd_object_alloc helper to a sharable file
  - iommufd: Move struct iommufd_object to public iommufd header
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED
  - iommu/arm-smmu-v3: add missing MODULE_DESCRIPTION() macro
  - iommu/arm-smmu-v3: Convert comma to semicolon
  - iommu/arm-smmu-v3: Fix last_sid_idx calculation for sid_bits==32
  - iommu: Move IOMMU_DIRTY_NO_CLEAR define
  - iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check
  - iommu/arm-smmu-v3: Remove the unused empty definition
  - iommu/arm-smmu-v3: Avoid uninitialized asid in case of error
  - iommu: Make iommu_sva_domain_alloc() static
  - iommu: Handle iommu faults for a bad iopf setup
  - iommufd: Put constants for all the uAPI enums
  - iommu/arm-smmu-v3: Use *-y instead of *-objs in Makefile
  - iommu/arm-smmu-v3: Make the kunit into a module
  - iommu/amd: Introduce get_amd_iommu_from_dev()
  - iommufd/device: Enforce reserved IOVA also when attached to hwpt_nested
  - iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace()
  - iommufd: Reorder struct forward declarations
  - iommufd: Reorder include files
  - iommu/arm-smmu-v3: Reorganize struct arm_smmu_ctx_desc_cfg
  - iommu/arm-smmu-v3: Add types for each level of the CD table
  - iommu/arm-smmu-v3: Shrink the cdtab l1_desc array
  - iommu/arm-smmu-v3: Do not use devm for the cd table allocations
  - iommu/arm-smmu-v3: Remove strtab_base/cfg
  - iommu/arm-smmu-v3: Reorganize struct arm_smmu_strtab_cfg
  - iommu/arm-smmu-v3: Add types for each level of the 2 level stream table
  - iommu/arm-smmu-v3: Add arm_smmu_strtab_l1/2_idx()
  - iommu/arm-smmu-v3: Use the new rb tree helpers
  - iommu/arm-smmu-v3: Shrink the strtab l1_desc array
  - iommu/arm-smmu-v3: Do not zero the strtab twice
  - iommufd: Fix error pointer checking
  - iommufd: Add check on user response code
  - iommufd: Remove IOMMUFD_PAGE_RESP_FAILURE
  - iommufd/selftest: Add coverage for IOPF test
  - iommufd/selftest: Add IOPF support for mock device
  - iommufd: Associate fault object with iommufd_hw_pgtable
  - iommufd: Fault-capable hwpt attach/detach/replace
  - iommu: Fix kabi breakage due to "iommufd: Add iommufd fault object"
  - iommufd: Add iommufd fault object
  - iommufd: Add fault and response message definitions
  - iommu: Extend domain attach group with handle support
  - iommu: Fix kabi breakage due to "iommu: Add attach handle to struct iopf_group"
  - iommu: Add attach handle to struct iopf_group
  - iommu: Fix kabi breakage due to "iommu: Remove sva handle list"
  - iommu: Remove sva handle list
  - iommu: Introduce domain attachment handle
  - iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping
  - iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc
  - iommu/io-pgtable-arm: Add read_and_clear_dirty() support
  - iommu/arm-smmu-v3: Add feature detection for HTTU
  - iommu/arm-smmu-v3: Add support for domain_alloc_user fn
  - iommu/arm-smmu-v3: Allow setting a S1 domain to a PASID
  - iommu/arm-smmu-v3: Allow a PASID to be set when RID is IDENTITY/BLOCKED
  - iommu/arm-smmu-v3: Test the STE S1DSS functionality
  - iommu/arm-smmu-v3: Allow IDENTITY/BLOCKED to be set while PASID is used
  - iommu/arm-smmu-v3: Put the SVA mmu notifier in the smmu_domain
  - iommu/arm-smmu-v3: Keep track of arm_smmu_master_domain for SVA
  - iommu/arm-smmu-v3: Make SVA allocate a normal arm_smmu_domain
  - iommu/arm-smmu-v3: Thread SSID through the arm_smmu_attach_*() interface
  - iommu/arm-smmu-v3: Do not use master->sva_enable to restrict attaches
  - iommu/arm-smmu-v3: Add ssid to struct arm_smmu_master_domain
  - iommu/arm-smmu-v3: Make changing domains be hitless for ATS
  - iommu/arm-smmu-v3: Make smmu_domain->devices into an allocated list
  - iommu/arm-smmu-v3: Start building a generic PASID layer
  - iommu/arm-smmu-v3: Convert to domain_alloc_sva()
  - iommu/arm-smmu-v3: Add unit tests for arm_smmu_write_entry
  - iommu/arm-smmu-v3: Build the whole CD in arm_smmu_make_s1_cd()
  - iommu/arm-smmu-v3: Move the CD generation for SVA into a function
  - iommu/arm-smmu-v3: Allocate the CD table entry in advance
  - iommu/arm-smmu-v3: Make arm_smmu_alloc_cd_ptr()
  - iommu/arm-smmu-v3: Consolidate clearing a CD table entry
  - iommu/arm-smmu-v3: Move the CD generation for S1 domains into a function
  - iommu/arm-smmu-v3: Make CD programming use arm_smmu_write_entry()
  - iommu/arm-smmu-v3: Add an ops indirection to the STE code
  - iommu: Fix kabi breakage due to "iommu: Add ops->domain_alloc_sva()"
  - iommu: Add ops->domain_alloc_sva()
  - iommu/arm-smmu-v3: Add a type for the CD entry
  - iommu/arm-smmu-v3: Do not ATC invalidate the entire domain
  - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
  - iommu/arm-smmu-v3: Retire disable_bypass parameter
  - iommu: Validate the PASID in iommu_attach_device_pasid()
  - iommu/arm-smmu-v3: Add cpu_to_le64() around STRTAB_STE_0_V
  - iommu: Fix kabi breakage due to "iommu: Pass domain to remove_dev_pasid() op"
  - iommu: Pass domain to remove_dev_pasid() op
  - iommu: Undo pasid attachment only for the devices that have succeeded
  - iommu: Introduce iommu_group_mutex_assert()
  - iommu/arm-smmu-v3: Fix access for STE.SHCFG
  - iommu/arm-smmu-v3: Convert to domain_alloc_paging()
  - iommu/arm-smmu-v3: Pass arm_smmu_domain and arm_smmu_device to finalize
  - iommu/arm-smmu-v3: Use the identity/blocked domain during release
  - iommu/arm-smmu-v3: Add a global static BLOCKED domain
  - iommu/arm-smmu-v3: Add a global static IDENTITY domain
  - iommu/arm-smmu-v3: Check that the RID domain is S1 in SVA
  - iommu/arm-smmu-v3: Remove arm_smmu_master->domain
  - iommu/arm-smmu-v3: Pass smmu_domain to arm_enable/disable_ats()
  - iommu/arm-smmu-v3: Put writing the context descriptor in the right order
  - iommu/arm-smmu-v3: Do not change the STE twice during arm_smmu_attach_dev()
  - iommu/arm-smmu-v3: Compute the STE only once for each master
  - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev
  - iommu/arm-smmu-v3: Build the whole STE in arm_smmu_make_s2_domain_ste()
  - iommu/arm-smmu-v3: Move the STE generation for S1 and S2 domains into functions
  - iommu/arm-smmu-v3: Consolidate the STE generation for abort/bypass
  - iommu/arm-smmu-v3: Make STE programming independent of the callers
  - !14019  afs: Fix lock recursion
  - afs: Fix lock recursion
  - !13230  xfs: Fix fsmap error
  - xfs: Fix missing interval for missing_owner in xfs fsmap
  - xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
  - !13977  xfs: split xfs_mod_freecounter
  - xfs: split xfs_mod_freecounter
  - !14005 v2  Optimize functions like get_user and put_user
  - openeuler_defconfig: remove GCC_ASM_GOTO_OUTPUT_WORKAROUND for x86 and arm64
  - arm64: uaccess: correct thinko in __get_mem_asm()
  - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND
  - arm64: start using 'asm goto' for put_user()
  - arm64: start using 'asm goto' for get_user() when available
  - !14031  Various memory tiering fixes
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled.
  - memory tiering: introduce folio_use_access_time() check
  - memory tiering: read last_cpupid correctly in do_huge_pmd_numa_page()
  - !14025  ext4: show the default enabled prefetch_block_bitmaps option
  - ext4: show the default enabled prefetch_block_bitmaps option
  - !13906 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Conflicts Patches
  - btrfs: update comment for struct btrfs_inode::lock
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
  - xen: allow mapping ACPI data using a different physical address
  - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
  - !9158 [OLK-6.6] ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - config: enable Zhaoxin AHCI SGPIO driver
  - ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - !9162 [OLK-6.6] efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - !14022 [OLK-6.6] perf/x86/zhaoxin/uncore: fix pci_driver conflict issue
  - perf/x86/zhaoxin/uncore: fix pci_driver conflict issue
  - !13965  arm64: entry: Fix some warnings when enable nohz full CPU
  - arm64: entry: Fix some warnings when enable nohz full CPU
  - !13926  genirq/proc: Fix warning of no previous prototype for register_irqchip_proc()
  - genirq/proc: Fix warning of no previous prototype for register_irqchip_proc()
  - !13993  50164
  - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
  - bpf: Fix kabi breakage in enum bpf_type_flag and bpf_arg_type
  - bpf: Fix overloading of MEM_UNINIT's meaning
  - bpf: Add MEM_WRITE attribute
  - !13951  Fix UAF in __update_blocked_fair
  - Fix UAF in __update_blocked_fair
  - !13950  Fix SCHED_WARN_ON(cfs_rq->throttled_clock) in throttle_cfs_rq
  - Fix SCHED_WARN_ON(cfs_rq->throttled_clock) in throttle_cfs_rq
  - !13949  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !13912  media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
  - !13961  ext4: avoid remount errors with 'abort' mount option
  - ext4: avoid remount errors with 'abort' mount option
  - !13974  arm64: optimize tlb flush
  - arm64: optimize flush tlb kernel range
  - arm64: tlbflush: add __flush_tlb_range_limit_excess()
  - arm64: tlb: Allow range operation for MAX_TLBI_RANGE_PAGES
  - arm64: tlbflush: Rename MAX_TLBI_OPS
  - !13969  libbpf: Fix output .symtab byte-order during linking
  - libbpf: Fix output .symtab byte-order during linking
  - !13955  drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range
  - drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range
  - !13913  fix CVE-2024-49861
  - bpf: Fix kabi breakage in enum bpf_type_flag and bpf_arg_type
  - bpf: Fix helper writes to read-only maps
  - !13317  reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
  - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
  - !12279 [OLK-6.6]HYGON: CSV3 patch series part 2 (Support launch, run, migrate CSV3 guest)
  - x86/mm: Print CSV3 info into kernel log
  - x86: Add support for changing the memory attribute for CSV3 guest
  - x86: Update memory shared/private attribute in early boot for CSV3 guest
  - x86/kernel: Set bss decrypted memory as shared in CSV3 guest
  - x86/kernel: Add CSV3 early update(enc/dec)/reset memory helpers
  - x86/boot/compressed/64: Add CSV3 update page attr(private/shared)
  - x86/boot/compressed/64: Init CSV3 secure call pages
  - x86/boot/compressed/64: Add CSV3 guest detection
  - KVM: SVM: CSV: Add ioctl API to unpin shared pages of CSV3 guest
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_RECEIVE_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_CONTEXT command
  - KVM: SVM: CSV: Add KVM_CSV3_SEND_ENCRYPT_DATA command
  - crypto: ccp: Define CSV3 migration command id
  - KVM: SVM: CSV: Manage CSV3 guest's nested page table
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_VMCB command
  - KVM: SVM: CSV: Add KVM_CSV3_LAUNCH_ENCRYPT_DATA command
  - KVM: SVM: CSV: Add KVM_CSV3_INIT command
  - KVM: Define CSV3 key management command id
  - !13843 Add support for FEAT_HAFT
  - openeuler_defconfig: Add configuration to enable FEAT_HAFT
  - arm64: pgtable: Warn unexpected pmdp_test_and_clear_young()
  - arm64: Enable ARCH_HAS_NONLEAF_PMD_YOUNG
  - arm64: Add support for FEAT_HAFT
  - arm64: setup: name 'tcr2' register
  - arm64/sysreg: Update ID_AA64MMFR1_EL1 register
  - !13889  ipmi: Use regspacings passed as a module parameter
  - ipmi: Use regspacings passed as a module parameter
  - !13454 [OLK-6.6][Backport] tracing/selftests: Update kprobe args char/string to match new functions
  - tracing/selftests: Update kprobe args char/string to match new functions
  - !13453 [OLK-6.6][Backport] selftest: net: Fix the problem that run veth.sh failed
  - selftests: net: veth: test the ability to independently manipulate GRO and XDP
  - selftests: net: veth: test syncing GRO and XDP state while device is down
  - !13450 [OLK-6.6][Backport] tools/nolibc: add support for constructors and destructors
  - tools/nolibc: add support for constructors and destructors
  - !13815 [OLK-6.6][Backport] selftests/intel_pstate: fix operand expected error
  - selftests/intel_pstate: fix operand expected error
  - !13417 [OLK-6.6][Backport] selftest: net/af_unix: Fix the problem that run test_unix_oob failed
  - selftest: af_unix: Fix kselftest compilation warnings
  - selftest: af_unix: Add msg_oob.c.
  - selftest: af_unix: Remove test_unix_oob.c.
  - selftest: af_unix: Add Kconfig file.
  - !13806 [OLK-6.6][Backport] selftests/watchdog-test: Fix system accidentally reset after watchdog-test
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test
  - !13897  drm/amd/display: Check link_index before accessing dc->links[
  - drm/amd/display: Check link_index before accessing dc->links[]
  - !13901  RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - !13904  NFSD: Never decrement pending_async_copies on error
  - NFSD: Never decrement pending_async_copies on error
  - !13888  CVE-2024-49891
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
  - !13894 v2  block: support hierarchy stats
  - blk-io-hierarchy: support hierarchy stats for bio lifetime
  - blk-io-hierarchy: support new rq based stage rq_driver
  - blk-io-hierarchy: support new rq based stage requeue
  - blk-io-hierarchy: support new rq based stage hctx
  - blk-io-hierarchy: support new rq based stage kyber
  - blk-io-hierarchy: support new rq based stage bfq
  - blk-io-hierarchy: support new rq based stage mq-deadline
  - blk-io-hierarchy: support new rq based stage plug
  - blk-io-hierarchy: support new bio based stage gettag
  - blk-io-hierarchy: support new bio based stage iocost
  - blk-io-hierarchy: support new bio based stage wbt
  - block-io-hierarchy: core hierarchy stats and iodump implementation
  - block: support to record when request is completed
  - block: support to recored bio allocation task in request
  - block: support to recored bio allocation time in request
  - block: support to recored bio allocation task
  - block: support to recored bio allocation time
  - block: fix kabi broken after caching ns time in blk_plug
  - block: fix that blk_time_get_ns() doesn't update time after schedule
  - block: limit block time caching to in_task() context
  - block: update cached timestamp post schedule/preemption
  - block: cache current nsec time in struct blk_plug
  - block: add blk_time_get_ns() and blk_time_get() helpers
  - block: move cgroup time handling code into blk.h
  - block: skip QUEUE_FLAG_STATS and rq-qos for passthrough io
  - blk-io-hierarchy: support hierarchy stats for blk-throttle
  - !13851 intel: backport intel_pstate driver update from 6.11
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
  - cpufreq: intel_pstate: Support highest performance change interrupt
  - cpufreq: intel_pstate: Replace boot_cpu_has()
  - x86/cpufeatures: Add HWP highest perf change feature flag
  - cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
  - cpufreq: intel_pstate: Fix unchecked HWP MSR access
  - cpufreq: intel_pstate: fix struct cpudata::epp_cached kernel-doc
  - cpufreq: intel_pstate: hide unused intel_pstate_cpu_oob_ids[]
  - cpufreq: intel_pstate: Update the maximum CPU frequency consistently
  - cpufreq: intel_pstate: Replace three global.turbo_disabled checks
  - cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
  - cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
  - cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
  - cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
  - cpufreq: intel_pstate: Use __ro_after_init for three variables
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete
  - cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
  - cpufreq: intel_pstate: Allow model specific EPPs
  - cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
  - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP
  - !13850 intel: backport TPMI uncore frequency driver update from 6.10
  - platform/x86/intel-uncore-freq: Use generic helpers for current frequency
  - platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
  - platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
  - platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
  - platform/x86/intel-uncore-freq: Get rid of magic min_max argument
  - platform/x86/intel-uncore-freq: Get rid of magic values
  - platform/x86/intel-uncore-freq: Re-arrange bit masks
  - platform/x86/intel-uncore-freq: Increase minor number support
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status
  - platform/x86/intel-uncore-freq: Ignore minor version change
  - !13849 intel: backport Intel SST TPMI update from 6.10
  - platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
  - platform/x86: ISST: Fix return value on last invalid resource
  - platform/x86: ISST: Use only TPMI interface when present
  - platform/x86: ISST: Avoid some SkyLake server models
  - platform/x86: ISST: Add model specific loading for common module
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
  - platform/x86: ISST: Support SST-BF and SST-TF per level
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION
  - platform/x86: ISST: Add dev_fmt
  - platform/x86: ISST: Use in_range() to check package ID validity
  - platform/x86: ISST: Support partitioned systems
  - platform/x86: ISST: Shorten the assignments for power_domain_info
  - platform/x86: ISST: Use local variable for auxdev->dev
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems
  - platform/x86: ISST: Process read/write blocked feature status
  - platform/x86: ISST: Ignore minor version change
  - platform/x86: intel_speed_select_if: Use devm_ioremap_resource
  - platform/x86: intel_speed_select_if: Remove hardcoded map size
  - platform/x86: ISST: Allow level 0 to be not present
  - platform/x86: ISST: Use fuse enabled mask instead of allowed levels
  - !13847 intel: backport tpmi base driver and pmt update from 6.10 to 6.6
  - platform/x86/intel/pmt: telemetry: Export API to read telemetry
  - platform/x86/intel/pmt: Add header to struct intel_pmt_entry
  - platform/x86/intel/tpmi: Add additional TPMI header fields
  - platform/x86/intel/tpmi: Align comments in kernel-doc
  - platform/x86/intel/tpmi: Check major version change for TPMI Information
  - platform/x86/intel/tpmi: Move TPMI ID definition
  - platform/x86/intel/tpmi: Modify external interface to get read/write state
  - platform/x86/intel/tpmi: Don't create devices for disabled features
  - platform/x86/intel/tpmi: Add debugfs support for read/write blocked
  - platform/x86/intel/vsec: Remove nuisance message
  - platform/x86/intel/vsec: Add base address field
  - platform/x86/intel/vsec: Add intel_vsec_register
  - platform/x86/intel/vsec: Assign auxdev parent by argument
  - platform/x86/intel/vsec: Use cleanup.h
  - platform/x86/intel/vsec: remove platform_info from vsec device structure
  - platform/x86/intel/vsec: Move structures to header
  - platform/x86/intel/vsec: Remove unnecessary return
  - !13880  Fix problems of mounting nfs
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - !13822 v4  arm64: Add xcall/xint support
  - arm64: Add debugfs dir for xint
  - arm64: Introduce Xint software solution
  - arm64: Faster SVC exception handler with xcall
  - arm64: Introduce xcall a faster svc exception handling
  - !13828  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - !13805  add ebpf sched
  - sched/ebpf: Support task selection programmable
  - sched: Add kfunc to get cpu statistics
  - bpftool: recognize scheduler programs
  - libbpf: add support for scheduler bpf programs
  - !13373 acc some patch rounds
  - crypto: hisilicon/qm - disable same error report before resetting
  - crypto: hisilicon - support querying the capability register
  - crypto: hisilicon/qm - fix the coding specifications issue
  - crypto: hisilicon/hpre - enable all clusters clock gating
  - crypto: hisilicon/sec - Remove trailing space after 
  - crypto: hisilicon/qm - inject error before stopping queue
  - crypto: hisilicon/hpre - mask cluster timeout error
  - crypto: hisilicon/qm - reset device before enabling it
  - crypto: hisilicon/trng - modifying the order of header files
  - crypto: hisilicon - add a lock for the qp send operation
  - crypto: hisilicon - fix missed error branch
  - crypto: hisilicon/zip - Optimize performance by replacing rw_lock with spinlock
  - crypto: hisilicon/zip - optimize the address offset of the reg query function
  - crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable
  - crypto: hisilicon/sec2 - fix for register offset
  - crypto: hisilicon/debugfs - mask the unnecessary info from the dump
  - Revert "crypto: hisilicon/qm - reset device before enabling it"
  - Revert "crypto: hisilicon/qm - inject error before stopping queue"
  - Revert "crypto: hisilicon/qm - modify interrupt processing resource application"
  - Revert "crypto: hisilicon/qm - mask error bit before flr"
  - Revert "crypto: hisilicon/qm - disable same error report before resetting"
  - Revert "crypto: hisilicon/hpre - mask cluster timeout error"
  - Revert "crypto: hisilicon/zip - optimize the address offset of the reg query function"
  - Revert "crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable"
  - Revert "crypto: hisilicon/trng - use %u to print u32 variables"

   newline


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-64.0.0.61
changelog:
  - !14106 uacce: some bugfix and cleanup
  - migration: modify dfx error type without VM driver
  - crypto: hisilicon_qm - fix the uacce_alloc return value check
  - crypto: hisilicon_zip - correct the wrong word in the printed information
  - uacce: add mutex for check qfr
  - uacce: add stop_queue to replace put_queue in ioctl
  - uacce: check the qfr address before releasing the qfr
  - uacce: add error number for the unsupported mremap
  - !14117  mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - mm: fix kabi breakage due to struct per_cpu_pages
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories
  - !14120  bpf: sync_linked_regs() must preserve subreg_def
  - bpf: sync_linked_regs() must preserve subreg_def
  - !14128  sched: Optimize the latency of select_task_rq and pick_next_task.
  - sched: Optimize the latency of select_task_rq and pick_next_task.
  - !13991  virtio-fs: introduce multi-queue support
  - virtio-fs: add multi-queue support
  - virtio-fs: limit number of request queues
  - virtiofs: include a newline in sysfs tag
  - virtiofs: emit uevents on filesystem events
  - virtiofs: export filesystem tags through sysfs
  - !14126 [OLK-6.6]perf:Add PMCG platform information for HiSilicon HIP09A
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
  - Revert "perf: Add PMCG platform information for HiSilicon HIP09A"
  - !14103  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  - !13841 Fix livepatch selftest
  - selftests/livepatch: fix selftest execution error
  - !14069 MPTCP Upstream part 23
  - tcp: socket option to check for MPTCP fallback to TCP
  - mptcp: fix typos in comments
  - !13970  LoongArch: fix AVEC related issue
  - drivers/irqchip: Disable pci_irq_limit when using AVEC interrupt controller
  - irqchip/avec: Support AVEC for 3C6000 multi-node machine
  - !13981  LoongArch: backport ptw&set_pte patches from upstream
  - LoongArch: Set initial pte entry with PAGE_GLOBAL for kernel space
  - LoongArch: Improve hardware page table walker
  - LoongArch: Use accessors to page table entries instead of direct dereference
  - LoongArch: Remove superfluous flush_dcache_page() definition
  - !14107 ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
  - !14101 [sync] PR-14087: v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
  - !14095 ima: Fix violation digests extending issue in virtcca
  - ima: Fix violation digests extending issue in virtcca
  - !14079 v3  irqchip: gic: some bugfix of hip10
  - irqchip/gic-v4.1:Check whether indirect table is supported in allocate_vpe_l1_table
  - KVM: arm64: vgic-v3: Fix a issue of hip10 erratum 162200806
  - irqchip/gic-v3: Exclude GICv4.1 for hip10 erratum 162200803
  - !14085  ocfs2: uncache inode which has failed entering the group
  - ocfs2: uncache inode which has failed entering the group
  - !13837 update patches for sw64 architecture
  - sw64: wrap frequency workaround into standalone functions
  - sw64: remove redudant save_ktp
  - sw64: fix compile warning of smp_callin()
  - sw64: distribute intx interrupts by hose
  - sw64: acpi: remove constraint that cid of boot core must be zero
  - sw64: pci: get register base address from firmware
  - sw64: fix compile warning of do_entUna()
  - sw64: fix save_ktp compatibility for C3
  - sw64: fix PTBR save/restore for hibernation
  - sw64: add syscall pfh_ops
  - sw64: fix broken rdfpcr()
  - sw64: force kernel stack to be 16 bytes aligned
  - sw64: match platform device by acpi method
  - sw64: spi: update spi controller driver
  - sw64: add -fno-sw-unalign-byte to cflags for C4
  - sw64: define cpu_relax() as imb()
  - sw64: fix the .endm in hibernate_asm.S
  - sw64: fix compile error of efi.systab
  - sw64: pci: adjust the maximum number of RC per node
  - sw64: get mclk and external clk from firmware
  - sw64: fix compile error of MMSIZE
  - sw64: acpi: disable ACPI for xuelang
  - sw64: ahci: disable parallel bus scan
  - sw64: redesign run mode setup method
  - sw64: rename static key and related simd libraries
  - sw64: fix secondary cpu bring up bug
  - sw64: irq: fix compile error when PINTC or LPC-INTC is not set
  - sw64: improve the verification logic of DTB
  - sw64: apply new boot params from DTB chosen node
  - sw64: receive new boot params from firmware
  - sw64: setup stackframe at kernel entry point
  - sw64: save and restore CSR_WR_FREGS for SIMD libs
  - sw64: rename copy and set lib functions
  - sw64: rename copy and set lib files
  - sw64: choose lib at compile time
  - sw64: store topology and numa info by each cpu itself
  - sw64: work around suspend for C4
  - sw64: employ trick on regs.pc for specific exception
  - sw64: enable CONFIG_FRAME_POINTER by default for junzhang
  - sw64: fix syscall_fallback() for vdso gettimeofday
  - sw64: dts: add Junzhang
  - sw64: lpc: work around hardware flaws
  - sw64: improve cpu bring up method
  - sw64: introduce new entry framework for C4
  - sw64: irq: update the initial value of nr_irqs
  - sw64: dynamically switch between lib implementation
  - sw64: msi: remove redundant interrupt enables
  - sw64: add unaligned access support for C4 new instructions
  - sw64: acpi: fix missed upper bits of rcid for junzhang
  - sw64: pci: remove duplicate pcie operations
  - sw64: irq: remove unnecessary initialization
  - sw64: acpi: enable generic GSI
  - sw64: irqchip: support ACPI-based interrupt controller initialization
  - sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
  - sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
  - sw64: fix compilation warning
  - sw64: fix kconfig selections
  - sw64: use a new wrap_asid hmcall when asid wraps
  - sw64: rewrite fpcr and swcr conversion
  - sw64: enable hardware denorm by default
  - sw64: add four-socket system support
  - sw64: add a new kernel parameter to override mclk
  - sw64: improve sw64_printk()
  - sw64: msi: fix bugs in multi-msi interrupts allocation and release
  - sw64: pci: change pci transaction ordering rule settings
  - sw64: irqchip: fix virtual PINTC not working properly
  - sw64: dts: improve properties for PINTC
  - sw64: dts: improve properties for LPC-INTC
  - sw64: dts: fix interrupt related properties for GPIO
  - sw64: dts: add chosen node
  - sw64: dts: fix properties for spi controller device node
  - sw64: acpi: fix coding style and typos
  - sw64: fix rd_f compatibility issue for C4
  - sw64: refactor device interrupt domain
  - sw64: fix macro definition compilation error
  - USB: xHCI: fix resume issue of some ZHAOXIN hosts
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - sw64: pci: fix compile error when CONFIG_ACPI=n
  - sw64: smp: suppress function setup_smp() when ACPI enabled
  - sw64: acpi: parse SW CINTC for SMP initialization
  - sw64: acpi: support MADT entry print for SW CINTC
  - sw64: acpi: add ACPI-style structures for SW CINTC
  - sw64: smp: add new structure to record rcid information
  - sw64: smp: modify function smp_rcb_init() to receive base address
  - sw64: pci: synchronize the OEM table ID of MCFG with BIOS
  - sw64: iommu: fix the bug when vfio_iommu unpin pages
  - sw64: use rvpcr() to setup run mode
  - sw64: kgdb: add single-step debug support
  - sw64: fix lockdep error
  - sw64: perf: do all event checks in sw64_pmu_event_init()
  - sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
  - sw64: pci: export some pci functions
  - sw64: uapi: fix a compile error for headers_install
  - sw64: perf: hide hardware performance events in guest os
  - sw64: fix hugepage support
  - sw64: extern vdso_start and vdso_end as char[]
  - sw64: remove useless current_policy
  - sw64: add arch-specific SYM_END definition
  - !13151 [OLK-6.6] arm64: errata: Unify and expand speculative SSBS workaround
  - openeuler_defconfig: Enable CONFIG_ARM64_ERRATUM_3194386 by default
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
  - arm64: errata: Expand speculative SSBS workaround once more
  - arm64: errata: Expand speculative SSBS workaround (again)
  - arm64: errata: Expand speculative SSBS workaround
  - arm64: errata: Unify speculative SSBS errata logic
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417
  - !14091  mm, slab: put should_failslab() back behind CONFIG_SHOULD_FAILSLAB
  - mm, page_alloc: put should_fail_alloc_page() back behing CONFIG_FAIL_PAGE_ALLOC
  - mm, slab: put should_failslab() back behind CONFIG_SHOULD_FAILSLAB
  - !14015 【openEuler 24.03 LTS SP1】SCSI: LeapIO RAID: Support leapioraid RAID controllers
  - SCSI: LEAPIORAID: Supports LEAPIO RAID controller
  - !14072 Revert "Revert "net: libwx: fix alloc msix vectors failed""
  - Revert "Revert "net: libwx: fix alloc msix vectors failed""
  - !14094  block, bfq: fix bfqq uaf in bfq_limit_depth()
  - block, bfq: fix bfqq uaf in bfq_limit_depth()
  - !14065  vp_vdpa: fix id_table array not null terminated error
  - vp_vdpa: fix id_table array not null terminated error
  - !13809 scsi: hisi_sas: Some fixes for hisi_sas
  - scsi: sd: Retry START STOP UNIT commands
  - scsi: core: Allow passthrough to request midlayer retries
  - scsi: hisi_sas: Add latest_dump for the debugfs dump
  - scsi: hisi_sas: Create all dump files during debugfs initialization
  - scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
  - scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - scsi: hisi_sas: Default enable interrupt coalescing
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model
  - scsi: hisi_sas: Reset PHY again if phyup timeout
  - scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
  - scsi: hisi_sas: Add firmware information check
  - scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
  - scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
  - scsi: libsas: Set port when ex_phy is added or deleted
  - scsi: libsas: Move sas_add_parent_port() to sas_expander.c
  - scsi: libsas: Add helper for port add ex_phy
  - !14059  cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  - Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
  - !14026  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  - !14056 virtcca feature : security rectification
  - virtcca feature : security rectification
  - !14012  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - !14011  drm/amd/display: Check phantom_stream before it is used
  - drm/amd/display: Check phantom_stream before it is used
  - !14013  maple_tree: correct tree corruption on spanning store
  - maple_tree: correct tree corruption on spanning store


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-64.0.0.62
changelog:
  - riscv kernel patch upgrade to 6.6.0-64.0.0
  - Enable device mapper related configs for RISC-V to fix ISO image booting issue
  - Add more th1520 drivers support:
    npu-ax3386, vdec, venc, aic8800, g2d, efuse, etnaviv, tdm, spdif, aw87519,
    hwspinlock, perf vendor events, iopmp.
  - Fixed some compilation errors reported by clang
  - Some bugfix commits


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-72.0.0.63
changelog:
  - !14213 v2  bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - bpf: Add kabi reserve padding for uapi struct bpf_link_info
  - !14225  kabi OLK-6.6 reverve space
  - kabi: reserve space for uprobes.h
  - kabi: reserve space for internal.h
  - kabi: reserve space for perf_event.h
  - !14259 【OLK-6.6】 Hygon  family 18h model 6h~fh L3 PMU config incorrect issue fix
  - perf/x86/uncore: Correct the L3 PMU config for Hygon processors
  - !14251  kabi reserver space for i2c
  - kabi reserver space for i2c
  - !14258 v2  scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - !14221  KABI for cgroup
  - cgroup: add more reserve kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Move rcu_head up near the top of cgroup_root
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - !14220  fs: Allow fine-grained control of folio sizes
  - fs: Allow fine-grained control of folio sizes
  - !12108  include/msi: modify kabi size of msi_desc
  - include/msi: modify kabi size of msi_desc
  - !14195 [OLK-6.6]Hygon: Enable CONFIG_CMA by default on X86 architecture
  - x86/Kconfig: Select CONFIG_CMA if CONFIG_HYGON_CSV=y
  - x86/config: Enable CONFIG_CMA by default in openeuler_defconfig
  - !14215  iommu: Reserve extra KABI entry for struct iopf_group
  - iommu: Reserve extra KABI entry for struct iopf_group
  - !14223 v2  kabi: net: reserve space for xdp subsystem related structure
  - kabi: net: reserve space for xdp subsystem related structure
  - !14224  net/kabi: Reserve space for net structures
  - net/kabi: Reserve space for net structures
  - !14236 v2  statx: kabi: KABI reservation for kstat
  - statx: kabi: KABI reservation for kstat
  - !14218  seq_file: kabi: KABI reservation for seq_file
  - seq_file: kabi: KABI reservation for seq_file
  - !14203  tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
  - !14191  nfs: fix the loss of superblock's initialized flags
  - nfs: fix the loss of superblock's initialized flags
  - !14161  drm/rockchip: vop: Fix a dereferenced before check warning
  - drm/rockchip: vop: Fix a dereferenced before check warning
  - !14143 KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - KVM:arm64:Add a kvm parameter to control guest wfi trapping
  - !14177 v2  kabi: restrict the KABI fix to a specific architecture and dist
  - kabi: enable KABI_COMPAT series by default on x86_64 & ARM64
  - kabi: restrict the KABI fix to a specific architecture and dist
  - !14151  CVE-2024-53142
  - initramfs: avoid filename buffer overrun
  - !14183  mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - mm/dynamic_pool: use __GENKSYMS__ to revert the kabi change
  - !13999 add iommu support for loongarch
  - LoongArch: add iommu support
  - LoongArch: Fix cpu hotplug issue
  - !13998 Synchronization with patch for loongarch virtualization
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: KVM: Remove unnecessary CSR register saving during enter guest
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall()
  - LoongArch: KVM: Add vcpu mapping from physical cpuid
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS
  - LoongArch: KVM: Add cpucfg area for kvm hypervisor
  - LoongArch: KVM: Add KVM hypercalls documentation for LoongArch
  - LoongArch: KVM: Implement function kvm_para_has_feature()
  - LoongArch: KVM: Enable paravirt feature control from VMM
  - LoongArch: KVM: Add PMU support for guest
  - LoongArch: KVM: Add vm migration support for LBT registers
  - LoongArch: KVM: Add Binary Translation extension support
  - LoongArch: KVM: Add VM feature detection function
  - LoongArch: Revert qspinlock to test-and-set simple lock on VM
  - LoongArch: KVM: Invalidate guest steal time address on vCPU reset
  - KVM: Discard zero mask with function kvm_dirty_ring_reset
  - perf kvm: Add kvm-stat for loongarch64
  - LoongArch: KVM: Add PV steal time support in guest side
  - LoongArch: KVM: Add PV steal time support in host side
  - LoongArch: KVM: always make pte young in page map's fast path
  - LoongArch: KVM: Mark page accessed and dirty with page ref added
  - LoongArch: KVM: Add dirty bitmap initially all set support
  - LoongArch: KVM: Add memory barrier before update pmd entry
  - LoongArch: KVM: Discard dirty page tracking on readonly memslot
  - LoongArch: KVM: Select huge page only if secondary mmu supports it
  - LoongArch: KVM: Delay secondary mmu tlb flush until guest entry
  - LoongArch: KVM: Sync pending interrupt when getting ESTAT from user mode
  - LoongArch: KVM: Add mmio trace events support
  - LoongArch: KVM: Add software breakpoint support
  - LoongArch: KVM: Add PV IPI support on guest side
  - LoongArch: KVM: Add PV IPI support on host side
  - !14163  LeapIOraid： Remove Unnecessary header file references: version.h
  - LeapIOraid： Remove Unnecessary header file references: version.h
  - !13997 Add interrupt controller emulation in the kernel
  - LoongArch: KVM: Add irqfd support
  - LoongArch: KVM: Add PCHPIC user mode read and write functions
  - LoongArch: KVM: Add PCHPIC read and write functions
  - LoongArch: KVM: Add PCHPIC device support
  - LoongArch: KVM: Add EXTIOI user mode read and write functions
  - LoongArch: KVM: Add EXTIOI read and write functions
  - LoongArch: KVM: Add EXTIOI device support
  - LoongArch: KVM: Add IPI user mode read and write function
  - LoongArch: KVM: Add IPI read and write function
  - LoongArch: KVM: Add IPI device support
  - LoongArch: KVM: Add iocsr and mmio bus simulation in kernel
  - !14111  LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - LeapIOraid： Fix the compilation warnings in LeapIOraid driver in loongarch64
  - !14162  LeapIOraid： Fix too many invalid interruptes in arm64
  - LeapIOraid： Fix too many invalid interruptes in arm64
  - !11509 [OLK-6.6] Enhanced Hygon processor's processing capabilities for large memory copying
  - mm: Enhanced copy capabilities for Hygon processor
  - !14155  drm/amd/display: Adjust VSDB parser for replay feature
  - drm/amd/display: Adjust VSDB parser for replay feature
  - !14144 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: fix compile errors
  - sw64: work around gcc bugs with 'asm goto' with output
  - libbpf: add sw64 support
  - sw64: rename mmap protection_map
  - sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
  - sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
  - sw64 bpf: add BPF_NOSPEC jit
  - sw64: rename _PFN_BITS to __PFN_BITS
  - sw64: update defconfig
  - sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
  - sw64: implementing VDSO with generic code
  - sw64: irqchip: fix irq_enable/disable callback for MCU controller
  - sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
  - sw64: acpi: support reset and S5
  - sw64: kvm: use vma_lookup() instead of find_vma_intersection()
  - sw64: refactor reset routines with new API
  - sw64: kvm: remove unused kvm_arch_flush_remote_tlbs_memslot()
  - sw64: kvm: optimize the calling and implementation of functions in mmu.c
  - sw64: irqchip: remove fallback after kzalloc_node()
  - sw64: irqchip: improve intx implementation
  - sw64: pci: remove function fix_jm585_reset()
  - sw64: fix mmap protection_map
  - sw64: show CPU feature UNA in /proc/cpuinfo
  - sw64: fix the error of cpufreq update
  - sw64: fix compilation issues on match.c
  - sw64: mm: fix PFN of PMDs for 512M hugepage
  - sw64: kvm: fix an error when unmapping 512M hugepages
  - sw64: modify sys_pfh_ops
  - sw64: fix set_huge_pte_at for C4
  - sw64: add the missed clear_flush()
  - sw64: fix compilation issues
  - sw64: add arch_hugetlb_valid_size for C4
  - sw64: kvm: adjust interrupt priority for guest
  - sw64: compatible with suspend implementation
  - sw64: add junzhang_v1/2/3_key
  - sw64: fix numa setup when acpi is disabled
  - sw64: fix setup_mem_size()
  - sw64: fix the register bug in do_entUna
  - sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
  - sw64: select different MUX to read cpu frequency
  - sw64: lpc: fix ast2400 driver error for C4
  - sw64: improve lib performance for new archs
  - sw64: remove unnecessary parameter passing
  - sw64: add __vdso_getcpu support
  - sw64: kexec: fix kernel crashdump bugs
  - sw64: bpf: fix BPF_CALL address
  - sw64: fix irq work
  - sw64: reset the CSR:PTBR_USR
  - sw64: kvm: add KVM_CAP_READONLY_MEM support
  - sw64: pci: fix incorrect pointer of struct pci_controller
  - sw64: perf: add core4 pmu support
  - sw64: mm: support fdt memory reservation
  - sw64: provide a cleaner raw_smp_processor_id()
  - sw64: remove deprecated annotation in irq.h
  - sw64: introduce a fine-grained intx mask/unmask system
  - sw64: move handle_intx() into pci-intx handle
  - sw64: iommu: fix NULL hose check
  - sw64: fix judgements about legacy pci support
  - sw64: cacheinfo: give preference to cache information from PPTT table
  - sw64: cache: fix shared_cpu_map of cacheinfo
  - sw64: cpu: refactor cpuinfo related code
  - sw64: cache: refactor cacheinfo related code
  - sw64: cpu: move cpu related code to the newly created cpu.c
  - sw64: topology: support initializing topology via DT or ACPI
  - sw64: spi: convert SPI_MASTER_GPIO_SS to SPI_CONTROLLER_GPIO_SS
  - sw64: defconfig: fix SPI related configuration items
  - sw64: irqchip: add version 3 for PINTC
  - sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
  - sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
  - sw64: clk: further fix the clock frequency of SPI and I2C
  - sw64: smp: fix function fdt_setup_smp()
  - Revert "sw64: fdt: map physical node ID to logical node ID"
  - sw64: pci: remove legacy io reservation
  - sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
  - sw64: 6.6 upgrade
  - sw64: mm: remove legacy memory detection for JunZhang platform
  - sw64: iommu: improve iommu initialization
  - sw64: clk: fix the clock frequency of SPI and I2C
  - sw64: fix a bug in huge_pte_offset()
  - sw64: pci: rename some functions
  - sw64: pci: support PCIe controller driver based on device tree
  - sw64: remove sw64_io related functions
  - sw64: platform: add misc platform driver
  - sw64: add basic frequency scaling support for JunZhang
  - sw64: remove redundant link options
  - sw64: kvm: enable ring-based dirty page tracking
  - sw64: kvm: fix invalid memslot flags checking during dirty logging
  - sw64: pciehp: fix compile error when CONFIG_PCIE_DPC=y
  - sw64: kvm: don't retrieve memory slot again in page fault handler
  - sw64: kexec: remove code for compatibility with builtin DTB
  - sw64: smp: allow NR_CPUS less than the number detected by firmware
  - sw64: fix C4 INTx configuration
  - !14166  Align per_cpu osq_node to 64 Byte size cacheline
  - Align per_cpu osq_node to 64 Byte size cacheline
  - !14130 [virtcca] delete unused interfaces: tmi_data_destroy and tmi_ttt_unmap_range
  - virtCCA Feature: remove unused interfaces and add cpumask check
  - !14152  crypto: hisilicon/sec2 - the aead algorithm of sec2 is fixed.
  - crypto: hisilicon/trng - support to obtain random numbers from soft algorithm
  - crypto: hisilicon/sec2 - fix for aead invalid authsize
  - crypto: hisilicon/sec2 - fix for aead icv error
  - crypto: hisilicon/qm - disable error report before flr
  - !13824 mm: some mTHPs improve
  - mm: fix docs for the kernel parameter ``thp_anon=``
  - mm: count the number of anonymous THPs per size
  - mm: tidy up shmem mTHP controls and stats
  - mm: cleanup count_mthp_stat() definition
  - mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n
  - mm: override mTHP "enabled" defaults at kernel cmdline
  - !10305 [OLK-6.6] Backport bugfixes for mm LRU from Linux upstream
  - mm: vmscan.c: fix OOM on swap stress test
  - mm/gup: clear the LRU flag of a page before adding to LRU batch
  - !13846 [OLK-6.6] cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - cpufreq: acpi-cpufreq: Zhaoxin: fix incorrect max-freq issue
  - !9184 [OLK-6.6] i2c: smbus: Add support for Zhaoxin SMBUS controller
  - configs: Add Zhaoxin i2c smbus items in openeuler_config
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - !9223 [OLK-6.6] x86/hpet: Read HPET directly if panic in progress
  - x86/hpet: Read HPET directly if panic in progress
  - !14088 ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - ACPI: CPPC: Introduce new EPP capabilities and update auto selection functions
  - !14112  xfs: Fix data overflow
  - xfs: Fix data overflow in xfs_mod_fdblocks()
  - Revert "xfs: split xfs_mod_freecounter"
  - !14099 [6.6] [Feature] : update patches for sw64 architecture
  - sw64: pci: fix compile error when CONFIG_PCI_MSI=n
  - sw64: pci: fix unable to get node ID when numa_off is set
  - sw64: add uapi reg.h
  - sw64: pciehp: remove useless code
  - sw64: dts: support online-capable property for cpu device node
  - sw64: kvm: resolve a compile warning
  - sw64: pciehp: update code
  - sw64: kvm: fix mmio GPA for C4
  - sw64: handle null MSI irq in guest os
  - sw64: fix guest memory and cpu hotplug function
  - sw64: kvm: walk host page tables to find THP mapping size
  - sw64: kvm: convert to the gfn-based MMU notifier callbacks
  - sw64: kvm: rename mmu_notifier_* to mmu_invalidate_*
  - sw64: kvm: fix compiler errors caused by mismatched parameters
  - sw64: kvm: use get_page() instead of kvm_get_pfn()
  - sw64: kvm: fix the handling when the live migration fails
  - sw64: kvm: fix NULL poniter access in kvm_arch_prepare_memory_region
  - sw64: kvm: fix link error with CONFIG_KVM=m
  - sw64: kvm: fix build failure about KVM
  - sw64: add dependency for sunway-ged driver
  - sw64: fix compile error with CONFIG_SUNWAY_GED=m
  - sw64: remove unused sunway_memory_get_meminfo()
  - sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
  - sw64: add cpu hotplug support for C4 guest
  - sw64: kvm: support up to 256 vCPUs for C4
  - sw64: kvm: fix inconsistent vcpucb of C4
  - sw64: kvm: implement kvm_arch_set_irq_inatomic()
  - sw64: fix guest send ipi target
  - sw64: kvm: add numa support for memory hotplug
  - sw64: kvm: fix bug when vcpu disable irq
  - sw64: kvm: acpi: match sunway_ged by acpi method
  - sw64: kvm: use generic kvm mmu memory caches
  - sw64: kvm: remove some unused codes
  - sw64: kvm: fix pmd_trans_cont
  - sw64: kvm: fix size of struct kvm_regs for C3B
  - sw64: kvm: add the member of the vcpucb structure
  - sw64: kvm: fix the check for THP
  - sw64: kvm: fix page walk error of unmap_apt_range()
  - sw64: redesign struct kvm_regs for C4
  - sw64: kvm: fix live migration bug
  - sw64: kvm: fix APT fault handler
  - sw64: kvm: fix unmap_apt_{ptes, pmds}
  - sw64: kvm: fix clock sync of CORE4 live migration
  - sw64: kvm: delete memory hotplug codes for CORE3B
  - sw64: add missing c4 legacy power management code
  - sw64: kvm: scale up the range of target vcpu parsed by hypervisor
  - sw64: kvm: fix return value of vmem_mmap
  - sw64: kvm: add trace kvm function
  - sw64: fix rc resource setup
  - sw64: 6.6 update: sunway_pciehp_reset_slot()
  - sw64: 6.6 update: arch_remove_memory()
  - sw64: bypass sunway pcie hotplug driver in non-physical scenario
  - sw64: defconfig: update defconfig for kata-containers
  - sw64: add HARDLOCKUP_DETECTOR support
  - sw64: fix bugs in decreasing frequency
  - sw64: add NMI support
  - sw64: add CSR_CAUSE into pt_regs
  - sw64: optimize the code in do_entInt()
  - sw64: seperate IRQ_MSI configs for sub-architectures
  - sw64: handle null MSI irq
  - sw64: fix a compilation warning
  - sw64: fix a base address of msiaddr register
  - sw64: fix some S3 CSRs problems for C4
  - sw64: fix io resource remapping
  - sw64: amdgpu/radeon: correct low-level mmio memset/memcpy direct calls
  - sw64: fix pci resource assignment bug
  - sw64: fix MSI compilation warnings
  - sw64: 6.6 io.h fixup
  - sw64: iommu: support SW64 IOMMU on 6.6 kernel
  - sw64: fix msi interrupt for guest os
  - sw64: msi: update code
  - sw64: gpio: fix compile error of sunway_gpio_add_port
  - sw64: fdt: map physical node ID to logical node ID
  - sw64: fix regs.pc on single-step with ptrace
  - sw64: modify some interrupt target core to logic 0 core
  - sw64: fix sw64_is_fake_mcount() of recordmcount
  - sw64: remove some unused module init/exit/license
  - sw64: numa: support NUMA initialization based on device tree
  - sw64: smp: support SMP initialization based on device tree
  - sw64: dtb: disable built-in DTB for junzhang
  - sw64: ata: add ata_hrst_delay cmdline option
  - sw64: kconfig: add I2C and SPI defconfig for junzhang
  - sw64: kconfig: set default y for GPIO if ACPI enabled
  - sw64: fix a bug in gpio-sunway.c
  - sw64: pci: use readq/writeq to read/write RC and PIU IO registers
  - sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
  - sw64: pciehp: add pcie hotplug driver support for C4
  - sw64: remove redundant intx code
  - sw64: irq: support interrupt for virtual GPIO
  - sw64: acpi: enable ACPI by default
  - sw64: mm: fix mem=xxx command line invalid in some cases
  - sw64: use generic page_is_ram()
  - sw64: mm: take memory information from firmware
  - sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
  - sw64: fix typo in gpio-sunway
  - sw64: fix compile warning of handle_pci_msi_interrupt
  - sw64: fix usage of __add_memory() in sunway-ged driver
  - sw64: change FORCE_MAX_ZONEORDER default value
  - sw64: perf: fix event check order


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-73.0.0.65
changelog:
  - !14618  drm: zynqmp_kms: Unplug DRM device before removal
  - drm: zynqmp_kms: Unplug DRM device before removal
  - !14621  brd: defer automatic disk creation until module initialization succeeds
  - brd: defer automatic disk creation until module initialization succeeds
  - !14617  block: fix uaf for flush rq while iterating tags
  - block: fix uaf for flush rq while iterating tags
  - !14614  scsi: sg: Fix slab-use-after-free read in sg_release()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - !14519  bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  - !14593  CVE-2024-56702
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
  - bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
  - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
  - !14415  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  - !14439  sh: intc: Fix use-after-free bug in register_intc_controller()
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - !14635  Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - !14648  memcg: fix soft lockup in the OOM process
  - memcg: fix soft lockup in the OOM process
  - !14562  f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  - !14524  The bugfix for LPM trie
  - bpf: Handle in-place update for full LPM trie correctly
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
  - !14459  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - !14454  drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - drm/vc4: hdmi: Avoid hang with debug registers when suspended
  - !14385  media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  - !14546  media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - !14244  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - !14243  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - !14504  apparmor: test: Fix memory leak for aa_unpack_strdup()
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
  - !14418  LoongArch: Add CPU HWMon platform driver
  - LoongArch: Add CPU HWMon platform driver
  - !14387  LoongArch: compile loongson drm driver as module
  - drm/loongson: compile loongson drm driver as module
  - LoongArch: cleanup loongson3 defconfig
  - !14441  crypto: bcm - add error check in the ahash_hmac_init function
  - crypto: bcm - add error check in the ahash_hmac_init function
  - !14438  media: imx-jpeg: Set video drvdata before register video device
  - media: imx-jpeg: Set video drvdata before register video device
  - !14389  CVE-2024-53173
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - !14469  io_uring/tctx: work around xa_store() allocation error issue
  - io_uring/tctx: work around xa_store() allocation error issue
  - !14447  Fix CVE-2024-56744
  - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
  - !14394  scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  - !14518  hfsplus: don't query the device logical block size multiple times
  - hfsplus: don't query the device logical block size multiple times
  - !14517  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - !14516  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  - !14475  ext4: correct behaviors under errors=remount-ro mode
  - Revert "ext4: drop EXT4_MF_FS_ABORTED flag"
  - Revert "ext4: warn on read-only filesystem in ext4_journal_check_start()"
  - Revert "ext4: drop read-only check in ext4_init_inode_table()"
  - Revert "ext4: drop read-only check in ext4_write_inode()"
  - Revert "ext4: drop read-only check from ext4_force_commit()"
  - Revert "ext4: replace read-only check for shutdown check in mmp code"
  - Revert "ext4: don't set SB_RDONLY after filesystem errors"
  - sb_writers: fix kabi broken
  - fs: fix a hungtask problem when freeze/unfreeze fs
  - !14506  iommufd: Fix out_fput in iommufd_fault_alloc()
  - iommufd: Fix out_fput in iommufd_fault_alloc()
  - !14369  crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - crypto: qat/qat_420xx - fix off by one in uof_get_name()
  - !14417 v2  drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  - !14423 v2  EDAC/igen6: Avoid segmentation fault on module unload
  - EDAC/igen6: Avoid segmentation fault on module unload
  - !14365  EDAC/bluefield: Fix potential integer overflow
  - EDAC/bluefield: Fix potential integer overflow
  - !14364  clk: clk-apple-nco: Add NULL check in applnco_probe
  - clk: clk-apple-nco: Add NULL check in applnco_probe
  - !14408  bpf: fix OOB devmap writes when deleting elements
  - bpf: fix OOB devmap writes when deleting elements
  - !14367  io_uring: check if iowq is killed before queuing
  - io_uring: check if iowq is killed before queuing
  - !14355  btrfs: ref-verify: fix use-after-free after invalid ref action
  - btrfs: ref-verify: fix use-after-free after invalid ref action
  - !14350  jfs: array-index-out-of-bounds fix in dtReadFirst
  - jfs: array-index-out-of-bounds fix in dtReadFirst
  - !14348  ksmbd: fix use-after-free in SMB request handling
  - ksmbd: fix use-after-free in SMB request handling
  - !14102  OLK-6.6-fix-CVE-2024-49906
  - drm/amd/display: Check null pointer before try to access it
  - drm/amd/display: Check null pointer before try to access it
  - !14346  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  - !14420  HID: wacom: fix when get product name maybe null pointer
  - HID: wacom: fix when get product name maybe null pointer
  - !14301  Revert "unicode: Don't special case ignorable code points"
  - Revert "unicode: Don't special case ignorable code points"
  - !14332  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - mm: avoid unconditional one-tick sleep when swapcache_prepare fails
  - !14362  CVE-2024-53217
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - !14319  exfat: fix out-of-bounds access of directory entries
  - exfat: fix out-of-bounds access of directory entries
  - !14405  NFSD: Prevent a potential integer overflow
  - NFSD: Prevent a potential integer overflow
  - !14395  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  - !14401  gpio: grgpio: Add NULL check in grgpio_probe
  - gpio: grgpio: Add NULL check in grgpio_probe
  - !14400  bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  - !14329  svcrdma: Address an integer overflow
  - svcrdma: Address an integer overflow
  - !14376  fix CVE-2024-53197
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - !14206 v4  erofs/fscache/cachefiles: Add ondemand loading support
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter()
  - cachefiles: Clean up in cachefiles_commit_tmpfile()
  - cachefiles: Fix NULL pointer dereference in object->file
  - cachefiles: add support for buffer I/O in ondemand mode
  - fscache: clean up for fscache_clear_volume_priv
  - fscache: Add the synchronous waiting mechanism for the volume unhash in erofs ondemand mode
  - cachefiles: Introduce "dir_has_put" in cachefiles_volume
  - erofs: remove EXPERIMENTAL feature warning for fscache-based
  - cachefiles: Add restrictions to cachefiles_daemon_cull()
  - erofs: add erofs_ondemand switch
  - erofs: add erofs switch to better control it
  - fscache: modify the waiting mechanism with duplicate volumes
  - cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
  - fscache: add a memory barrier for FSCACHE_VOLUME_CREATING
  - !14377  ftrace: Fix regression with module command in stack_trace_filter
  - ftrace: Fix regression with module command in stack_trace_filter
  - !14373 [OLK-6.6]Hygon: Fix objtool warning cause by csv3_active()
  - x86: mm: Fix objtool warning about bool noinstr csv3_active()
  - !14358  firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  - !14342  hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
  - !14271  iomap: fix zero padding data issue in concurrent append writes
  - iomap: fix zero padding data issue in concurrent append writes
  - !14340  ocfs2: free inode when ocfs2_get_init_inode() fails
  - ocfs2: free inode when ocfs2_get_init_inode() fails
  - !14312 OLK-6.6: Some patches of RDMA/hns from Linux to olk-6.6 v2
  - RDMA/hns: Fix missing flush CQE for DWQE
  - RDMA/hns: Fix warning storm caused by invalid input in IO path
  - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  - Revert "RDMA/hns: Fix accessing invalid dip_ctx during destroying QP"
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer
  - !14338  CVE-2024-53230
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  - !14336  mm: Backport mainline patch
  - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
  - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: fix arithmetic for bdi min_ratio
  - mm/kmemleak: fix partially freeing unknown object warning
  - mm: kmemleak: add __find_and_remove_object()
  - mm: kmemleak: use mem_pool_free() to free object
  - mm: kmemleak: split __create_object into two functions
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - !14337  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - !14322  back some mainline patches for damon
  - mm/damon/core: fix return value from damos_wmark_metric_value
  - mm/damon/core: remove unnecessary si_meminfo invoke.
  - !14323  zram: fix NULL pointer in comp_algorithm_show()
  - zram: fix NULL pointer in comp_algorithm_show()
  - !14201 【OLK-6.6】  drivers: arch_topology: Refactor do-while loops
  - drivers: arch_topology: Refactor do-while loops
  - !14295  pmdomain: imx93-blk-ctrl: correct remove path
  - pmdomain: imx93-blk-ctrl: correct remove path
  - !14190  Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  - !14134  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  - !14214  mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
  - !14229 Fix extioi restart issue in vm
  - LoongArch: arch/loongarch/kvm: Fix extioi restart issue
  - !14127 MPTCP Upstream part 24
  - mptcp: refer to 'MPTCP' socket in comments
  - mptcp: add mptcp_space_from_win helper
  - mptcp: use mptcp_win_from_space helper
  - doc: new 'mptcp' page in 'networking'
  - doc: mptcp: alphabetical order
  - doc: mptcp: add missing 'available_schedulers' entry
  - selftests: mptcp: join: mark 'fastclose' tests as flaky
  - selftests: mptcp: lib: support flaky subtests
  - selftests: mptcp: export ip_mptcp to mptcp_lib
  - !13359 [OLK-6.6] [Backport] individual submission
  - MIPS: RB532: Declare prom_setup_cmdline() and rb532_gpio_init() static
  - MIPS: BCM47XX: Declare early_tlb_init() static
  - MIPS: BCM47XX: include header for bcm47xx_prom_highmem_init() prototype
  - ocfs2: spelling fix
  - !14291  vdpa: solidrun: Fix UB bug with devres
  - vdpa: solidrun: Fix UB bug with devres
  - !14256  RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
  - RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-73.0.0.66
changelog:
  - riscv kernel upgrade to 6.6.0-73.0.0
  - Backport RISC-V AIA driver from mainline linux
  - Fix kernel-mode FPU support on riscv
  - Add cache info for SG2042 dts


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-75.0.0.67
changelog:
  - !14904  net: renesas: rswitch: avoid use-after-put for a device tree node
  - net: renesas: rswitch: avoid use-after-put for a device tree node
  - !14898  Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - Revert "Revert "driver core: Fix uevent_show() vs driver detach race""
  - !14741  io_uring: check for overflows in io_pin_pages
  - io_uring: check for overflows in io_pin_pages
  - !14863  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - !14882  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  - !14879  CVE-2024-57872
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
  - scsi: ufs: Convert all platform drivers to return void
  - !14880  pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  - !14873 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.62-6.6.63 LTS Patches
  - mm/damon/core: copy nr_accesses when splitting region
  - mm/damon/core: handle zero schemes apply interval
  - mm/damon/core: check apply interval in damon_do_apply_schemes()
  - mm: refactor map_deny_write_exec()
  - mm: unconditionally close VMAs on error
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  - mptcp: pm: use _rcu variant under rcu_read_lock
  - mptcp: hold pm lock when deleting entry
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point
  - lib/buildid: Fix build ID parsing logic
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
  - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
  - mm/damon/core: implement scheme-specific apply interval
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
  - nouveau: fw: sync dma after setup is called.
  - drm/bridge: tc358768: Fix DSI command tx
  - mmc: sunxi-mmc: Fix A100 compatible description
  - LoongArch: Make KASAN work with 5-level page-tables
  - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
  - nommu: pass NULL argument to vma_iter_prealloc()
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
  - KVM: x86: Unconditionally set irr_pending when updating APICv state
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
  - tools/mm: fix compile error
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
  - bonding: add ns target multicast address to slave device
  - net: ti: icssg-prueth: Fix 1 PPS sync
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt()
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt()
  - net: Make copy_safe_from_sockptr() match documentation
  - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
  - samples: pktgen: correct dev to DEV
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes.
  - net/sched: cls_u32: replace int refcounts with proper refcounts
  - Bluetooth: btintel: Direct exception event to bluetooth stack
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
  - Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
  - virtio/vsock: Fix accept_queue memory leak
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  - net/mlx5e: clear xdp features on non-uplink representors
  - net/mlx5e: kTLS, Fix incorrect page refcounting
  - net/mlx5: fs, lock FTE when checking if active
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  - mptcp: error out earlier on disconnect
  - net: vertexcom: mse102x: Fix tx_bytes calculation
  - sctp: fix possible UAF in sctp_v6_available()
  - netlink: terminate outstanding dump on socket close
  - !14856  sched: psi: fix bogus pressure spikes from aggregation race
  - sched: psi: fix bogus pressure spikes from aggregation race
  - !14861  drm/sti: avoid potential dereference of error pointers
  - drm/sti: avoid potential dereference of error pointers
  - !14846  net: stmmac: fix TSO DMA API usage causing oops
  - net: stmmac: fix TSO DMA API usage causing oops
  - !14789  erofs: handle NONHEAD !delta[1
  - erofs: handle NONHEAD !delta[1] lclusters gracefully
  - !14848  LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  - !14840 [OLK-6.6][bugfix]Hygon: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - x86/config: Remove 'CONFIG_' prefix under Kconfig entry HYGON_CSV
  - !14690 Improve the tmpfs large folio read performance
  - mm: shmem: fallback to page size splice if large folio has poisoned pages
  - mm: shmem: improve the tmpfs large folio read performance
  - mm: shmem: update iocb->ki_pos directly to simplify tmpfs read logic
  - !14466  bpf: Call free_htab_elem() after htab_unlock_bucket()
  - bpf: Call free_htab_elem() after htab_unlock_bucket()
  - !14818  olk-6.6
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  - !14738  LoongArch: fix some dwmac/pci/SE/i2c/interrupt issues
  - LoongArch: adjust the calc method of number of packages.
  - LoongArch: eiointc: fix ext irq route error
  - drivers/char: add ACPI firmware support for Loongson SE driver
  - LoongArch: fix i2c related issues
  - net: stmmac: dwmac-loongson: fix Mac DMA reset
  - pci/quirks: LS7A2000: fix pm transition of devices under pcie port
  - !14573  RDMA/rxe: Fix the qp flush warnings in req
  - RDMA/rxe: Fix the qp flush warnings in req
  - !14574  ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  - !14035  Backport fs optimizing patch from mainline
  - fs/file.c: conditionally clear full_fds
  - !14828  cgroup/cpuset: remove kernfs active break
  - cgroup/cpuset: remove kernfs active break
  - !14589  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  - !14800  Bluetooth: fix use-after-free in device_for_each_child()
  - Bluetooth: fix use-after-free in device_for_each_child()
  - !14792  jfs: fix shift-out-of-bounds in dbSplit
  - jfs: fix shift-out-of-bounds in dbSplit
  - !14791  scsi: ufs: core: sysfs: Prevent div by zero
  - scsi: ufs: core: sysfs: Prevent div by zero
  - !14787  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - !14786  x86/xen: don't do PV iret hypercall through hypercall page
  - x86/xen: don't do PV iret hypercall through hypercall page
  - !14785  drm/i915: Fix NULL pointer dereference in capture_engine
  - drm/i915: Fix NULL pointer dereference in capture_engine
  - !14817  olk-6.6
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
  - !14784  wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  - !14807  btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  - !14591  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  - !14587  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  - !14747  net: enetc: Do not configure preemptible TCs if SIs do not support
  - net: enetc: Do not configure preemptible TCs if SIs do not support
  - !14796  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  - !14655  vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  - !14656  iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  - !14659  firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - !14712  CVE-2024-56654
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  - Bluetooth: ISO: Reassociate a socket with an active BIS
  - !14761  Add Huawei Intelligent Network Card Driver:hibifur
  - Add Huawei Intelligent Network Card Driver:hibifur
  - !14772  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  - !14769  svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  - !14770  bpf, sockmap: Several fixes to bpf_msg_pop_data
  - bpf, sockmap: Several fixes to bpf_msg_pop_data
  - !14730  sched: Fix bpf cpustats refcount leak
  - sched: Fix bpf cpustats refcount leak
  - !14739  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  - !14731  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  - !14759  wifi: ath12k: Skip Rx TID cleanup for self peer
  - wifi: ath12k: Skip Rx TID cleanup for self peer
  - !14757  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
  - !14605  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - !14490  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - !14489  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  - !14488  ovl: Filter invalid inodes with missing lookup function
  - ovl: Filter invalid inodes with missing lookup function
  - !14486  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - !14754  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  - !14776  tracing: Prevent bad count for tracing_cpumask_write
  - tracing: Prevent bad count for tracing_cpumask_write
  - !14766  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  - !14765  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - !14764  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  - !14729  KVM: arm64: Don't retire aborted MMIO instruction
  - KVM: arm64: Don't retire aborted MMIO instruction
  - !14763  usb: musb: Fix hardware lockup on first Rx endpoint request
  - usb: musb: Fix hardware lockup on first Rx endpoint request
  - !14762  sched/numa: fix memory leak due to the overwritten vma->numab_state
  - sched/numa: fix memory leak due to the overwritten vma->numab_state
  - !14749  net/mlx5: DR, prevent potential error pointer dereference
  - net/mlx5: DR, prevent potential error pointer dereference
  - !14746  nvme-pci: fix freeing of the HMB descriptor table
  - nvme-pci: fix freeing of the HMB descriptor table
  - !14722  Bluetooth: MGMT: Fix possible deadlocks
  - Bluetooth: MGMT: Fix possible deadlocks
  - !14670  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - !14608  scsi: qla2xxx: Fix use after free on unload
  - scsi: qla2xxx: Fix use after free on unload
  - !14724  etmem: fix use-after-free of mm in the scan release process
  - etmem: fix use-after-free of mm in the scan release process
  - !14384  virtiofs: use pages instead of pointer for kernel direct IO
  - virtiofs: use pages instead of pointer for kernel direct IO
  - !14673  ALSA: 6fire: Release resources at card release
  - ALSA: 6fire: Release resources at card release
  - !14666  Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  - !14634  backport mainline bugfix patch
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - !14611  merge mainline patches into OLK-6.6
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  - mm/mglru: reset page lru tier bits when activating
  - tmpfs: don't enable large folios if not supported
  - mm: migrate: annotate data-race in migrate_folio_unmap()
  - mm: Kconfig: fixup zsmalloc configuration
  - mm: ignore data-race in __swap_writepage
  - !14602  blk-cgroup: Fix UAF in blkcg_unpin_online()
  - blk-cgroup: Fix UAF in blkcg_unpin_online()
  - !14720  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - !14719  rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  - !14718  PCI: Fix reset_method_store() memory leak
  - PCI: Fix reset_method_store() memory leak
  - !14455  f2fs: fix race in concurrent f2fs_stop_gc_thread
  - f2fs: fix race in concurrent f2fs_stop_gc_thread
  - !14542  net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  - !14531  sched/deadline: Fix warning in migrate_enable for boosted tasks
  - sched/deadline: Fix warning in migrate_enable for boosted tasks
  - !14528  drm/amdgpu: set the right AMDGPU sg segment limitation
  - drm/amdgpu: set the right AMDGPU sg segment limitation
  - !14525  CVE-2024-56609
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
  - !14667  sched: fix warning in sched_setaffinity
  - sched: fix warning in sched_setaffinity
  - !14412 [OLK-6.6]Workaround ARM PMUs cpu maps having offline cpus
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - !14698  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
  - !14694  arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - arm64: probes: Disable kprobes/uprobes on MOPS instructions
  - !14677  drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
  - !14569  PCI: Fix use-after-free of slot->bus on hot remove
  - PCI: Fix use-after-free of slot->bus on hot remove
  - !14568  wifi: ath12k: fix warning when unbinding
  - wifi: ath12k: fix warning when unbinding
  - !14424  octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  - !14714  Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  - !14715  media: atomisp: Add check for rgby_data memory allocation failure
  - media: atomisp: Add check for rgby_data memory allocation failure
  - !14699  CVE-2024-53158
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - !14710  CVE-2024-56546
  - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
  - !14507  sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  - !14511  netfilter: nft_inner: incorrect percpu area handling under softirq
  - netfilter: nft_inner: incorrect percpu area handling under softirq
  - !14472  jfs: fix array-index-out-of-bounds in jfs_readdir
  - jfs: fix array-index-out-of-bounds in jfs_readdir
  - !14664 v2  CVE-2024-53224
  - RDMA/mlx5: Move events notifier registration to be after device registration
  - IB/mlx5: Allocate resources just before first QP/SRQ is created


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-76.0.0.69
changelog:
  - !14997  wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  - !14941  CVE-2024-57906
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
  - !14990  mainline patches
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
  - !14993  arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  - !14952  drm/mediatek: Set private->all_drm_private[i
  - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
  - !14835 v2  media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  - !14994  mm/compaction: fix UBSAN shift-out-of-bounds warning
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - !14893  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
  - !14876  *** jffs2: Prevent rtime decompress memory corruption ***
  - jffs2: Fix rtime decompressor
  - jffs2: Prevent rtime decompress memory corruption
  - !14833  btrfs: check folio mapping after unlock in relocate_one_folio()
  - btrfs: check folio mapping after unlock in relocate_one_folio()
  - !14588  smb: Initialize cfid->tcon before performing network ops
  - smb: Initialize cfid->tcon before performing network ops
  - !14977  PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL
  - !14984  vsock/bpf: return early if transport is not assigned
  - vsock/bpf: return early if transport is not assigned
  - !14976  x86/fpu: Ensure shadow stack is active before "getting" registers
  - x86/fpu: Ensure shadow stack is active before "getting" registers
  - !14682  CVE-2024-56701
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  - !14780  CVE-2024-56677
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
  - !14681  CVE-2024-56567
  - ad7780: fix division by zero in ad7780_write_raw()
  - !14981  nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  - !14916  CVE-2024-56641
  - net/smc: initialize close_work early to avoid warning
  - net/smc: refactoring initialization of smc sock
  - !14914  bnxt_en: Fix receive ring space parameters when XDP is active
  - bnxt_en: Fix receive ring space parameters when XDP is active
  - !14915  net/smc: protect link down work from execute after lgr freed
  - net/smc: protect link down work from execute after lgr freed
  - !14913  xsk: fix OOB map writes when deleting elements
  - xsk: fix OOB map writes when deleting elements
  - !14911  net/smc: fix LGR and link use-after-free issue
  - net/smc: fix LGR and link use-after-free issue
  - !14912  net: fix data-races around sk->sk_forward_alloc
  - net: fix data-races around sk->sk_forward_alloc
  - !14907  ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  - !14908  net: dsa: improve shutdown sequence
  - net: dsa: improve shutdown sequence
  - !14877  sched: qos sched support online task to preempt offline task
  - sched: qos sched support online task to preempt offline task
  - !14974  BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - !14973 v2  fix CVE-2024-54193
  - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  - accel/ivpu: Move set autosuspend delay to HW specific code
  - !14901  Fix CVE-2024-47794
  - bpf: Fix kabi breakage in struct bpf_prog_aux
  - selftests/bpf: Add test to verify tailcall and freplace restrictions
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map
  - bpf: Prevent tailcall infinite loop caused by freplace
  - !14874  bpf: Check size for BTF-based ctx access of pointer members
  - bpf: Check size for BTF-based ctx access of pointer members
  - !14847  bpf: put bpf_link's program when link is safe to be deallocated
  - bpf: put bpf_link's program when link is safe to be deallocated
  - !14945  btrfs: avoid NULL pointer dereference if no valid extent tree
  - btrfs: avoid NULL pointer dereference if no valid extent tree
  - !14823 mm：some shmem bugfix
  - mm: shmem: fix ShmemHugePages at swapout
  - mm: shmem: extend shmem_unused_huge_shrink() to all sizes
  - mm: shmem: fix minor off-by-one in shrinkable calculation
  - docs: mm: fix the incorrect 'FileHugeMapped' field
  - mm: shmem: fix the update of 'shmem_falloc->nr_unswapped'
  - mm: shmem: fix incorrect index alignment for within_size policy
  - !14970  drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  - !14969  topology: Keep the cpumask unchanged when printing cpumap
  - topology: Keep the cpumask unchanged when printing cpumap
  - !14935  Two CVE fixes for ksmbd
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
  - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
  - !14930  tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update
  - !14931  bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
  - !14953  mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
  - !14767 mm: shmem: control THP support through the kernel command line
  - mm: shmem: remove __shmem_huge_global_enabled()
  - mm: shmem: override mTHP shmem default with a kernel parameter
  - mm: move ``get_order_from_str()`` to internal.h
  - mm: shmem: control THP support through the kernel command line
  - !14962  memcg: fix memcg_swapmax_read() not declared warning
  - memcg: fix memcg_swapmax_read() not declared warning
  - !14944  ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - !14946  swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single()
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
  - !14897  perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
  - !14920  iio: light: vcnl4035: fix information leak in triggered buffer
  - iio: light: vcnl4035: fix information leak in triggered buffer
  - !14964 v2  fix BUG: unable to handle kernel paging request in build_id_parse
  - lib/buildid: Handle memfd_secret() files in build_id_parse()
  - mm: merge folio_is_secretmem() and folio_fast_pin_allowed() into gup_fast_folio_allowed()
  - !14951  Mainline patch to olk-6.6
  - RDMA/hns: Fix UAF for cq async event
  - Revert "RDMA/hns: Fix UAF for cq async event"
  - RDMA/hns: Check atomic wr length
  - Revert "RDMA/hns: Fix a missing check of atomic wr length"
  - Revert "RDMA/hns: Check atomic wr length"
  - !14925  RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - RDMA/hns: Fix unmatch exception handling when request_irq() fails
  - !14884  um: Fix potential integer overflow during physmem setup
  - um: Fix potential integer overflow during physmem setup
  - !14886  Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  - !14889  clk: ralink: mtmips: clock fixes for Ralink SoCs
  - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
  - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
  - !14888  usb: dwc3: gadget: Fix looping of queued SG entries
  - usb: dwc3: gadget: Fix looping of queued SG entries
  - !14924  soc: imx8m: Probe the SoC driver as platform driver
  - soc: imx8m: Probe the SoC driver as platform driver
  - !14813  drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
  - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability


author: wangkai <13474090681@163.com> - 8.0.37-1
changelog:
  - Update to 8.0.37 for fix CVEs(CVE-2024-20964,CVE-2024-20971,CVE-2024-20976,
    CVE-2024-20973,CVE-2024-20978,CVE-2024-20981,CVE-2024-20962,CVE-2024-20977,
    CVE-2024-20963,CVE-2024-20965,CVE-2024-20972,CVE-2024-20961,CVE-2024-20982,
    CVE-2024-20970,CVE-2024-20967,CVE-2024-20984,CVE-2024-20974,CVE-2024-20966,
    CVE-2024-20960,CVE-2024-20985,CVE-2024-20969,CVE-2024-21000,CVE-2024-21069,
    CVE-2024-21009,CVE-2024-21087,CVE-2024-21047,CVE-2024-20998,CVE-2024-21013,
    CVE-2024-21060,CVE-2024-21008,CVE-2024-21102,CVE-2024-21054,CVE-2024-21062,
    CVE-2024-20994,CVE-2024-21096,CVE-2024-21061,CVE-2024-20993,CVE-2024-21055,
    CVE-2024-21057,CVE-2023-6129)


author: wangkai <13474090681@163.com> - 8.0.38-1
changelog:
  - Update to 8.0.38 for fix CVEs(CVE-2024-21125,CVE-2024-21142,CVE-2024-21179,
    CVE-2024-21171,CVE-2024-21130,CVE-2024-21162,CVE-2024-21177,CVE-2024-20996,
    CVE-2024-21134,CVE-2024-21165,CVE-2024-21173,CVE-2024-21129,CVE-2024-21127,
    CVE-2024-21163)


author: wangkai <13474090681@163.com> - 8.0.40-1
changelog:
  - Update to 8.0.40 for fix CVEs(CVE-2024-21218,CVE-2024-21196,CVE-2024-21207,
    CVE-2024-21198,CVE-2024-21203,CVE-2024-21213,CVE-2024-21239,CVE-2024-21199,
    CVE-2024-21197,CVE-2024-21247,CVE-2024-21193,CVE-2024-21212,CVE-2024-21241,
    CVE-2024-21230,CVE-2024-21236,CVE-2024-21194,CVE-2024-21238,CVE-2024-21237,
    CVE-2024-21201,CVE-2024-21231,CVE-2024-21219,CVE-2024-21185)


author: yaoxin <1024769339@qq.com> - 8.0.41-1
changelog:
  - Update to 8.0.41 for fix CVEs(CVE-2025-21490,CVE-2025-21491,CVE-2025-21495,
    CVE-2025-21497,CVE-2025-21500,CVE-2025-21501,CVE-2025-21503,CVE-2025-21505,
    CVE-2025-21518,CVE-2025-21519,CVE-2025-21520,CVE-2025-21522,CVE-2025-21523,
    CVE-2025-21529,CVE-2025-21531,CVE-2025-21540,CVE-2025-21543,CVE-2025-21546,
    CVE-2025-21555,CVE-2025-21559)


author: wangkai <13474090681@163.com> - 1:20.11.1-1
changelog:
  - Update to 20.11.1
  - Fix CVE-2023-46809 CVE-2024-21896 CVE-2024-22019 CVE-2024-21892 CVE-2024-24758 CVE-2024-22025


author: yaoxin <yao_xin001@hoperun.com> - 1:20.12.1-1
changelog:
  - Update to 20.12.1:
    * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session()
      leads to HTTP/2 server crash- (High)
    * CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
    * llhttp version 9.2.1
    * undici version 5.28.4


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:20.12.1-2
changelog:
  - fix building w/ clang: only apply '-fno-ipa-icf' for gcc && disable LTO for clang + ld.bfd
  - improve the handling of trilling whitespaces in C/CXXFLAGS


author: Ge Wang <wang__ge@126.com> - 1:20.12.1-3
changelog:
  - CVE-2023-45853 - Reject overflows of zip header fields in minizip
  - CVE-2024-5274 - Using FunctionParsingScope for parsing class static
  - CVE-2024-5535 - Fix SSL_select_next_proto
  - CVE-2024-7971 - Spill all loop inputs before entering loop


author: wangkai <13474090681@163.com> - 1:20.18.2-1
changelog:
  - Update to 20.18.2
  - Fix CVE-2025-23083 CVE-2025-23085 CVE-2025-23084 CVE-2024-36137
    CVE-2024-22018 CVE-2024-22020


