# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: wangkai <13474090681@163.com> - 0.22.1-1
changelog:
  - Update to 0.22.1
  - Fix CVE-2026-20884, CVE-2026-20889, CVE-2026-20911, CVE-2026-21413,
    CVE-2026-24450, CVE-2026-24660, CVE-2026-5318, CVE-2026-5342


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 36.16.5-52
changelog:
  - Type:bugfix
   - ID:NA
   - SUG:NA
   - DESC:Fixed the issue of "D_isable root account" not being translated

   * Fri Feb 27 2026 zhaoyognhao <zhaoyonghao10@h-partners.com> - 36.16.5-51
   - Type:feature
   - ID:NA
   - SUG:NA
   - DESC: enable ssh login checkbox


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 36.16.5-54
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC: add kernel 64k page size and kernel options Chinese translation support

   * Mon Mar 9 2026 zhaoyonghao <zhaoyognhao10@h-partners.com> - 36.16.5-53
   - Type:requirement
   - ID:NA
   - SUG:NA
   - DESC:Port GUI kernel switcher for ARM 64k


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-55
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix permissions of the ssh config created by Anaconda
          fix(users): ensure SSH config directory exists before writing


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: songyakang<songyakang@xfusion.com> - 0.19.1-47
changelog:
  - backport patch from upstream:
     backport-Fixe-cmake-download-path-which-had-arch-hardcoded-to.patch


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: openeuler_bot <infra@openeuler.sh> - 0.6.2.4-1
changelog:
  - fix memory leak in ECDH-ES JWE encryption/decryption (version:0.6.2.4).
  - fix rsa_q = NULL initialization in _RSA_private_fields (version:0.6.2.4).
  - fix memory allocation check (typo) in jwk.c (version:0.6.2.4).
  - fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes (version:0.6.2.4).
  - re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4 (version:0.6.2.4).


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: shenzhongwei <shenzhongwei@kylinos.cn> - 8.0.4-10
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: chenyanpan <chenyanpan@xfusion.com> - 1:2.4.7-13
changelog:
  - Fix CVE-2026-34979: Heap overflow in get_options()
  - Fix CVE-2026-34980: Filter control characters from option values


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-29
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
  - SUG:NA
  - DESC:fix CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: luoguocui <luoguouci@h-partners.com> - 2.90-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix bounds checking in check_ia()
         Fix SEGV in Dbus code
         More fixes for DHCP ops in Dbus when DHCP not configured


author: zhaoyonghao <zhaoyonghao10@h-partners.com> - 2.90-9
changelog:
  - Type:CVE
  - CVE:CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172
  - SUG:NA
  - DESC:Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: jade_t<yzd50036@gmail.com> - 2:18.09.0-351
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the installation conflict between docker-engine and containerd


author: wangkai <13474090681@163.com> - 1:2.3.20-4
changelog:
  - Fix CVE-2025-59031, CVE-2025-59032, CVE-2026-27855, CVE-2026-27856,
    CVE-2026-27857, CVE-2026-27858, CVE-2026-27859, CVE-2026-0394


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: Zhiguang Ni <nizhiguang@hygon.cn> - 202308-31
changelog:
  - Support OvmfPkg/AmdSevX64.dsc build to generate OVMF.fd with CSV3 RTMR (based on CC_MEASUREMENT) capability


author: taolinghongfei <taolinghongfei@h-partners.com> - 202308-33
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-7
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-8
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
         through the command -d


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: wangkai <13474090681@163.com> - 2:2.11.8-3
changelog:
  - Fix CVE-2026-26955, CVE-2026-26965, CVE-2026-31806, CVE-2026-31883, CVE-2026-31885,
    CVE-2026-33984, CVE-2026-33983


author: wangkai <13474090681@163.com> - 2:2.11.8-5
changelog:
  - Fix CVE-2026-25942, CVE-2026-25952, CVE-2026-25953, CVE-2026-25954, CVE-2026-27951,
    CVE-2026-29774, CVE-2026-29775, CVE-2026-31884, CVE-2026-33985


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-110
changelog:
  - Type: BUGFIX
  - DESC:
  - LoongArch: sync fix from upstream.
  - Adjusting the sequence number and name of the patches


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
    CheckDependentLibraries.cmake: don't use libjpeg if disabled
    frmts/mrf/CMakeLists.txt: ignore HAVE_JPEGTURBO_DUAL_MODE_8_12 if GDAL_USE_JPEG is OFF
    FindPostgreSQL.cmake: Update the list of released PgSQL versions
    Add support for PoDoFo >= 0.10.0
    Add support for TileDB 2.17
    Fix build with -DRENAME_INTERNAL_SHAPELIB_SYMBOLS=OFF


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: Funda Wang <fundawang@yeah.net> - 1.76.3-1
changelog:
  - update to 1.76.3
  - disable Regress test for now as it failed with:
    TypeError: can't redefine non-configurable property "name_conflict" in testRegress.js (line 923)


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 2.78.3-16
changelog:
  - apply 3 patches: backport-Fix-a-buffer-leak-when-finishing-connecting.patch, backport-Add-thread-pool-stress-test-to-task-c.patch, backport-Cleanup-trailing-spaces-task-c.patch


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-98
changelog:
  - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module
  - posix: Run tst-wordexp-reuse-mem test
  - elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-101
changelog:
  - Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
  - Document CVE-2026-4046


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-103
changelog:
  - include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
  - Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)

   * Fri Apr 24 2026 zhangjian <mszjaas@qq.com> - 2.38-102
   - fix-cve-2026-5450
   - fix-CVE-2026-5928


author: Qingqing Li <liqingqing3@huawei.com> - 2.38-104
changelog:
  - libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
  - stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: Linux_zhang <244695981@qq.com> - 3.8.2-13
changelog:
  - fix CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260.


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: yixiangzhike <yixiangzhike007@163.com> - 1.23.0-4
changelog:
  - Delete duplicate files between groff and groff-x11
  - Detete Obsoletes and Provides about groff-x11 from groff


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Han Gao <gaohan@iscas.ac.cn> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:configure: Add -mno-relax on riscv*
         configure: Defer check for -mcmodel=large until PIC/PIE checks are done


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:2.12-50
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: workaround the BuildRequires mis-preinstallation issue on build systems


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-51
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: tangce <tangce1@h-partners.com> - 2.4.58-14
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - SUG:NA
  - DESC:fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: tangce <tangce1@h-partners.com> - 2.4.58-15
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - SUG:NA
  - DESC:fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: Liu Chao <liuchao173@huawei.com> - 3:1.9.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: use hint->name in get_usr_irq_policy to reduce the time spent on obtaining interrupt names when use --rulesconfig


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Dingli Zhang <dingli@iscas.ac.cn> -1:1.8.0.482.b08-11
changelog:
  - Fix build errors for riscv64 due to missed patch408 removal
  - Fix patch apply failure due to 8269668


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.492.b09-0
changelog:
  - update to 8u492
  - modified add-missing-test-case.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - modified Huawei-Fix-build-failures-due-to-wrap-in-x86.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add Use-stlr-for-putOrdered.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.31.11-0
changelog:
  - update to 11.0.31+11(GA)
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - delete fix-libpng-CVE-2026-22695.patch
  - delete 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - delete fix-libpng-CVE-2026-25646.patch
  - add Use-stlr-for-putOrdered.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.19.10-0
changelog:
  - update to jdk17.0.19-ga
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified 8264806-Backport-Graal-Compiler.patch
  - deleted 8373476-tz-Update-Timezone-Data-to-2025c.patch
  - deleted Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - modified add-version-txt.patch
  - modified fix-gitee.com-problem.patch
  - deleted fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch
  - deleted fix-libpng-CVE-2026-22695.patch
  - deleted fix-libpng-CVE-2026-25646.patch
  - deleted fix-zlib-CVE-2026-27171.patch
  - add Use-stlr-for-putOrdered.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: yaoxin <1024769339@qq.com> - 1.8.0-4
changelog:
  - Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,
    CVE-2026-43895,CVE-2026-43896 and CVE-2026-44777


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-145.0.2.133
changelog:
  - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - !21695 urma: Create jetty with kernel thread
  - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - urma: Create jetty with kernel thread


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-147.0.0.134
changelog:
  - !21713 Fix CVE-2026-23440
  - !21683 ub/ubdevshm: Fix register segment failed issue in multi-thread scenario
  - !21682 Fix CVE-2026-31399
  - !21717 sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide()
  - !21720 urma: fix bind jetty compat error
  - !21693  Introduce dmem cgroup
  - net/mlx5e: Fix race condition during IPSec ESN update
  - !21712 Fix CVE-2026-23441
  - urma: fix bind jetty compat error
  - !21630 urma: change urma kmod errno
  - sched/fair: guard WA_SMT with CONFIG_SCHED_SMT in wake_wide()
  - net/mlx5e: Prevent concurrent access to IPSec ASO context
  - urma: change urma kmod errno
  - !21690 urma:delete redundant sub_trans_mode_cap in urma
  - !21648 RDMA/hns: Fix config the CNP DSCP
  - !21632  media: dvb-net: fix OOB access in ULE extension header tables
  - !21692  serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
  - urma:delete redundant sub_trans_mode_cap in urma
  - !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - !21695 urma: Create jetty with kernel thread
  - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - !21684  wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
  - urma: Create jetty with kernel thread
  - !21687  netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - !21685 urma: Create jetty with kernel thread
  - !21502 urma: bonding support health check
  - dmem: enable CONFIG_CGROUP_DMEM in arm64/x86 defconfig
  - cgroup/dmem: reuse SUBSYS for dmem and devices to preserve KABI
  - cgroup/dmem: avoid pool UAF
  - cgroup/dmem: avoid rcu warning when unregister region
  - cgroup/dmem: fix NULL pointer dereference when setting max
  - cgroup/dmem: Don't open-code css_for_each_descendant_pre
  - cgroup/rdma: Drop bogus PAGE_COUNTER select
  - doc/cgroup: Fix title underline length
  - cgroup/dmem: Fix parameters documentation
  - kernel/cgroup: Remove the unused variable climit
  - cgroup/dmem: Select PAGE_COUNTER
  - kernel/cgroup: Add "dmem" memory accounting cgroup
  - mm: page_counters: put page_counter_calculate_protection() under CONFIG_MEMCG
  - mm/page_counter: move calculating protection values to page_counter
  - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
  - urma: Create jetty with kernel thread
  - urma: bonding support health check
  - !21520 urma: add software reliability for create and destroy connection
  - netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
  - urma: add software reliability for create and destroy connection
  - !21668 v4  Reuse SUBSYS for xcu and freezer to preserve KABI
  - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
  - ub/ubdevshm: Fix register segment failed issue in multi-thread scenario
  - nvdimm/bus: Fix potential use after free in asynchronous initialization
  - !21671 Fix CVE-2026-23269
  - !21526  tcp: secure_seq: add back ports to TS offset
  - !21602 Fix CVE-2026-31408
  - !21593 Fix CVE-2026-31393
  - !21557  ip6_tunnel: fix skb_vlan_inet_prepare() return value handling regression
  - !21606  ice: Fix memory leak in ice_set_ringparam()
  - !21645  bpf: Fix regsafe() for pointers to packet
  - !21667 drivers/ub/sentry: add lock for update global variables and change some global variables to local variables
  - !21331 AMD Turin Idle HLT and Perf support patches for openEuler 6.6 kernel
  - !21662 [OLK-6.6]:update patches for sw64 architecture
  - !21670 urma: change well-known jetty to UM
  - !21669 urma: adjust netlink log level of ipourma
  - apparmor: validate DFA start states are in bounds in unpack_pdb
  - urma: change well-known jetty to UM
  - urma: adjust netlink log level of ipourma
  - !21646  icmp: fix NULL pointer dereference in icmp_tag_validation()
  - !21636 v2  net/sched: Fix CVE-2026-23378
  - xSched: update xSched manual for xcu cmdline enable option
  - xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig
  - cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16
  - xSched/cgroup: make xcu.stat invisible at root cgroup
  - xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI
  - !21641 Fix CVE-2026-23407
  - !21651  spi: fix use-after-free on controller registration failure
  - !21652  PM: runtime: Fix a race condition related to device removal
  - !21639 Fix CVE-2026-23406
  - !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0
  - drivers/ub/sentry: add lock for update global variables and change some global variables to local variables
  - f2fs: fix to detect potential corrupted nid in free_nid_list
  - ntfs3: Fix uninit buffer allocated by __getname()
  - nvme-pci: Fix race bug in nvme_poll_irqdisable()
  - tls: Purge async_hold in tls_decrypt_async_wait()
  - clsact: Fix use-after-free in init/destroy rollback asymmetry
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path
  - xdp: produce a warning when calculated tailroom is negative
  - xdp: use modulo operation to calculate XDP frag tailroom
  - apparmor: fix race between freeing data and fs accessing it
  - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks"
  - riscv: Replace function-like macro by static inline function
  - sched/fair: scale wake_wide() threshold by SMT width
  - sched/core: fix SCHED_FEAT overflow on 32-bit architectures
  - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid()
  - urma: fix race condition in async event causing kfree of invalid pointer
  - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid
  - apparmor: replace recursive profile removal with iterative approach
  - apparmor: fix: limit the number of levels of policy namespaces
  - nfnetlink_osf: validate individual option lengths in fingerprints
  - tls: Fix race condition in tls_sw_cancel_work_tx()
  - urma: Kernel-mode file for bugfix of vtpn of empty pointer
  - xen/privcmd: add boot control for restricted usage in domU
  - xen/privcmd: unregister xenstore notifier on module exit
  - xen/privcmd: restrict usage in unprivileged domU
  - af_unix: Give up GC if MSG_PEEK intervened.
  - urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - apparmor: fix differential encoding verification
  - ub:hisi-ubus: Synchronize the missing code
  - apparmor: Fix double free of ns_name in aa_replace_profiles()
  - mptcp: pm: in-kernel: always mark signal+subflow endp as used
  - bridge: cfm: Fix race condition in peer_mep deletion
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  - apparmor: fix race on rawdata dereference
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  - net/sched: act_gate: snapshot parameters with RCU on replace
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
  - netfilter: nf_tables: always walk all pending catchall elements
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - netfilter: nf_tables: release flowtable after rcu grace period on error
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
  - netfilter: xt_CT: drop pending enqueued packets on template removal
  - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
  - apparmor: fix memory leak in verify_header
  - wifi: libertas: fix use-after-free in lbs_free_adapter()
  - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
  - urma: Kernel-mode file for bugfix deactivate to apply pid in udma
  - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  - can: bcm: fix locking for bcm_op runtime updates
  - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  - net: prevent NULL deref in ip[6]tunnel_xmit()
  - net: add xmit recursion limit to tunnel xmit functions
  - net: gro: fix outer network offset
  - net: annotate data-races around sk->sk_{data_ready,write_space}
  - net: add proper RCU protection to /proc/net/ptype
  - urma: fix potential deadlock risk in urma_ping
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
  - net: usb: kalmia: validate USB endpoints
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair()
  - urma: use user-specified dev_name when creating agg dev
  - mm: thp: deny THP for files on anonymous inodes
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  - xhci: dbgtty: fix device unregister: fixup
  - tty: introduce and use tty_port_tty_vhangup() helper
  - net: dsa: microchip: Fix error path in PTP IRQ setup
  - can: ucan: Fix infinite loop from zero-length messages
  - net: dsa: microchip: Free previously initialized ports on init failures
  - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
  - selftests: mptcp: join: properly kill background tasks
  - staging: rtl8712: Remove driver using deprecated API wext
  - net: macb: fix unregister_netdev call order in macb_remove()
  - iio: adc: rtq6056: Correct the sign bit index
  - nfsd: Replace clamp_t in nfsd4_get_drc_mem()
  - net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
  - net: dsa: microchip: common: Fix checks on irq_find_mapping()
  - drm/amd/display: Check NULL before accessing
  - drm: sti: fix device leaks at component probe
  - USB: serial: option: add support for Rolling RW101R-GL
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101
  - xhci: dbgtty: fix device unregister
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
  - usb: dwc3: pci: Sort out the Intel device IDs
  - usb: dwc3: pci: add support for the Intel Nova Lake -S
  - usb: renesas_usbhs: Fix synchronous external abort on unbind
  - usb: gadget: f_eem: Fix memory leak in eem_unwrap
  - usb: cdns3: Fix double resource release in cdns3_pci_probe
  - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
  - mptcp: clear scheduled subflows on retransmit
  - firmware: stratix10-svc: fix bug in saving controller data
  - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
  - thunderbolt: Add support for Intel Wildcat Lake
  - drivers/usb/dwc3: fix PCI parent check
  - dm-verity: fix unreliable memory allocation
  - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
  - can: sja1000: fix max irq loop handling
  - atm/fore200e: Fix possible data race in fore200e_open()
  - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
  - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
  - iio: adc: ad7280a: fix ad7280_store_balance_timer()
  - iio: accel: fix ADXL355 startup race condition
  - iio: accel: bmc150: Fix irq assumption regression
  - iio:common:ssp_sensors: Fix an error handling path ssp_probe()
  - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
  - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
  - spi: bcm63xx: fix premature CS deassertion on RX-only transactions
  - spi: nxp-fspi: Propagate fwnode in ACPI case as well
  - spi: nxp-fspi: Support per spi-mem operation frequency switches
  - spi: spi-mem: Add a new controller capability
  - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
  - spi: spi-mem: Allow specifying the byte order in Octal DTR mode
  - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
  - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
  - mailbox: pcc: don't zero error register
  - mailbox: mailbox-test: Fix debugfs_create_dir error checking
  - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
  - iio: st_lsm6dsx: Fixed calibrated timestamp calculation
  - net: fec: do not register PPS event for PEROUT
  - net: fec: do not allow enabling PPS and PEROUT simultaneously
  - net: fec: do not update PEROUT if it is enabled
  - net: fec: cancel perout_timer when PEROUT is disabled
  - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
  - net: dsa: sja1105: simplify static configuration reload
  - net: sxgbe: fix potential NULL dereference in sxgbe_rx()
  - net: lan966x: Fix the initialization of taprio
  - net: aquantia: Add missing descriptor cache invalidation on ATL2
  - platform/x86: intel: punit_ipc: fix memory corruption
  - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing
  - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
  - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
  - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
  - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
  - !20531 [OLK-6.6] Fix CVE-2025-68315
  - !20546 [OLK-6.6] Fix CVE-2025-68727
  - !21588 smb/server: fix return values of smb2_0_server_cmds proc
  - !21506 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !21551 Fix CVE-2026-23414
  - !21549 Fix CVE-2026-23413
  - !21611  nf_tables: nft_dynset: fix possible stateful expression memleak in error path
  - !21610  xdp: Fix CVE-2026-23343
  - !21625 Fix CVE-2026-23411
  - sw64: fix compile error with missing arch-specific header file
  - sw64: enable CONFIG_DRM_FBDEV_EMULATION=y as default
  - !21627  Fix riscv check-build warning
  - !21412 urma: change well-known jetty to UM
  - !21623 sched/fair: scale wake_wide() threshold by SMT width
  - PM: runtime: Fix a race condition related to device removal
  - spi: fix use-after-free on controller registration failure
  - !21594 drivers/ub/sentry: fix memory leak in match_dev_by_local_eid()
  - !21629 urma: fix race condition in async event causing kfree of invalid pointer
  - !21626 urma: check for null topo map in ubcore_get_topo_info_by_agg_eid
  - !21618  apparmor: replace recursive profile removal with iterative approach
  - !21617  apparmor: fix: limit the number of levels of policy namespaces
  - !21484 Fix CVE-2026-23397
  - !21499 Fix CVE-2026-23240
  - RDMA/hns: Fix config the CNP DSCP
  - RDMA/hns: Fix the panic caused by a large number of print
  - sched/fair: scale wake_wide() threshold by SMT width
  - sched/core: fix SCHED_FEAT overflow on 32-bit architectures
  - icmp: fix NULL pointer dereference in icmp_tag_validation()
  - bpf: Fix regsafe() for pointers to packet
  - !21635 urma: Kernel-mode file for bugfix of vtpn of empty pointer
  - !21619  Xen privcmd driver: restrict to target domain at boot when not in dom0 to fix secure boot issue
  - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
  - apparmor: fix side-effect bug in match_char() macro usage
  - urma: fix race condition in async event causing kfree of invalid pointer
  - urma: Kernel-mode file for bugfix of vtpn of empty pointer
  - net/sched: act_ife: Fix metalist update behavior
  - net/sched: act_ife: avoid possible NULL deref
  - !21522  af_unix: Give up GC if MSG_PEEK intervened.
  - !21479 urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - media: dvb-net: fix OOB access in ULE extension header tables
  - !21582 Fix CVE-2026-23409
  - urma: change well-known jetty to UM
  - !21600 ub:hisi-ubus: Synchronize the missing code
  - !21528 Fix CVE-2026-23408
  - Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks"
  - riscv: Replace function-like macro by static inline function
  - drivers/ub/sentry: fix memory leak in match_dev_by_local_eid()
  - apparmor: fix race between freeing data and fs accessing it
  - ub:hisi-ubus: Synchronize the missing code
  - !21477 Fix CVE-2026-23321
  - !21533 Fix CVE-2026-23393
  - !21470 Fix CVE-2026-23304
  - !21338 drivers/ub/sentry: add oom rate limit
  - !21517 Fix CVE-2026-23410
  - !21550 Fix CVE-2026-23351
  - !21560 Fix CVE-2026-23245
  - xen/privcmd: add boot control for restricted usage in domU
  - xen/privcmd: unregister xenstore notifier on module exit
  - xen/privcmd: restrict usage in unprivileged domU
  - apparmor: replace recursive profile removal with iterative approach
  - apparmor: fix: limit the number of levels of policy namespaces
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path
  - xdp: produce a warning when calculated tailroom is negative
  - xdp: use modulo operation to calculate XDP frag tailroom
  - ice: Fix memory leak in ice_set_ringparam()
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
  - !21547 Fix CVE-2026-23310
  - !21558 Fix CVE-2026-23278
  - !21538 Fix CVE-2026-23274
  - !21548 Fix CVE-2026-23340
  - !21561 Fix CVE-2026-23272
  - !21543 Fix CVE-2026-23392
  - !21541 Fix CVE-2026-23270
  - !21542 Fix CVE-2026-23391
  - !21536 Fix CVE-2026-23277
  - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
  - !21531  ACPI/IORT: Add PMCG platform information for 162001900
  - smb/server: update some misguided comment of smb2_0_server_cmds proc
  - smb/server: fix return value of smb2_oplock_break()
  - smb/server: fix return value of smb2_ioctl()
  - smb/server: fix return value of smb2_query_dir()
  - smb/server: fix return value of smb2_notify()
  - smb/server: fix return value of smb2_read()
  - !21500  regmap: maple: free entry on mas_store_gfp() failure
  - drivers/ub/sentry: add oom rate limit
  - apparmor: fix differential encoding verification
  - !21511 Fix CVE-2026-23403
  - !21559  wifi: libertas: fix use-after-free in lbs_free_adapter()
  - !21554  can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
  - urma: check for null topo map in ubcore_get_topo_info_by_agg_eid
  - !21567 urma: Kernel-mode file for bugfix deactivate to apply pid in udma
  - !21556 urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback
  - urma: Kernel-mode file for bugfix deactivate to apply pid in udma
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  - !21476 Fix CVE-2026-23300
  - !21475 Fix CVE-2026-23381
  - !21472 Fix CVE-2026-23362
  - !21474 Fix CVE-2026-23368
  - !21471 Fix CVE-2026-23293
  - !21527  CVE-2026-23276
  - !21525  net: gro: fix outer network offset
  - !21524  net: annotate data-races around sk->sk_{data_ready,write_space}
  - !21523  net: add proper RCU protection to /proc/net/ptype
  - net/sched: act_gate: snapshot parameters with RCU on replace
  - wifi: libertas: fix use-after-free in lbs_free_adapter()
  - netfilter: nf_tables: always walk all pending catchall elements
  - !21552  nvme-fc: release admin tagset if init fails
  - ip6_tunnel: adapt to skb_vlan_inet_prepare() return value change
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons
  - urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback
  - !21544 urma: fix potential deadlock risk in urma_ping
  - can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
  - !21486 Fix CVE-2026-23395
  - !21480 Fix CVE-2026-23371
  - !21507  net: usb: kalmia: validate USB endpoints
  - nvme-fc: release admin tagset if init fails
  - tls: Purge async_hold in tls_decrypt_async_wait()
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  - clsact: Fix use-after-free in init/destroy rollback asymmetry
  - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
  - bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
  - urma: Kernel-mode file for bugfix to move hashtable from alloc to active
  - urma: fix potential deadlock risk in urma_ping
  - !21516  KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - netfilter: nf_tables: release flowtable after rcu grace period on error
  - netfilter: xt_CT: drop pending enqueued packets on template removal
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
  - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
  - bridge: cfm: Fix race condition in peer_mep deletion
  - !21494 cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair()
  - ACPI/IORT: Add PMCG platform information for 162001900
  - arm-smmu-v3: add HIP09A, HIP09B, HIP10C, HIP10CA for 162100602 errata
  - !21530 urma: use user-specified dev_name when creating agg dev
  - urma: use user-specified dev_name when creating agg dev
  - apparmor: Fix double free of ns_name in aa_replace_profiles()
  - net: prevent NULL deref in ip[6]tunnel_xmit()
  - net: add xmit recursion limit to tunnel xmit functions
  - tcp: secure_seq: add back ports to TS offset
  - net: gro: fix outer network offset
  - net: annotate data-races around sk->sk_{data_ready,write_space}
  - net: add proper RCU protection to /proc/net/ptype
  - af_unix: Give up GC if MSG_PEEK intervened.
  - apparmor: fix race on rawdata dereference
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
  - apparmor: fix memory leak in verify_header
  - net: usb: kalmia: validate USB endpoints
  - !21492  mm: thp: deny THP for files on anonymous inodes
  - !21491  net: usb: pegasus: validate USB endpoints
  - nvme-pci: Fix race bug in nvme_poll_irqdisable()
  - !21466  mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - regmap: maple: free entry on mas_store_gfp() failure
  - tls: Fix race condition in tls_sw_cancel_work_tx()
  - !21447 Fix CVE-2026-23303
  - !21120 Fix CVE-2026-23231
  - !21485 [OLK-6.6][linux-6.6.y sync] Backport 6.6.118-6.6.119 LTS Patches
  - mm: thp: deny THP for files on anonymous inodes
  - net: usb: pegasus: validate USB endpoints
  - cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair()
  - !21488 urma: adjust netlink log level of ipourma
  - !21433 urma: adjust the payload length in the ubcore_cm_send_to function
  - urma: adjust netlink log level of ipourma
  - xhci: dbgtty: fix device unregister: fixup
  - tty: introduce and use tty_port_tty_vhangup() helper
  - net: dsa: microchip: Fix error path in PTP IRQ setup
  - can: ucan: Fix infinite loop from zero-length messages
  - net: dsa: microchip: Free previously initialized ports on init failures
  - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
  - tools headers: Update the x86 headers with the kernel sources
  - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
  - nfnetlink_osf: validate individual option lengths in fingerprints
  - selftests: mptcp: join: properly kill background tasks
  - staging: rtl8712: Remove driver using deprecated API wext
  - net: macb: fix unregister_netdev call order in macb_remove()
  - iio: adc: rtq6056: Correct the sign bit index
  - nfsd: Replace clamp_t in nfsd4_get_drc_mem()
  - net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
  - net: dsa: microchip: common: Fix checks on irq_find_mapping()
  - drm/amd/display: Check NULL before accessing
  - drm: sti: fix device leaks at component probe
  - USB: serial: option: add support for Rolling RW101R-GL
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101
  - xhci: dbgtty: fix device unregister
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
  - usb: dwc3: pci: Sort out the Intel device IDs
  - usb: dwc3: pci: add support for the Intel Nova Lake -S
  - usb: renesas_usbhs: Fix synchronous external abort on unbind
  - usb: gadget: f_eem: Fix memory leak in eem_unwrap
  - usb: cdns3: Fix double resource release in cdns3_pci_probe
  - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
  - mptcp: clear scheduled subflows on retransmit
  - firmware: stratix10-svc: fix bug in saving controller data
  - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
  - thunderbolt: Add support for Intel Wildcat Lake
  - drivers/usb/dwc3: fix PCI parent check
  - dm-verity: fix unreliable memory allocation
  - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
  - can: sja1000: fix max irq loop handling
  - atm/fore200e: Fix possible data race in fore200e_open()
  - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
  - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
  - iio: adc: ad7280a: fix ad7280_store_balance_timer()
  - iio: accel: fix ADXL355 startup race condition
  - iio: accel: bmc150: Fix irq assumption regression
  - iio:common:ssp_sensors: Fix an error handling path ssp_probe()
  - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
  - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
  - spi: bcm63xx: fix premature CS deassertion on RX-only transactions
  - spi: nxp-fspi: Propagate fwnode in ACPI case as well
  - spi: nxp-fspi: Support per spi-mem operation frequency switches
  - spi: spi-mem: Add a new controller capability
  - spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
  - spi: spi-mem: Allow specifying the byte order in Octal DTR mode
  - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
  - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
  - mailbox: pcc: don't zero error register
  - mailbox: mailbox-test: Fix debugfs_create_dir error checking
  - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
  - iio: st_lsm6dsx: Fixed calibrated timestamp calculation
  - net: fec: do not register PPS event for PEROUT
  - net: fec: do not allow enabling PPS and PEROUT simultaneously
  - net: fec: do not update PEROUT if it is enabled
  - net: fec: cancel perout_timer when PEROUT is disabled
  - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
  - net: dsa: sja1105: simplify static configuration reload
  - net: sxgbe: fix potential NULL dereference in sxgbe_rx()
  - net: lan966x: Fix the initialization of taprio
  - net: aquantia: Add missing descriptor cache invalidation on ATL2
  - platform/x86: intel: punit_ipc: fix memory corruption
  - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing
  - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
  - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
  - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
  - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
  - !21451 [OLK-6.6][linux-6.6.y sync] Backport 6.6.117-6.6.118 LTS Patches
  - !21473 net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
  - mptcp: pm: in-kernel: always mark signal+subflow endp as used
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  - net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
  - can: bcm: fix locking for bcm_op runtime updates
  - net/ipv4:scmtcp: fix unable to release scmtcp sock when sendmsg itself
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
  - mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
  - pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
  - mptcp: fix a race in mptcp_pm_del_add_timer()
  - HID: amd_sfh: Stop sensor before starting
  - pmdomain: imx: Fix reference count leak in imx_gpc_remove
  - pmdomain: imx-gpc: Convert to platform remove callback returning void
  - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
  - uio_hv_generic: Set event for all channels on the device
  - tracing/tools: Fix incorrcet short option in usage text for --threads
  - ALSA: usb-audio: fix uac2 clock source at terminal parser
  - s390/mm: Fix __ptep_rdp() inline assembly
  - kconfig/nconf: Initialize the default locale at startup
  - kconfig/mconf: Initialize the default locale at startup
  - net: tls: Cancel RX async resync request on rcd_delta overflow
  - selftests: net: use BASH for bareudp testing
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations
  - scsi: core: Fix a regression triggered by scsi_host_busy()
  - cifs: fix typo in enable_gcm_256 module parameter
  - bcma: don't register devices disabled in OF
  - LoongArch: Use UAPI types in ptrace UAPI header
  - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
  - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
  - s390/ctcm: Fix double-kfree
  - net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
  - net: dsa: hellcreek: fix missing error handling in LED registration
  - drm/tegra: Add call to put_pid()
  - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
  - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
  - xfrm: Prevent locally generated packets from direct output in tunnel mode
  - xfrm: Determine inner GSO type from packet inner protocol
  - drm/amd/display: Move sleep into each retry for retrieve_link_cap()
  - drm/amd/display: Increase DPCD read retries
  - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
  - drm/tegra: dc: Fix reference leak in tegra_dc_couple()
  - mptcp: do not fallback when OoO is present
  - mptcp: avoid unneeded subflow-level drops
  - mptcp: fix premature close in case of fallback
  - mptcp: fix ack generation for fallback msk
  - mptcp: fix race condition in mptcp_schedule_work()
  - LoongArch: Don't panic if no valid cache info for PCI
  - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
  - MIPS: Malta: Fix !EVA SOC-it PCI MMIO
  - Input: pegasus-notetaker - fix potential out-of-bounds access
  - Input: imx_sc_key - fix memory corruption on unload
  - Input: goodix - add support for ACPI ID GDIX1003
  - Input: cros_ec_keyb - fix an invalid memory access
  - net: dsa: microchip: lan937x: Fix RGMII delay tuning
  - smb: client: introduce close_cached_dir_locked()
  - mptcp: Disallow MPTCP subflows from sockmap
  - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
  - shmem: fix tmpfs reconfiguration (remount) when noswap is set
  - mtd: rawnand: cadence: fix DMA device NULL pointer dereference
  - smb: client: Don't log plaintext credentials in cifs_set_cifscreds
  - urma: adjust the payload length in the ubcore_cm_send_to function
  - tools headers: Update the KVM headers with the kernel sources
  - KVM: SVM: Add Idle HLT intercept support
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept
  - perf vendor events amd: Update Zen 5 data cache fill events
  - perf vendor events amd: Add Zen 5 data fabric metrics
  - perf vendor events amd: Add Zen 5 data fabric events
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  - ntfs3: Fix uninit buffer allocated by __getname()
  - f2fs: fix to detect potential corrupted nid in free_nid_list


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-149.0.0.135
changelog:
  - !22077 bpf: Fix the use of prog->axu->sleepable
  - bpf: Fix the use of prog->axu->sleepable
  - !21981 Fix CVE-2026-31415
  - !21980 Fix CVE-2026-31416
  - !21984 Fix CVE-2026-31427
  - !21979 Fix CVE-2026-31428
  - !21885 AMD Venice Machine Check Exception (MCE) rework patches backport to openEuler 6.6 kernel.
  - !21876 [Hygon][6.6][Feature] pwm: dwc: Add support for Hygon pwm controller
  - !21537 [Hygon][6.6][Feature]EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h
  - !21358 [Hygon][6.6][Feature] EDAC/amd64: Add support for Hygon family 18h model 18h
  - !21818 update rnpm driver to version 1.0.0.
  - !22035 v3  critical err extend
  - !21882 v2  mainline bpf patch
  - !22020 ub: udma: fix a bug related to free rcu mem
  - !21940 [OLK-6.6] ub: ubase: 4 bugfix changes
  - numa: add critical_err sysfs interface for remote node recovery
  - mm: mark node as critical_err on remote RAS error
  - !21916  Fix CVE-2026-31528
  - !21990 KVM: arm64: Add a module param to enable/disable pv_preempted dynamically
  - !21962 bugfixes for vtimer-irqbypass & HIP12 vtimer support
  - ub: udma: fix a bug related to free rcu mem
  - ub: ubase: Add a soft dependency declaration for the ubase driver
  - ub: ubase: Rectify the problem that the shutdown process ends and logs are printed
  - ub: ubase: Verify the length of ctrlq rq msg
  - !21971 net: hns3: set the freed pointer to NULL
  - !21995  bpf: Load vmlinux btf for any struct_ops map
  - !21994 [OLK-6.6][linux-6.6.y sync] Backport 6.6.120-6.6.121 LTS Patches
  - !20877 [OLK-6.6][LoongArch] Loongarch 架构下 CPU 离线时存在 vCPU 线程高 CPU 使用率问题。
  - !21296 [OLK-6.6][LoongArch] LoongArch ACPI/cpufreq 子系统问题修复合集
  - !21686 AMD Venice ZEN6, EDAC and HWMON support patches for openEuler 6.6 kernel
  - gpio: rockchip: Stop calling pinctrl for set_direction
  - ub: ubase: debugfs supports tpg context query
  - bpf: Load vmlinux btf for any struct_ops map
  - gpio: pca953x: fix wrong error probe return value
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
  - ASoC: fsl_sai: Add missing registers to cache default
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
  - ALSA: usb-audio: Update for native DSD support quirks
  - can: j1939: make j1939_session_activate() fail if device is no longer registered
  - drm/amd/display: Fix DP no audio issue
  - powercap: fix sscanf() error return value handling
  - powercap: fix race condition in register_control_type()
  - NFS: trace: show TIMEDOUT instead of 0x6e
  - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  - ALSA: ac97bus: Use guard() for mutex locks
  - HID: quirks: work around VID/PID conflict for appledisplay
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
  - net/mlx5e: Don't print error message due to invalid module
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
  - inet: ping: Fix icmp out counting
  - net: mscc: ocelot: Fix crash when adding interface under a lag
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule()
  - gpio: pca953x: handle short interrupt pulses on PCAL devices
  - gpio: pca953x: Add support for level-triggered interrupts
  - gpio: pca953x: Utilise temporary variable for struct device
  - gpio: pca953x: Utilise dev_err_probe() where it makes sense
  - netfilter: nft_synproxy: avoid possible data-race on update operation
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
  - ARM: dts: imx6q-ba16: fix RTC interrupt level
  - arm64: dts: add off-on-delay-us for usdhc2 regulator
  - scsi: ufs: core: Fix EH failure after W-LUN resume error
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
  - NFS: Fix up the automount fs_context to use the correct cred
  - NFSv4: ensure the open stateid seqid doesn't go backwards
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels
  - alpha: don't reference obsolete termio struct for TC* constants
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
  - csky: fix csky_cmpxchg_fixup not working
  - nfsd: convert to new timestamp accessors
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
  - gpio: rockchip: mark the GPIO controller as sleeping
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
  - drm/pl111: Fix error handling in pl111_amba_probe
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler
  - lib/crypto: aes: Fix missing MMU protection for AES S-box
  - mei: me: add nova lake point S DID
  - btrfs: always detect conflicting inodes when logging inode refs
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  - atm: Fix dma_free_coherent() size
  - NFSD: Fix permission check for read access to executable-only files
  - KVM: arm64: fix build without VIRT_VTIMER_PV_STATUS
  - irqchip/mbigen: hardcode gicr_base for HIP12
  - irqchip/mbigen: add HIP12 support for vtimer irq bypass
  - irqchip/gic-v3-its: Read ITS_VERSION with vendor checking
  - KVM: arm64: fix mbigen vtimer interrupt loss in save/restore
  - irqchip/mbigen: add check for GICv4.1 before enabling vtimer
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
  - KVM: arm64: Add a module param to enable/disable pv_preempted dynamically
  - !21970 urma: add rate limit for high-frequency error logs in ubmad and ubcm
  - ipv6: avoid overflows in ip6_datagram_send_ctl()
  - netfilter: nfnetlink_log: account for netlink header size
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
  - !21935 ub:hisi-ubus: add soft dep of ummu for hisi_ubus
  - !21969  kprobes: avoid crash when rmmod/insmod after ftrace killed
  - net: hns3: set the freed pointer to NULL
  - net: hns3: add support to query/set pfc_prevention_tout for ethtool
  - urma: add rate limit for high-frequency error logs in ubmad and ubcm
  - net: hns3: debugfs support for dumping fd rules
  - net: hns3: support tc flow for vf
  - net: hns3: support FLOW_DISSECTOR_KEY_IP and FLOW_DISSECTOR_KEY_ENC_KEYID for tc flow
  - net: hns3: support two more actions for tc flow
  - net: hns3: Improved the unused_tuple parameter setting.
  - net: hns3: adjust add_cls_flower() for support more action
  - net: hns3: Clear the static alarm about 'no previous prototype'
  - net: hns3: Clear the static alarm about discarding the 'const' qualifier
  - !21819  Support sched ext bpf-part
  - kprobes: avoid crash when rmmod/insmod after ftrace killed
  - !21857 hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails
  - !21903 ptt: Adapt the PTT tune event name in the document match to the actual
  - !21852 scsi: hisi_sas: Correct the printing format issues
  - !21914  bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  - !21960 udma：fix ub udma set dev name style
  - !21955 urma: check driver and wq duration for conn_err
  - !21956 urma: rate-limit error logs across ubcore
  - udma：fix ub udma set dev name style
  - urma: rate-limit error logs across ubcore
  - !21932 urma: fix ubcore_get_device_by_eid without put.
  - ub:hisi-ubus: add soft dep of ummu for hisi_ubus
  - !21396 KVM: arm64: Add Support for MBIGEN vtimer's pv active status
  - urma: fix ubcore_get_device_by_eid without put.
  - kvm: arm64: set default early time for HIP12
  - openeuler_defconfig: Enable CONFIG_VIRT_TIMER_EARLY_INJECT by default
  - KVM: arm64: Add KVM_CAP_ARM_TIMER_EARLY_INJECT capability
  - clocksource/drivers/arm_arch_timer: Use PV timer early inject interface
  - arm64: paravirt: Implement timer early inject PV guest support
  - kvm: arm64: Implement timer early inject PV hypcall handling
  - kvm: arm64: Add VIRT_TIMER_EARLY_INJECT configuration and SMCCC definitions
  - openeuler_defconfig: Enable CONFIG_VIRT_VTIMER_PV_STATUS by default
  - KVM: arm64: Add KVM_CAP_ARM_HISI_PVTIMER_STATUS capability
  - !21915 drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write and fix input length validation in proc_oom_rate_limit_write
  - !21929 urma: use user-specified ue_idx for bonding import exchange
  - urma: use user-specified ue_idx for bonding import exchange
  - !21701 urma: fix ubcore_get_device_by_eid uaf.
  - !21706 urma: fix double put ubagg_dev.
  - !21919  sched/fair: Clear rel_deadline when initializing forked entities
  - KVM: arm64: Implement vtimer active status MMIO handling
  - KVM: arm64: vgic: Add is_uaccess parameter for active state handling
  - irqchip/gic-v3: Report vtimer active status to hypervisor
  - arm64: paravirt: Add pvtimer status support for guest
  - KVM: arm64: Provide VCPU attributes for pvtimer status
  - KVM: arm64: Add vCPU pvtimer_status structure and initialization
  - !21883 urma: Fix UAF risk in the ubagg_dev_exists function
  - !21899 [Hygon][6.6][bugfix] Fix switch_kernel_fpu_prepare in Hygon non-atomic NT copy path
  - urma: fix double put ubagg_dev.
  - !21906 mfs: handle file system umount event
  - urma: fix ubcore_get_device_by_eid uaf.
  - sched/fair: Clear rel_deadline when initializing forked entities
  - !21889 urma: ubcore_get_tp_list log ratelimit
  - perf: Make sure to use pmu_ctx->pmu for groups
  - perf: Fix kabi breakage of perf_output_handle
  - perf: Avoid the read if the count is already updated
  - perf: Extract a few helpers
  - scsi: hisi_sas: Fix the risk of overflow in bitwise logical operations
  - !21908 ub/ubmempfd: Fix issues from AI  and ub/ubdevshm: Bugfix for multi-Ops with same va, optimize print format and correct boundary check and reference count misused
  - EDAC/amd64: Adjust the maximum number of memory controllers per node to 1 for Hygon family 18h model 18h
  - drivers/ub/sentry: fix sscanf buffer overflow in proc_client_info_write
  - drivers/ub/sentry: fix input length validation in proc_oom_rate_limit_write
  - urma: Add rate limiting to loggin within ubcore_get_tp_list and connection related error routines to mitigate soft lockup risks from excessive printk output, and resolve orthographic errors
  - ub/ubmempfd: Fix issues from AI
  - ub/ubdevshm: Optimize print format
  - ub/ubdevshm: Fix issues from AI.
  - scsi: hisi_sas: Correct printing format issues
  - !21898 Fix CVE-2026-31473
  - EDAC/amd64: Add support for Hygon family 18h model 18h
  - EDAC/amd64: Convert Hygon family 18h model checks to switch-case
  - bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  - !21910 urma: switch to acalloc for large memory allocation
  - !21891 urma: fix wk-jetty send implementation
  - urma: switch to acalloc for large memory allocation
  - urma: fix wk-jetty send implementation
  - !21894  sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
  - ub/ubdevshm: Bugfix for multi-Ops with same va.
  - ub/ubdevshm: Optimize functions to improve readability.
  - mfs: handle file system umount event
  - mfs: notify user-space programs when it is being unmounted
  - !21755 AMD Venice NB & SMN patches backport to OpenEuler 6.6 kernel
  - ptt: Adapt the PTT tune event name in the document match to the actual names in the code.
  - !21030 [OLK-6.6][LoongArch] LoongArch 下 KVM 在 MMU 映射变更时存在 LLBCTL 寄存器未清除问题。
  - !21031 [OLK-6.6][LoongArch] Loongarch 下 KVM 在用户模式 VMM 中存在无法处理特殊 hypercall 服务的现象。
  - !21294 [OLK-6.6][LoongArch] LoongArch KVM 子系统问题修复合集
  - x86/fpu: fix wrong thread_flag check in switch_kernel_fpu_prepare
  - x86/copy_user_avx2: add sfence before vzeroupper in fixup path
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  - !21895  Fix CVE-2026-31467
  - erofs: add GFP_NOIO in the bio completion if needed
  - sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
  - !21884 v2  fix CVE-2026-31398
  - Euler: configs: enable AMD NODE and HSMP drivers in x86 defconfig
  - !21890 ub: udma: Delete the mailbox memory allocation and release in UDMA
  - LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads
  - LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed
  - LoongArch: KVM: rename extioi to eiointc
  - LoongArch: KVM: Remove duplicated cache attribute setting
  - LoongArch: KVM: Set page with write attribute if dirty track disabled
  - LoongArch: KVM: Simplify kvm_deliver_intr()
  - LoongArch: KVM: Rework kvm_send_pv_ipi()
  - LoongArch: KVM: Restore guest PMU if it is enabled
  - LoongArch: KVM: Add delay until timer interrupt injected
  - LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code
  - LoongArch: KVM: Add PTW feature detection on new hardware
  - LoongArch: KVM: Remove unused returns and semicolons
  - LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits
  - LoongArch: KVM: Add ecode parameter for exception handlers
  - LoongArch: KVM: Fully clear some CSRs when VM reboot
  - LoongArch: KVM: Fix multiple typos of KVM code
  - LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel()
  - LoongArch: KVM: Remove unnecessary header include path
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode
  - LoongArch: KVM: Fix typo issue about GCFG feature detection
  - LoongArch: KVM: Protect kvm_check_requests() with SRCU
  - LoongArch: KVM: Fix GPA size issue about VM
  - LoongArch: KVM: Adapt pch_pic alignment check
  - LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
  - LoongArch: KVM: Adapt send_ipi_data() stack protector fix
  - LoongArch: KVM: Make function kvm_own_lbt() robust
  - ub: udma: Delete the mailbox memory allocation and release in UDMA
  - ub: ubase: Release the MAILBOX memory when AE is received
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients
  - x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs
  - mm/rmap: fix incorrect pte restoration for lazyfree folios
  - mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure
  - mm: remove boolean output parameters from folio_pte_batch_ext()
  - mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags()
  - mm: smaller folio_pte_batch() improvements
  - mm: convert FPB_IGNORE_* into FPB_RESPECT_*
  - mm: fix folio_pte_batch() on XEN PV
  - x86/mce: Handle AMD threshold interrupt storms
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems
  - x86/mce: Add support for physical address valid bit
  - x86/mce: Save and use APEI corrected threshold limit
  - x86/mce/amd: Define threshold restart function for banks
  - x86/mce/amd: Remove redundant reset_block()
  - x86/mce/amd: Support SMCA Corrected Error Interrupt
  - x86/mce/amd: Enable interrupt vectors once per-CPU on SMCA systems
  - x86/mce: Unify AMD DFR handler with MCA Polling
  - x86/mce: Unify AMD THR handler with MCA Polling
  - x86/mce: Add a clear_bank() helper
  - x86/msr: Rename 'mce_wrmsrl()' to 'mce_wrmsrq()'
  - x86/msr: Rename 'mce_rdmsrl()' to 'mce_rdmsrq()'
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers
  - tracing: Add __print_dynamic_array() helper
  - x86/mce: Move machine_check_poll() status checks to helper functions
  - x86/mce: Separate global and per-CPU quirks
  - x86/mce: Convert family/model mixed checks to VFM-based checks
  - x86/cpu/intel: Replace PAT erratum model/family magic numbers with symbolic IFM references
  - x86/mce: Cleanup bank processing on init
  - x86/mce: Do 'UNKNOWN' vendor check early
  - x86/mce: Break up __mcheck_cpu_apply_quirks()
  - x86/mce: Make four functions return bool
  - x86/mce: Make several functions return bool
  - x86/mce: Add wrapper for struct mce to export vendor specific info
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error()
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields
  - x86/mce: Rename mce_setup() to mce_prep_record()
  - x86/mce: Remove unused variable and return value in machine_check_poll()
  - x86/mce: Switch to new Intel CPU model defines
  - x86/mce: Dynamically size space for machine check records
  - x86/mce: Remove redundant check from mce_device_create()
  - x86/mce: Cleanup mce_usable_address()
  - x86/mce: Define amd_mce_usable_address()
  - x86/MCE/AMD: Split amd_mce_is_memory_error()
  - x86/cpu: Clear SVM feature if disabled by BIOS
  - x86/mce: Define BSP-only SMCA init
  - x86/mce: Define BSP-only init
  - x86/mce: Set CR4.MCE last during init
  - x86/mce: Remove __mcheck_cpu_init_early()
  - x86/mce/amd: Put list_head in threshold_bank
  - x86/mce/amd: Remove shared threshold bank plumbing
  - x86/mce/amd: Remove smca_banks_map
  - x86/mce/amd: Remove return value for mce_threshold_{create,remove}_device()
  - x86/mce/amd: Rename threshold restart function
  - x86/mce: Ensure user polling settings are honored when restarting timer
  - x86/mce: Add per-bank CMCI storm mitigation
  - x86/mce: Remove old CMCI storm mitigation code
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6
  - x86/cpufeatures: Free up unused feature bits
  - urma: Fix UAF risk in the ubagg_dev_exists function
  - bpf: Fix incorrect pruning due to atomic fetch precision tracking
  - bpf: reject direct access to nullable PTR_TO_BUF pointers
  - bpf: Reject sleepable kprobe_multi programs at attach time
  - cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000
  - LoongArch: Adapt upstream backport for openEuler
  - !20267 [OLK-6.6] Backported Turin readiness patches for openEuler Phase-1
  - !21332 AMD Turin PREFETCHI support patches for openEuler 6.6 kernel
  - !21867 urma: fix kernel irq profiling
  - !21868 urma: fix peer reconnection notification after ubagg failover
  - pwm: dwc: Add support for Hygon pwm controller
  - urma: fix kernel irq profiling
  - !21746  xSched dmem
  - !21824 v2  Introduce xSched dmem
  - !21865 urma: fix the panic issue caused by ipourma abnormal exit
  - !21866 urma: add configurable retransmission count limit
  - urma: fix peer reconnection notification after ubagg failover
  - urma: add configurable retransmission count limit
  - !21859  net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
  - !21837 [OLK-6.6][linux-6.6.y sync][Part 3/3] Backport 6.6.119-6.6.120 LTS Patches
  - !21858 ub: udma: fix a bug related to get tp list.
  - urma: fix the panic issue caused by ipourma abnormal exit
  - hwtracing: hisi_ptt: Add an error handling when pcim_iomap_table fails to obtain the device's I/O map table.
  - hwtracing: hisi_ptt: Add an error handler when the PTT device returns an incorrect size.
  - hwtracing: hisi_ptt: Corrcet some spelling mistakes in hisi_ptt driver
  - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
  - !21855  perf/core: Fix race between perf_event_exit_task and perf_pending_task
  - ub: udma: fix a bug related to get tp list.
  - !21176 v4  Fix CVE-2025-21696.
  - !21844  mm/numa_remote: set default distance between remote nodes to 255
  - !21839 urma: add timeout mechanism for TP state waiting loop
  - !21840 ub: udma: bugfix related to stars jfc db.
  - !21856  net: usb: kaweth: validate USB endpoints
  - !21854  arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys
  - !21845 RDMA/hns: Support setting GSI QP SL
  - net: usb: kaweth: validate USB endpoints
  - perf/core: Fix race between perf_event_exit_task and perf_pending_task
  - !21846  ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
  - !21851  drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
  - arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys
  - urma: add timeout mechanism for TP state waiting loop
  - !21847 urma: fix log implementation in urma kmod
  - !21848 urma: fix deactivate tp failure under RM share TP mode
  - urma: fix log implementation in urma kmod
  - !21849 urma: fix tjetty creation anomaly in the first connection creation
  - drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
  - urma: fix tjetty creation anomaly in the first connection creation
  - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
  - net: macb: Introduce gem_init_rx_ring()
  - net: macb: queue tie-off or disable during WOL suspend
  - net: macb: Shuffle the tx ring before enabling tx
  - net: macb: Fix tx/rx malfunction after phy link down and up
  - hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
  - net: openvswitch: Avoid releasing netdev before teardown completes
  - ext4: fix error message when rejecting the default hash
  - ext4: filesystems without casefold feature cannot be mounted with siphash
  - Revert "iommu/amd: Skip enabling command/event buffers for kdump"
  - firmware: arm_scmi: Fix unused notifier-block in unregister
  - tty: fix tty_port_tty_*hangup() kernel-doc
  - pwm: stm32: Always program polarity
  - virtio_console: fix order of fields cols and rows
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result()
  - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs()
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration()
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions()
  - mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out()
  - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
  - mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
  - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
  - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
  - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter()
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
  - net: Allow to use SMP threads for backlog NAPI.
  - net: Remove conditional threaded-NAPI wakeup based on task state.
  - sched/fair: Small cleanup to sched_balance_newidle()
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
  - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
  - media: mediatek: vcodec: Use spinlock for context list protection lock
  - media: amphion: Remove vpu_vb_is_codecconfig
  - media: amphion: Make some vpu_v4l2 functions static
  - media: amphion: Add a frame flush mode for decoder
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
  - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list
  - media: verisilicon: Fix CPU stalls on G2 bus error
  - media: verisilicon: g2: Use common helpers to compute chroma and mv offsets
  - media: verisilicon: Store chroma and motion vectors offset
  - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
  - f2fs: use global inline_xattr_slab instead of per-sb slab cache
  - f2fs: fix to propagate error from f2fs_enable_checkpoint()
  - f2fs: fix to avoid updating compression context during writeback
  - f2fs: drop inode from the donation list when the last file is closed
  - f2fs: keep POSIX_FADV_NOREUSE ranges
  - f2fs: remove unused GC_FAILURE_PIN
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity
  - drm/mediatek: Fix probe resource leaks
  - drm/mediatek: Fix probe memory leak
  - drm/amdgpu: Forward VMID reservation errors
  - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
  - pmdomain: imx: Fix reference count leak in imx_gpc_probe()
  - pmdomain: Use device_get_match_data()
  - wifi: mac80211: Discard Beacon frames to non-broadcast address
  - lockd: fix vfs_test_lock() calls
  - mptcp: fallback earlier on simult connection
  - PCI: brcmstb: Fix disabling L0s capability
  - ARM: dts: microchip: sama7g5: fix uart fifo size to 32
  - gpiolib: acpi: Add quirk for Dell Precision 7780
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
  - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
  - usb: ohci-nxp: fix device leak on probe failure
  - usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  - mm/ksm: fix exec/fork inheritance support for prctl
  - wifi: mt76: Fix DTS power-limits on little endian systems
  - btrfs: don't rewrite ret from inode_permission
  - gfs2: fix freeze error handling
  - jbd2: fix the inconsistency between checksum and data in memory for journal sb
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - ALSA: wavefront: Clear substream pointers on close
  - ALSA: wavefront: Use guard() for spin locks
  - ALSA: wavefront: Fix integer overflow in sample size validation
  - ALSA: wavefront: Use standard print API
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
  - drm/msm/dpu: Add missing NULL pointer check for pingpong interface
  - drm/mgag200: Fix big-endian support
  - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
  - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
  - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open()
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
  - net: usb: sr9700: fix incorrect command used to write single register
  - nfsd: Drop the client reference in client_states_open()
  - LoongArch: BPF: Zero-extend bpf_tail_call() index
  - fjes: Add missing iounmap in fjes_hw_init()
  - samples/ftrace: Adjust LoongArch register restore order in direct calls
  - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
  - idr: fix idr_alloc() returning an ID out of range
  - kasan: refactor pcpu kasan vmalloc unpoison
  - compiler_types.h: add "auto" as a macro for "__auto_type"
  - LoongArch: Use unsigned long for _end and _text
  - LoongArch: Use __pmd()/__pte() for swap entry conversions
  - LoongArch: Fix build errors for CONFIG_RANDSTRUCT
  - LoongArch: Add new PCI ID for pci_fixup_vgadev()
  - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
  - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
  - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
  - media: amphion: Cancel message work before releasing the VPU core
  - media: vpif_display: fix section mismatch
  - media: vpif_capture: fix section mismatch
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
  - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
  - media: TDA1997x: Remove redundant cancel_delayed_work in probe
  - media: samsung: exynos4-is: fix potential ABBA deadlock on init
  - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
  - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
  - media: cec: Fix debugfs leak on bus_register() failure
  - fbdev: tcx.c fix mem_map to correct smem_start offset
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
  - fbdev: gbefb: fix to use physical address instead of dma address
  - dm-bufio: align write boundary on physical block size
  - dm-ebs: Mark full buffer dirty even on partial write
  - firmware: stratix10-svc: Add mutex in stratix10 memory management
  - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
  - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
  - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
  - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
  - media: rc: st_rc: Fix reset control resource leak
  - mfd: max77620: Fix potential IRQ chip conflict when probing two devices
  - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
  - clk: samsung: exynos-clkout: Assign .num before accessing .hws
  - leds: leds-lp50xx: Enable chip before any communication
  - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
  - leds: leds-lp50xx: Allow LED 0 to be added to module bank
  - powerpc, mm: Fix mprotect on book3s 32-bit
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
  - HID: logitech-dj: Remove duplicate error logging
  - iommu: disable SVA when CONFIG_X86 is set
  - iommu/tegra: fix device leak on probe_device()
  - iommu/sun50i: fix device leak on of_xlate()
  - iommu/qcom: fix device leak on of_xlate()
  - iommu/omap: fix device leaks on probe_device()
  - iommu/mediatek: fix device leak on of_xlate()
  - iommu/mediatek-v1: fix device leaks on probe()
  - iommu/mediatek-v1: fix device leak on probe_device()
  - iommu/ipmmu-vmsa: fix device leak on of_xlate()
  - iommu/exynos: fix device leak on of_xlate()
  - iommu/apple-dart: fix device leak on of_xlate()
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
  - ASoC: qcom: q6adm: the the copp device only during last instance
  - ASoC: qcom: q6asm-dai: perform correct state check before closing
  - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr
  - ASoC: stm32: sai: fix OF node leak on probe
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure
  - ASoC: stm32: sai: fix device leak on probe
  - ntfs: Do not overwrite uptodate pages
  - selftests/ftrace: traceonoff_triggers: strip off names
  - !21826 Fix CVE-2026-23448
  - urma: fix deactivate tp failure under RM share TP mode
  - !21834 net: add sockopt TCP_UBS_HANDSHAKE
  - !21760 Fix CVE-2026-31392
  - !21833  FIX CVE-2026-23473
  - ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
  - xsk: introduce helper to determine rxq->frag_size
  - RDMA/hns: Support setting GSI QP SL
  - RDMA/hns: Fix warning in poll cq direct mode
  - RDMA/hns: Fix missing CQE when UD QP use different SL
  - mm/numa_remote: set default distance between remote nodes to 255
  - !21295 [OLK-6.6][LoongArch] LoongArch EFI 子系统问题修复合集
  - !21297 [OLK-6.6][LoongArch] LoongArch KASAN 相关问题修复合集
  - !21298 [OLK-6.6][LoongArch] LoongArch 架构及杂项问题修复合集
  - ub: udma: bugfix related to stars jfc db.
  - !21822 urma: fix of adapt to bondp_import
  - net: add sockopt TCP_UBS_HANDSHAKE
  - !21827 Fix CVE-2026-31426
  - !21835  ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors
  - !21836  jfs: add dmapctl integrity check to prevent invalid operations
  - RDMA/bnxt_re: fix dma_free_coherent() pointer
  - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
  - ksmbd: Fix memory leak in get_file_all_info()
  - RDMA/bnxt_re: Fix to use correct page size for PDE table
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
  - RDMA/efa: Remove possible negative shift
  - RDMA/irdma: avoid invalid read in irdma_net_event
  - net: rose: fix invalid array index in rose_kill_by_device()
  - net: stmmac: fix the crash issue for zero copy XDP_TX action
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
  - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
  - net: dsa: b53: skip multicast entries for fdb_dump()
  - firewire: nosy: Fix dma_free_coherent() size
  - genalloc.h: fix htmldocs warning
  - selftests: net: fix "buffer overflow detected" for tap.c
  - amd-xgbe: reset retries and mode on RX adapt failures
  - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
  - platform/x86: msi-laptop: add missing sysfs_remove_group()
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
  - net: mdio: aspeed: add dummy read to avoid read-after-write issue
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb
  - i40e: fix scheduling in set_rx_mode
  - wifi: mac80211: do not use old MBSSID elements
  - iommu/mediatek: fix use-after-free on probe deferral
  - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
  - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
  - hwmon: (max16065) Use local variable to avoid TOCTOU
  - i2c: amd-mp2: fix reference leak in MP2 PCI device
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args
  - rpmsg: glink: fix rpmsg device leak
  - jfs: add dmapctl integrity check to prevent invalid operations
  - ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors
  - rnpm: update rnpm driver to version 1.0.0.
  - io_uring/poll: fix multishot recv missing EOF on wakeup race
  - io_uring/poll: improve readability of poll reference decrementing
  - urma: fix of adapt to bondp_import
  - !21788 Fix CVE-2026-23455
  - !21789 Fix CVE-2026-23449
  - !21815 Fix CVE-2026-23456
  - !21787 Fix CVE-2026-23457
  - !21785 Fix CVE-2026-23458
  - !21781 Fix CVE-2026-23439
  - !21786 Fix CVE-2026-23442
  - !21777 Fix CVE-2026-23450
  - !21780 Fix CVE-2026-31400
  - !21821 urma: fix psn exchange anomaly when import jfr
  - LoongArch: efi: avoid double calling set_virtual_map()
  - LoongArch: Fix the improper handling of the set_virtual_map's return value
  - ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
  - LoongArch: Disable instrumentation for setup_ptwalker()
  - !21817 mfs: remove anon_file item from struct mfs_cache_object
  - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
  - LoongArch: Remove some code if kasan_arch_is_ready() is false
  - !21689  spi: fix statistics allocation
  - !21624 mfs: fix race condition issue in try_hook_fd()
  - !21299 [OLK-6.6][LoongArch] LoongArch 驱动子系统问题修复合集
  - !21745 [OLK-6.6] LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm'
  - !21776 arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning
  - xSched/dmem: introduce xsched_dmem_cleanup()
  - xSched/dmem: introduce xsched_dmem_free()
  - xSched/dmem: introduce xsched_dmem_alloc()
  - xSched/dmem: add support for XPU devices to register/unregister dmem regions
  - urma: fix psn exchange anomaly when import jfr
  - !21798 urma: fix psn exchange anomaly under share_tp mode
  - !19506 [OLK-6.6]Update mucse rnp driver to 1.0.0
  - !19633 [OLK-6.6]RNPGBE: NET: Update driver to 1.0.0
  - bpf, docs: Fix broken link to renamed bpf_iter_task_vmas.c
  - selftests/bpf: Add file_read_pattern to gitignore
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED
  - libbpf: Fix return zero when elf_begin failed
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
  - selftests/bpf: Use -4095 as the bad address for bits iterator
  - selftests/bpf: Add three test cases for bits_iter
  - bpf: Use __u64 to save the bits in bits iterator
  - bpf: Check the validity of nr_words in bpf_iter_bits_new()
  - bpf: Add bpf_mem_alloc_check_size() helper
  - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
  - selftests/bpf: Check if distilled base inherits source endianness
  - libbpf: Ensure new BTF objects inherit input endianness
  - bpf: Fix a crash when btf_parse_base() returns an error pointer
  - selftests/bpf: test passing iterator to a kfunc
  - bpf: allow passing struct bpf_iter_<type> as kfunc arguments
  - bpf: extract iterator argument type and name validation logic
  - libbpf: Fix license for btf_relocate.c
  - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
  - libbpf: Fix error handling in btf__distill_base()
  - bpf: fix build when CONFIG_DEBUG_INFO_BTF[_MODULES] is undefined
  - selftests/bpf: Add kfunc_call test for simple dtor in bpf_testmod
  - kbuild,bpf: Add module-specific pahole flags for distilled base BTF
  - libbpf,bpf: Share BTF relocate-related code with kernel
  - libbpf: Split field iter code into its own file kernel
  - bpf: Fix kabi breakage in struct module
  - module, bpf: Store BTF base pointer in struct module
  - libbpf: BTF relocation followup fixing naming, loop logic
  - resolve_btfids: Handle presence of .BTF.base section
  - libbpf: Make btf_parse_elf process .BTF.base transparently
  - selftests/bpf: Extend distilled BTF tests to cover BTF relocation
  - libbpf: Split BTF relocation
  - selftests/bpf: Test distilled base, split BTF generation
  - libbpf: Add btf__distill_base() creating split BTF with distilled base BTF
  - libbpf: Remove callback-based type/string BTF field visitor helpers
  - bpftool: Use BTF field iterator in btfgen
  - libbpf: Make use of BTF field iterator in BTF handling code
  - libbpf: Make use of BTF field iterator in BPF linker code
  - libbpf: Add BTF field iterator
  - selftests/bpf: modify test_loader that didn't support running bpf_prog_type_syscall programs
  - selftests/bpf: Add selftest for bits iter
  - bpf: Add bits iterator
  - kbuild, bpf: Use test-ge check for v1.25-only pahole
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later
  - bitops: make BYTES_TO_BITS() treewide-available
  - bpf: Check return from set_memory_rox()
  - bpf: Remove arch_unprotect_bpf_trampoline()
  - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem
  - bpf: Fix kabi for bpf_prog_aux and bpf_prog
  - bpf: move sleepable flag from bpf_prog_aux to bpf_prog
  - selftests/bpf: Test struct_ops maps with a large number of struct_ops program.
  - bpf: struct_ops supports more than one page for trampolines.
  - bpf, net: validate struct_ops when updating value.
  - selftests/bpf: Test if shadow types work correctly.
  - bpftool: Add an example for struct_ops map and shadow type.
  - bpftool: Generated shadow variables for struct_ops maps.
  - libbpf: Convert st_ops->data to shadow type.
  - libbpf: Set btf_value_type_id of struct bpf_map for struct_ops.
  - bpf: introduce in_sleepable() helper
  - selftests/bpf: Test PTR_MAYBE_NULL arguments of struct_ops operators.
  - bpf: Create argument information for nullable arguments.
  - bpf: Move __kfunc_param_match_suffix() to btf.c.
  - bpf: Fix kabi for bpf_ctx_arg_aux
  - bpf: add btf pointer to struct bpf_ctx_arg_aux.
  - bpf, btf: Check btf for register_bpf_struct_ops
  - selftests/bpf: Add tests for RCU lock transfer between subprogs
  - bpf: Transfer RCU lock state between subprog calls
  - selftests/bpf: Add test for static subprog call in lock cs
  - bpf: Allow calling static subprogs while holding a bpf_spin_lock
  - selftests/bpf: Suppress warning message of an unused variable.
  - bpf: Remove an unnecessary check.
  - libbpf: Add btf__new_split() API that was declared but not implemented
  - bpf: treewide: Annotate BPF kfuncs in BTF
  - bpf: btf: Add BTF_KFUNCS_START/END macro pair
  - bpf: btf: Support flags for BTF_SET8 sets
  - bpf: Fix error checks against bpf_get_btf_vmlinux().
  - libbpf: Ensure undefined bpf_attr field stays 0
  - selftests/bpf: test case for register_bpf_struct_ops().
  - bpf: export btf_ctx_access to modules.
  - libbpf: Find correct module BTFs for struct_ops maps and progs.
  - bpf, net: switch to dynamic registration
  - bpf: validate value_type
  - bpf_verifier: Fix kabi for bpf_verifier_env
  - bpf: hold module refcnt in bpf_struct_ops map creation and prog verification.
  - bpf: Fix kabi for bpf_attr
  - bpf: pass attached BTF to the bpf_struct_ops subsystem
  - bpf: lookup struct_ops types from a given module BTF.
  - bpf: pass btf object id in bpf_map_info.
  - bpf: make struct_ops_map support btfs other than btf_vmlinux.
  - bpf: add struct_ops_tab to btf.
  - bpf, net: introduce bpf_struct_ops_desc.
  - bpf: get type information with BTF_ID_LIST
  - bpf: refactory struct_ops type initialization to a function.
  - riscv, bpf: Fix unpredictable kernel crash about RV64 struct_ops
  - bpf: Introduce "volatile compare" macros
  - s390/bpf: Fix indirect trampoline generation
  - bpf: Fix dtor CFI
  - cfi: Add CFI_NOSEAL()
  - x86/cfi,bpf: Fix bpf_struct_ops CFI
  - x86/cfi,bpf: Fix bpf_callback_t CFI
  - x86/cfi,bpf: Fix BPF JIT call
  - cfi: Flip headers
  - x86, bpf: Use bpf_prog_pack for bpf trampoline
  - bpf: Fix kabi-breakage for bpf_tramp_image
  - bpf: Use arch_bpf_trampoline_size
  - bpf: Add arch_bpf_trampoline_size()
  - bpf, x86: Adjust arch_prepare_bpf_trampoline return value
  - bpf: Add helpers for trampoline image management
  - bpf: Adjust argument names of arch_prepare_bpf_trampoline()
  - bpf: Let bpf_prog_pack_free handle any pointer
  - selftests/bpf: Add lazy global subprog validation tests
  - bpf: Fix kabi-breakage for bpf_func_info_aux
  - bpf: Validate global subprogs lazily
  - bpf: Emit global subprog name in verifier logs
  - selftests/bpf: get trusted cgrp from bpf_iter__cgroup directly
  - bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg
  - selftests/bpf: Add test for using css_task iter in sleepable progs
  - selftests/bpf: Add tests for css_task iter combining with cgroup iter
  - bpf: Relax allowlist for css_task iter
  - bpf: Add __bpf_hook_{start,end} macros
  - bpf: Add __bpf_kfunc_{start,end}_defs macros
  - bpf: fix compilation error without CGROUPS
  - kbuild: avoid too many execution of scripts/pahole-flags.sh
  - selftests/bpf: Add tests for open-coded task and css iter
  - selftests/bpf: rename bpf_iter_task.c to bpf_iter_tasks.c
  - bpf: Let bpf_iter_task_new accept null task ptr
  - bpf: teach the verifier to enforce css_iter and task_iter in RCU CS
  - bpf: Introduce css open-coded iterator kfuncs
  - bpf: Introduce task open coded iterator kfuncs
  - bpf: Introduce css_task open-coded iterator kfuncs
  - cgroup: Prepare for using css_task_iter_*() in BPF
  - selftests/bpf: Add tests for open-coded task_vma iter
  - bpf: Introduce task_vma open-coded iterator kfuncs
  - selftests/bpf: Rename bpf_iter_task_vma.c to bpf_iter_task_vmas.c
  - bpf: Don't explicitly emit BTF for struct btf_iter_num
  - selftests/bpf: Test pinning bpf timer to a core
  - bpf: Add ability to pin bpf timer to calling CPU
  - bpf: Charge modmem for struct_ops trampoline
  - !21791 Fix CVE-2026-23454
  - !21779 [OLK-6.6][linux-6.6.y sync][Part 2/3] Backport 6.6.119-6.6.120 LTS Patches
  - !21816 [OLK-6.6]:update patches for sw64 architecture
  - LoongArch: entry: Migrate ret_from_fork() to C
  - LoongArch: Clarify 3 MSG interrupt features
  - LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN
  - drivers/amdgpu: amd rx550 should emit 10 fences after run a command
  - LoongArch: Fix AP booting issue in VM mode
  - LoongArch: Increase COMMAND_LINE_SIZE up to 4096
  - LoongArch: Relax memory ordering for atomic operations
  - pci/quirks: 2k3000: set discrete GPU as default boot device if present
  - drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content
  - !21744  nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - !21740  NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - mfs: remove anon_file item from struct mfs_cache_object
  - sw64: fix compile error with missing header file
  - sw64: update openeuler_defconfig and remove junzhang_defconfig
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
  - intel_th: fix device leak on output open()
  - usb: gadget: lpc32xx_udc: fix clock imbalance in error path
  - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
  - efi/cper: Fix cper_bits_to_str buffer handling and return value
  - soc: amlogic: canvas: fix device leak on lookup
  - soc: qcom: ocmem: fix device leak on lookup
  - tracing: Fix fixed array of synthetic event
  - amba: tegra-ahb: Fix device leak on SMMU enable
  - crypto: caam - Add check for kcalloc() in test_len()
  - selftests: openvswitch: Fix escape chars in regexp.
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  - s390/ipl: Clear SBP flag when bootprog is set
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break
  - net/handshake: restore destructor on submit failure
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode
  - xfs: fix a memory leak in xfs_buf_item_init()
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
  - parisc: Do not reprogram affinitiy on ASP chip
  - scs: fix a wrong parameter in __scs_magic
  - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI)
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain
  - media: vidtv: initialize local pointers upon transfer of memory ownership
  - tools/testing/nvdimm: Use per-DIMM device handle
  - f2fs: fix return value of f2fs_recover_fsync_data()
  - f2fs: fix age extent cache insertion skip on counter overflow
  - f2fs: invalidate dentry cache on failed whiteout creation
  - f2fs: fix to avoid updating zero-sized extent in extent cache
  - f2fs: ensure node page reads complete before f2fs_put_super() finishes
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client
  - scsi: aic94xx: fix use-after-free in device removal path
  - cpufreq: nforce2: fix reference count leak in nforce2
  - cpuidle: governors: teo: Drop misguided target residency check
  - intel_th: Fix error handling in intel_th_output_open
  - char: applicom: fix NULL pointer dereference in ac_ioctl
  - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
  - usb: phy: isp1301: fix non-OF device reference imbalance
  - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
  - USB: lpc32xx_udc: Fix error handling in probe
  - phy: broadcom: bcm63xx-usbh: fix section mismatches
  - media: pvrusb2: Fix incorrect variable used in trace message
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
  - media: v4l2-mem2mem: Fix outdated documentation
  - jbd2: use a weaker annotation in journal handling
  - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
  - ext4: fix incorrect group number assertion in mb_check_buddy
  - ktest.pl: Fix uninitialized var in config-bisect.pl
  - kallsyms: Fix wrong "big" kernel symbol type read from procfs
  - floppy: fix for PAGE_SIZE != 4KB
  - block: rate-limit capacity change info log
  - s390/dasd: Fix gendisk parent after copy pair swap
  - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
  - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
  - vhost/vsock: improve RCU read sections around vhost_vsock_get()
  - block: rnbd-clt: Fix signedness bug in init_dev()
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
  - nvme-fc: don't hold rport lock when putting ctrl
  - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware
  - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
  - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices
  - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
  - usbip: Fix locking bug in RT-enabled kernels
  - exfat: fix remount failure in different process environments
  - reset: fix BIT macro reference
  - via_wdt: fix critical boot hang due to unnamed resource allocation
  - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
  - fuse: Always flush the page cache before FOPEN_DIRECT_IO write
  - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
  - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
  - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
  - powerpc/addnote: Fix overflow on 32-bit builds
  - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
  - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
  - firmware: imx: scu-irq: Init workqueue before request mbox channel
  - ipmi: Fix __scan_channels() failing to rescan channels
  - ipmi: Fix the race between __scan_channels() and deliver_response()
  - ALSA: usb-mixer: us16x08: validate meter packet indices
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
  - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
  - spi: fsl-cpm: Check length parity before switching to 16 bit mode
  - can: gs_usb: gs_can_open(): fix error handling
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
  - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  - ksmbd: fix buffer validation by including null terminator size in EA length
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow
  - block: rnbd-clt: Fix leaked ID in init_dev()
  - spi: cadence-quadspi: Fix clock disable on probe failure path
  - x86/xen: Fix sparse warning in enlighten_pv.c
  - x86/xen: Move Xen upcall handler
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first
  - MIPS: Fix a reference leak bug in ip22_check_gio()
  - hwmon: (tmp401) fix overflow caused by default conversion rate value
  - hwmon: (ibmpex) fix use-after-free in high/low store
  - net: enetc: do not transmit redirected XDP frames when the link is down
  - net/handshake: duplicate handshake cancellations leak socket
  - net/mlx5: Serialize firmware reset with devlink
  - net/mlx5: Skip HotPlug check on sync reset using hot reset
  - net/mlx5: fw_tracer, Handle escaped percent properly
  - net/mlx5: Drain firmware reset in shutdown callback
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
  - netfilter: nf_tables: pass context structure to nft_parse_register_load
  - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
  - caif: fix integer underflow in cffrml_receive()
  - broadcom: b44: prevent uninitialized value usage
  - mlxsw: spectrum_router: Fix possible neighbour reference count leak
  - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
  - netrom: Fix memory leak in nr_sendmsg()
  - net: fec: ERR007885 Workaround for XDP TX path
  - arm64/cpufeature: Fix unused enable_pseudo_nmi variable warning
  - urma: fix psn exchange anomaly under share_tp mode
  - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  - ksmbd: vfs: fix race on m_flags in vfs_cache
  - gfs2: fix remote evict for read-only filesystems
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
  - hfsplus: fix volume corruption issue for generic/073
  - hfsplus: Verify inode mode when loading from disk
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
  - hfsplus: fix volume corruption issue for generic/070
  - ntfs: set dummy blocksize to read boot_block when mounting
  - kbuild: Use objtree for module signing key path
  - fs/ntfs3: Support timestamps prior to epoch
  - livepatch: Match old_sympos 0 and 1 in klp_find_func()
  - cpuidle: menu: Use residency threshold in polling state override decisions
  - cpufreq: s5pv210: fix refcount leak
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
  - x86/ptrace: Always inline trivial accessors
  - iomap: account for unaligned end offsets when truncating read range
  - btrfs: fix memory leak of fs_devices in degraded seed device path
  - btrfs: fix a potential path leak in print_data_reloc_error()
  - btrfs: do not skip logging new dentries when logging a new name
  - net/sched: teql: Fix double-free in teql_master_xmit
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
  - ipv6: add NULL checks for idev in SRv6 paths
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
  - sunrpc: fix cache_request leak in cache_release
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
  - !21770 hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n.
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
  - ALSA: dice: fix buffer overflow in detect_stream_formats()
  - usb: phy: Initialize struct usb_phy list_head
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
  - net: lan743x: Allocate rings outside ZONE_DMA
  - ocfs2: fix memory leak in ocfs2_merge_rec_left()
  - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
  - efi/cper: Adjust infopfx size to accept an extra space
  - efi/cper: Add a new helper function to print bitmasks
  - dm log-writes: Add missing set_freezable() for freezable kthread
  - dm-raid: fix possible NULL dereference with undefined raid type
  - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
  - rtc: gamecube: Check the return value of ioremap()
  - ALSA: uapi: Fix typo in asound.h comment
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand
  - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
  - nvme-auth: use kvfree() for memory allocated with kvcalloc()
  - ASoC: ak5558: Disable regulator when error happens
  - ASoC: ak4458: Disable regulator when error happens
  - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
  - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
  - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
  - NFS: Fix inheritance of the block sizes when automounting
  - Expand the type of nfs_fattr->valid
  - Revert "nfs: clear SB_RDONLY before getting superblock"
  - Revert "nfs: ignore SB_RDONLY when remounting nfs"
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
  - NFS: Initialise verifiers for visible dentries in readdir and lookup
  - fs/nls: Fix utf16 to utf8 conversion
  - NFS: Avoid changing nlink when file removes and attribute updates race
  - 9p: fix cache/debug options printing in v9fs_show_options
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
  - pinctrl: single: Fix incorrect type for error return variable
  - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  - perf tools: Fix split kallsyms DSO counting
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
  - clk: keystone: fix compile testing
  - md/raid5: fix IO hang when array is broken with IO inflight
  - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
  - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
  - selftests: bonding: add delay before each xvlan_over_bond connectivity check
  - selftests: bonding: add ipvlan over bond testing
  - !21764 ub: cdma: fix cdma code format issue
  - hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n.
  - ub: cdma: cdma code format issue bugfix
  - platform/x86/amd: Fix memory leak in wbrf_record()
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
  - x86/amd_node: Fix AMD root device caching
  - x86/amd_node: Add support for debugfs access to SMN registers
  - x86/amd_node: Add SMN offsets to exclusive region access
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure
  - platform/x86/amd/hsmp: Use name space while exporting module symbols
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c
  - platform/x86/amd/hsmp: Move structure and macros to header file
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer
  - platform/x86/amd/hsmp: Create wrapper function init_acpi()
  - platform/x86/amd/hsmp: Create hsmp/ directory
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
  - platform/x86/amd/hsmp: switch to use device_add_groups()
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
  - platform/x86/amd/hsmp: Add support for ACPI based probing
  - platform/x86/amd/hsmp: Restructure sysfs group creation
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs
  - platform/x86/amd/hsmp: Create static func to handle platdev
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
  - platform/x86/amd/hsmp: Move hsmp_test to probe
  - platform/x86/amd: Add support for AMD ACPI based Wifi band RFI mitigation feature
  - platform/x86/amd/hsmp: Fix iomem handling
  - platform/x86/amd/hsmp: improve the error log
  - platform/x86/amd/hsmp: add support for metrics tbl
  - platform/x86/amd/hsmp: create plat specific struct
  - x86/amd_node: Use defines for SMN register offsets
  - x86/amd_node: Remove dependency on AMD_NB
  - x86/amd_node: Update __amd_smn_rw() error paths
  - x86/amd_nb: Move SMN access code to a new amd_node driver
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id()
  - x86/amd_nb: Enhance SMN access error checking
  - EDAC/amd64: Check return value of amd_smn_read()
  - EDAC/amd64: Remove unused register accesses
  - x86/amd_nb: Simplify function 3 search
  - x86/amd_nb: Use topology info to get AMD node count
  - x86/amd_nb: Simplify root device search
  - x86/amd_nb: Simplify function 4 search
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
  - x86/amd_nb: Add AMD Family MI300 PCI IDs
  - x86: Start moving AMD node functionality out of AMD_NB
  - crypto: ccp - Add support for PCI device 0x17D8
  - KVM: arm64: Add SMCCC interface for pvtimer status
  - KVM: arm64: Export vtimer_is_irqbypass for external use
  - !21754 ub:hisi-ubus: fix issue of message
  - !21565 urma: implement share tp for RM mode
  - !20616 [OLK-6.6] Fix CVE-2025-68291
  - !20915 [OLK-6.6] fix CVE-2025-40003
  - urma: implement share TP for RM mode
  - smb: client: fix krb5 mount with username option
  - ub:hisi-ubus: Adjust the order of the message struct
  - ub:ubus: Fix find error ubc_num of local ras
  - ub:ubus: Fix null message workqueue issue
  - !21752 urma: fix Clos networking and add a new interface get_path_set.
  - !21715  OLK-6.6 mainline or LTS patches sync
  - urma: fix Clos networking and add a new interface get_path_set.
  - !21664 [OLK-6.6][linux-6.6.y sync][Part 1/3] Backport 6.6.119-6.6.120 LTS Patches
  - !21750  fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - !19935 [Intel-SIG] new CPU topology series - 4/4: x86/apic: Rework APIC registration
  - !21721 urma: fix bonding udata exchange for imported seg/jetty objects.
  - !21743 urma: bugfix ubagg get physical dev info acquisition
  - !21747  Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
  - !21741 urma: fix log error in connect
  - fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
  - urma: bugfix ubagg get physical dev info acquisition
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
  - xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics
  - xSched/cgroup: prevent to init xse when xcu cgroup is disabled
  - LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm'
  - urma: fix bonding udata exchange for imported seg/jetty objects.
  - urma: fix log error in connect
  - !21729 urma: fix kmod log format error
  - !21592  x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - !21599  pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - !21733 urma: fix ubcore connect error
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
  - urma: fix ubcore connect error
  - !21718 urma: fix error for setting conn timeout
  - urma: fix error for setting conn timeout
  - !21737 ub: udma: change return value format.
  - ub: udma: change return value format.
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
  - spi: tegra210-quad: Move curr_xfer read inside spinlock
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
  - tools: Fix bitfield dependency failure
  - iomap: allocate s_dio_done_wq for async reads as well
  - i3c: Move device name assignment after i3c_bus_init
  - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
  - drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release
  - selftests: bonding: Add more missing config options
  - selftests: bonding: add missing build configs
  - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
  - net: stmmac: fix rx limit check in stmmac_rx_zc()
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
  - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
  - resource: introduce is_type_match() helper and use it
  - resource: replace open coded resource_intersection()
  - resource: Reuse for_each_resource() macro
  - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
  - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
  - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
  - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
  - ASoC: Intel: catpt: Fix error path in hw_params()
  - vdpa/pds: use %pe for ERR_PTR() in event handler registration
  - virtio: fix virtqueue_set_affinity() docs
  - virtio: fix whitespace in virtio_config_ops
  - virtio: fix typo in virtio_device_ready() comment
  - virtio_vdpa: fix misleading return in void function
  - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
  - ext4: remove unused return value of __mb_check_buddy
  - ublk: prevent invalid access with DEBUG
  - ublk: complete command synchronously on error
  - ublk: make sure io cmd handled in submitter task context
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
  - hwmon: sy7636a: Fix regulator_enable resource leak on error path
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
  - ASoC: fsl_xcvr: clear the channel status control memory
  - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
  - RDMA/irdma: Add support to re-register a memory region
  - RDMA/irdma: Fix data race in irdma_free_pble
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
  - backlight: lp855x: Fix lp855x.h kernel-doc warnings
  - backlight: led-bl: Add devlink to supplier LEDs
  - wifi: ieee80211: correct FILS status codes
  - iomap: always run error completions in user context
  - iomap: factor out a iomap_dio_done helper
  - drm/nouveau: restrict the flush page to a 32-bit address
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
  - btrfs: fix leaf leak in an error path in btrfs_del_items()
  - staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
  - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices
  - RISC-V: KVM: Fix guest page fault within HLV* instructions
  - crypto: ccree - Correctly handle return of sg_nents_for_len
  - crypto: starfive - Correctly handle return of sg_nents_for_len
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw()
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
  - usb: dwc2: fix hang during suspend if set as peripheral
  - usb: dwc2: fix hang during shutdown if set as peripheral
  - usb: dwc2: disable platform lowlevel hw resources during shutdown
  - usb: chaoskey: fix locking for O_NONBLOCK
  - cpuset: Treat cpusets in attaching as populated
  - net: phy: adin1100: Fix software power-down ready condition
  - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
  - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
  - wifi: mac80211: fix CMAC functions not handling errors
  - wifi: mac80211: remove RX_DROP_UNUSABLE
  - pwm: bcm2835: Make sure the channel is enabled after pwm_request()
  - perf arm_spe: Fix memset subclass in operation
  - perf arm-spe: Extend branch operations
  - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
  - fs/ntfs3: Prevent memory leaks in add sub record
  - fs/ntfs3: out1 also needs to put mi
  - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
  - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
  - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
  - drm/msm/a2xx: stop over-complaining about the legacy firmware
  - NFSD/blocklayout: Fix minlength check in proc_layoutget
  - tracefs: fix a leak in eventfs_create_events_dir()
  - watchdog: starfive: Fix resource leak in probe error path
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function
  - selftests/bpf: Fix failure paths in send_signal test
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry
  - ps3disk: use memcpy_{from,to}_bvec index
  - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
  - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode
  - leds: netxbig: Fix GPIO descriptor leak in error paths
  - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
  - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
  - lib/vsprintf: Check pointer before dereferencing in time_and_date()
  - clk: renesas: r9a06g032: Fix memory leak in error path
  - coresight: etm4x: Add context synchronization before enabling trace
  - coresight: etm4x: Extract the trace unit controlling
  - coresight: etm4x: Correct polling IDLE bit
  - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
  - powerpc/32: Fix unpaired stwcx. on interrupt exit
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
  - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
  - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
  - RDMA/rtrs: server: Fix error handling in get_or_create_srv
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region
  - staging: most: remove broken i2c driver
  - staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0
  - scsi: stex: Fix reboot_notifier leak in probe error path
  - regulator: core: disable supply if enabling main regulator fails
  - perf/x86/intel: Correct large PEBS flag check
  - ext4: correct the checking of quota files before moving extents
  - mfd: da9055: Fix missing regmap_del_irq_chip() in error path
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition
  - x86/boot: Fix page table access in 5-level to 4-level paging transition
  - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
  - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
  - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
  - spi: tegra210-quad: Fix timeout handling
  - fs/9p: Don't open remote file with APPEND mode when writeback cache is used
  - scsi: target: Do not write NUL characters into ASCII configfs output
  - power: supply: apm_power: only unset own apm_get_power_status
  - power: supply: wm831x: Check wm831x_set_bits() return value
  - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
  - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
  - power: supply: cw2015: Check devm_delayed_work_autocancel() return code
  - perf record: skip synthesize event when open evsel failed
  - perf lock contention: Load kernel map before lookup
  - perf maps: Add maps__load_first()
  - interconnect: debugfs: Fix incorrect error handling for NULL path
  - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
  - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
  - i3c: master: svc: Prevent incomplete IBI transaction
  - i3c: fix refcount inconsistency in i3c_master_register
  - i3c: master: Inherit DMA masks and parameters from parent device
  - pinctrl: stm32: fix hwspinlock resource leak in probe function
  - soc: qcom: smem: fix hwspinlock resource leak in probe error paths
  - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
  - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
  - mtd: nand: relax ECC parameter validation check
  - Revert "mtd: rawnand: marvell: fix layouts"
  - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
  - ARM: dts: renesas: gose: Remove superfluous port property
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
  - phy: mscc: Fix PTP for VSC8574 and VSC8572
  - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
  - firmware: imx: scu-irq: fix OF node leak in
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
  - s390/ap: Don't leak debug feature files if AP instructions are not available
  - s390/smp: Fix fallback CPU detection
  - wifi: ath11k: fix peer HE MCS assignment
  - clk: qcom: camcc-sm6350: Fix PLL config of PLL2
  - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
  - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
  - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
  - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
  - arm64: dts: imx8mp-venice-gw702x: remove off-board uart
  - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
  - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
  - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
  - inet: Avoid ehash lookup race in inet_ehash_insert()
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
  - ntfs3: Fix uninit buffer allocated by __getname()
  - ntfs3: fix uninit memory after failed mi_read in mi_format_new
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller
  - irqchip/qcom-irq-combiner: Fix section mismatch
  - irqchip/imx-mu-msi: Fix section mismatch
  - irqchip/irq-brcmstb-l2: Fix section mismatch
  - irqchip/irq-bcm7120-l2: Fix section mismatch
  - irqchip/irq-bcm7038-l1: Fix section mismatch
  - objtool: Fix weak symbol detection
  - objtool: Fix standalone --hacks=jump_label
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
  - clk: renesas: cpg-mssr: Read back reset registers to assure values latched
  - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
  - clk: renesas: Use str_on_off() helper
  - clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R()
  - clk: renesas: rzg2l: Remove critical area
  - clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable()
  - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor
  - drm/vgem-fence: Fix potential deadlock on release
  - drm/panel: visionox-rm69299: Don't clear all mode flags
  - gpu: host1x: Fix race in syncpt alloc/free
  - smack: fix bug: unprivileged task can create labels
  - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
  - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
  - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
  - comedi: check device's attached status in compat ioctls
  - comedi: multiq3: sanitize config options in multiq3_attach()
  - comedi: c6xdigio: Fix invalid PNP driver unregistration
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  - samples: work around glibc redefining some of our defines wrong
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  - platform/x86: huawei-wmi: add keys for HONOR models
  - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
  - platform/x86: acer-wmi: Ignore backlight event
  - pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  - HID: hid-input: Extend Elan ignore battery quirk to USB
  - bfs: Reconstruct file type when loading from disk
  - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  - smb: fix invalid username check in smb3_fs_context_parse_param()
  - Bluetooth: btrtl: Avoid loading the config file on security chips
  - drm/vmwgfx: Use kref in vmw_bo_dirty
  - spi: imx: keep dma request disabled before dma transfer setup
  - spi: xilinx: increase number of retries before declaring stall
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
  - serial: add support of CPCI cards
  - USB: serial: ftdi_sio: match on interface number for jtag
  - USB: serial: option: move Telit 0x10c7 composition in the right place
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions
  - USB: serial: option: add Foxconn T99W760
  - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
  - locking/spinlock/debug: Fix data-race in do_raw_write_lock
  - ksmbd: ipc: fix use-after-free in ipc_msg_send_request
  - Documentation: process: Also mention Sasha Levin as stable tree maintainer
  - leds: spi-byte: Use devm_led_classdev_register_ext()
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
  - !21366 [Hygon][6.6][Feature]spi: dw: Add device HID for Hygon SPI controller
  - !21365 [Hygon][6.6][Feature] mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - !21364 [Hygon][6.6][Feature] mmc: sdhci-pci: Add support for Hygon SD controller
  - !21363 [Hygon][6.6][Feature] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - !21362 [Hygon][6.6][Feature] iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - !21361 [Hygon][6.6][Feature] hwmon/k10temp: Add support for Hygon family 18h model 18h
  - !21360 [Hygon][6.6][Feature] x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - !21359 [Hygon][6.6][Feature] ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - !21694 drivers/ub/sentry: Refactor the message data format sent via UVB/URMA
  - drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt
  - drivers/ub/sentry: Refactor the message data format sent via UVB/URMA
  - urma: fix kmod log format error
  - sched/debug: Fix avg_vruntime() usage
  - sched/fair: Fix zero_vruntime tracking fix
  - sched/fair: Fix vruntime drift by preventing double lag scaling during reweight
  - sched/eevdf: Update se->vprot in reweight_entity()
  - sched/fair: Only set slice protection at pick time
  - sched: Fix struct sched_entity kabi broken
  - sched/fair: Fix NO_RUN_TO_PARITY case
  - sched/fair: Use protect_slice() instead of direct comparison
  - sched: Cancel the slice protection of the idle entity
  - sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running
  - sched/eevdf: Disable shorter slices to wakeup-preempt
  - sched/eevdf: Allow shorter slices to wakeup-preempt
  - sched: Unify more update_curr*()
  - sched: Remove vruntime from trace_sched_stat_runtime()
  - sched: fix kabi broken in struct sched_statistics
  - sched: Unify runtime accounting across classes
  - sched/fair: Adhere to place_entity() constraints
  - sched/fair: Fix EEVDF entity placement bug causing scheduling lag
  - sched/fair: Fix zero_vruntime tracking
  - sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime
  - sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions
  - sched: Fix kabi breakage of struct cfs_rq for sum_weight
  - sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight
  - sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups
  - drivers/loongson-pwm: sync master patch to fix pwm driver
  - LoongArch:stmmac:fix mdc too high issues.
  - LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE
  - drivers/pwm: export symbol for pwm_add_table
  - LoongArch: KVM: Add hypercall service support for usermode VMM
  - urma: check driver and wq duration for conn_err
  - spi: fix statistics allocation
  - KVM: arm64: vgic: Remove redundant vtimer irq bypass workaround
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - Documentation: KVM: KVM_GET_SUPPORTED_CPUID now exposes TSC_DEADLINE
  - KVM: x86: Advertise support for AMD's PREFETCHI
  - KVM: x86: Use only local variables (no bitmask) to init kvm_cpu_caps
  - KVM: x86: Explicitly track feature flags that are enabled at runtime
  - KVM: x86: Explicitly track feature flags that require vendor enabling
  - KVM: x86: Rename "SF" macro to "SCATTERED_F"
  - KVM: x86: Pull CPUID capabilities from boot_cpu_data only as needed
  - KVM: x86: Add a macro for features that are synthesized into boot_cpu_data
  - KVM: x86: Advertise HYPERVISOR in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Advertise TSC_DEADLINE_TIMER in KVM_GET_SUPPORTED_CPUID
  - KVM: x86: Add a macro to init CPUID features that KVM emulates in software
  - KVM: x86: Add a macro to init CPUID features that ignore host kernel support
  - KVM: x86: Harden CPU capabilities processing against out-of-scope features
  - KVM: x86: #undef SPEC_CTRL_SSBD in cpuid.c to avoid macro collisions
  - KVM: x86: Handle kernel- and KVM-defined CPUID words in a single helper
  - KVM: x86: Add a macro to precisely handle aliased 0x1.EDX CPUID features
  - KVM: x86: Add a macro to init CPUID features that are 64-bit only
  - KVM: x86: Unpack F() CPUID feature flag macros to one flag per line of code
  - KVM: x86: Account for max supported CPUID leaf when getting raw host CPUID
  - KVM: x86: Limit use of F() and SF() to kvm_cpu_cap_{mask,init_kvm_defined}()
  - KVM: x86: Use feature_bit() to clear CONSTANT_TSC when emulating CPUID
  - KVM: x86: Advertise AMD_IBPB_RET to userspace
  - KVM: SVM: Invert handling of SEV and SEV_ES feature flags
  - x86: KVM: Add feature flag for CPUID.80000021H:EAX[bit 1]
  - KVM: x86: Add SBPB support
  - KVM: x86: Add IBPB_BRTYPE support
  - perf/x86/uncore: Add DF PMU support for Hygon family 18h model 18h
  - hwmon/k10temp: Add support for Hygon family 18h model 18h
  - mmc: sdhci-pci: Add support for Hygon SD controller
  - x86/amd_nb: Add Hygon family 18h model 18h PCI IDs
  - mfs: fix race condition issue in try_hook_fd()
  - pstore/ram: fix buffer overflow in persistent_ram_save_old()
  - x86/uprobes: Fix XOL allocation failure for 32-bit tasks
  - mmc: sdhci-acpi: Add device HID for Hygon eMMC controller
  - spi: dw: Add device HID for Hygon SPI controller
  - iommu/hygon: Add support for Hygon family 18h model 18h IOAPIC
  - ALSA: hda: Add support for Hygon family 18h model 18h HD-Audio
  - Solve kernel ABI issue introduced by x86_max_cores updates
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again
  - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
  - x86/topology: Handle the !APIC case gracefully
  - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
  - x86/topology: Handle bogus ACPI tables correctly
  - x86/xen/smp_pv: Register the boot CPU APIC properly
  - x86/topology: Don't update cpu_possible_map in topo_set_cpuids()
  - x86/topology: Don't evaluate logical IDs during early boot
  - x86/topology: Ignore non-present APIC IDs in a present package
  - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores
  - x86/cpu/topology: Provide __num_[cores|threads]_per_package
  - x86/cpu/topology: Rename topology_max_die_per_package()
  - x86/cpu/topology: Rename smp_num_siblings
  - x86/cpu/topology: Retrieve cores per package from topology bitmaps
  - x86/cpu/topology: Use topology logical mapping mechanism
  - x86/cpu/topology: Provide logical pkg/die mapping
  - x86/cpu/topology: Simplify cpu_mark_primary_thread()
  - x86/cpu/topology: Mop up primary thread mask handling
  - x86/cpu/topology: Use topology bitmaps for sizing
  - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT
  - x86/xen/smp_pv: Count number of vCPUs early
  - x86/cpu/topology: Assign hotpluggable CPUIDs during init
  - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug
  - x86/topology: Add a mechanism to track topology via APIC IDs
  - x86/cpu: Detect real BSP on crash kernels
  - x86/cpu/topology: Rework possible CPU management
  - x86/cpu/topology: Sanitize the APIC admission logic
  - x86/smpboot: Make error message actually useful
  - x86/cpu/topology: Use a data structure for topology info
  - x86/cpu/topology: Simplify APIC registration
  - x86/cpu/topology: Confine topology information
  - x86/xen/smp_pv: Register fake APICs
  - x86/acpi: Dont invoke topology_register_apic() for XEN PV
  - x86/mpparse: Use new APIC registration function
  - x86/of: Use new APIC registration functions
  - x86/jailhouse: Use new APIC registration function
  - x86/acpi: Use new APIC registration functions
  - x86/cpu/topology: Provide separate APIC registration functions
  - x86/cpu/topology: Move registration out of APIC code
  - x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default
  - x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment
  - x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init()
  - x86/apic: Use a proper define for invalid ACPI CPU ID
  - x86/apic: Remove yet another dubious callback
  - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid
  - x86/mpparse: Remove the physid_t bitmap wrapper
  - x86/mm/numa: Move early mptable evaluation into common code
  - x86/mpparse: Switch to new init callbacks
  - x86/hyperv/vtl: Prepare for separate mpparse callbacks
  - x86/xen/smp_pv: Prepare for separate mpparse callbacks
  - x86/jailhouse: Prepare for separate mpparse callbacks
  - x86/platform/intel-mid: Prepare for separate mpparse callbacks
  - x86/platform/ce4100: Prepare for separate mpparse callbacks
  - x86/dtb: Rename x86_dtb_init()
  - x86/mpparse: Prepare for callback separation
  - x86/mpparse: Provide separate early/late callbacks
  - x86/mpparse: Rename default_find_smp_config()
  - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map()
  - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck()
  - x86/ioapic: Make io_apic_get_unique_id() simpler
  - x86/apic: Get rid of get_physical_broadcast()
  - x86/ioapic: Replace some more set bit nonsense
  - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids
  - x86/xen: return a sane initial apic id when running as PV guest
  - x86/cpu/topology: Make the APIC mismatch warnings complete
  - Solve kernel ABI issues introduced by x86_coreid_bits updates
  - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON
  - x86/apic/uv: Remove the private leaf 0xb parser
  - x86/xen/smp_pv: Remove cpudata fiddling
  - x86/apic: Remove unused phys_pkg_id() callback
  - x86/cpu: Remove x86_coreid_bits
  - x86/cpu: Remove topology.c
  - x86/cpu: Make topology_amd_node_id() use the actual node info
  - x86/mm/numa: Use core domain size on AMD
  - x86/cpu: Use common topology code for HYGON
  - x86/cpu: Use common topology code for AMD
  - x86/smpboot: Teach it about topo.amd_node_id
  - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater
  - x86/topology/amd: Ensure that LLC ID is initialized
  - x86/cpu/amd: Move TOPOEXT enablement into the topology parser
  - x86/cpu/amd: Make the NODEID_MSR union actually work
  - x86/cpu/amd: Make the CPUID 0x80000008 parser correct
  - x86/cpu: Provide an AMD/HYGON specific topology parser
  - x86/cpu/amd: Provide a separate accessor for Node ID
  - x86/topology/intel: Unlock CPUID before evaluating anything
  - x86/cpu: Use common topology code for Intel
  - x86/cpu: Provide a sane leaf 0xb/0x1f parser
  - x86/cpu: Move __max_die_per_package to common.c
  - x86/cpu: Use common topology code for Centaur and Zhaoxin
  - x86/cpu: Add legacy topology parser
  - x86/cpu: Provide cpu_init/parse_topology()
  - x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h>
  - x86/cpu: Provide cpuid_read() et al.
  - Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor"
  - Solve kernel ABI issues introduced by cpuinfo_x86 updates
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
  - perf/amd/ibs: Prevent leaking sensitive data to userspace
  - perf/x86: Check data address for IBS software filter
  - perf/x86: Relax privilege filter restriction on AMD IBS
  - perf/core: Export perf_exclude_event()
  - KVM: x86: Disallow hugepages when memory attributes are mixed
  - KVM: Drop superfluous __KVM_VCPU_MULTIPLE_ADDRESS_SPACE macro
  - fs: Rename anon_inode_getfile_secure() and anon_inode_getfd_secure()
  - x86/bugs: Add RSB mitigation document
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
  - x86/bugs: Rename entry_ibpb() to write_ibpb()
  - perf amd ibs: Sync arch/x86/include/asm/amd-ibs.h header with the kernel
  - perf/amd/ibs: Update DTLB/PageSize decode logic
  - perf/amd/ibs: Add support for OP Load Latency Filtering
  - perf/amd/ibs: Ceil sample_period to min_period
  - perf/amd/ibs: Add ->check_period() callback
  - perf/amd/ibs: Add PMU specific minimum period
  - perf/amd/ibs: Don't allow freq mode event creation through ->config interface
  - perf/amd/ibs: Remove pointless sample period check
  - perf/amd/ibs: Remove IBS_{FETCH|OP}_CONFIG_MASK macros
  - amd-pstate: Switch to amd-pstate by default on some Server platforms
  - cpufreq: amd-pstate: enable shared memory type CPPC by default
  - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled()
  - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing
  - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq
  - x86/cpu: Provide debug interface
  - x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids
  - x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too
  - x86/apic: Use u32 for wakeup_secondary_cpu[_64]()
  - x86/apic: Use u32 for [gs]et_apic_id()
  - x86/apic: Use u32 for phys_pkg_id()
  - x86/apic: Use u32 for cpu_present_to_apicid()
  - x86/apic: Use u32 for check_apicid_used()
  - x86/apic: Use u32 for APIC IDs in global data
  - x86/apic: Use BAD_APICID consistently
  - x86/cpu: Move cpu_l[l2]c_id into topology info
  - x86/cpu: Move logical package and die IDs into topology info
  - x86/cpu: Move cu_id into topology info
  - x86/cpu: Move cpu_core_id into topology info
  - hwmon: (fam15h_power) Use topology_core_id()
  - scsi: lpfc: Use topology_core_id()
  - x86/cpu: Move cpu_die_id into topology info
  - x86/cpu: Move phys_proc_id into topology info
  - x86/cpu: Encapsulate topology information in cpuinfo_x86
  - userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
  - mm/mremap: fix WARN with uffd that has remap events disabled
  - mm: clear uffd-wp PTE/PMD state on mremap()
  - userfaultfd: move userfaultfd_ctx struct to header file
  - net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
  - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
  - RNPGBE: NET: Update driver to 1.0.0
  - RNP: NET: Update driver to 1.0.0


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-150.0.0.137
changelog:
  - !22147  Fix CVE-2026-31431
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
  - crypto: authencesn - Fix src offset when decrypting in-place
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
  - crypto: authenc - use memcpy_sglist() instead of null skcipher
  - crypto: algif_aead - snapshot IV for async AEAD requests
  - crypto: algif_aead - Revert to operating out-of-place
  - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  - crypto: scatterwalk - Backport memcpy_sglist()
  - crypto: algif_aead - Fix minimum RX size check for decryption
  - !22111 Fix CVE-2026-31651
  - !22095 Fix CVE-2026-31430
  - !21996 Fix CVE-2026-31504
  - !21997 Fix CVE-2026-31515
  - !22098 Fix CVE-2026-31678
  - !22113  Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - !21769 [OLK-6.6] [Intel-SIG]: Support for Intel Microcode Staging Feature
  - !20823 [Intel-SIG] DMR APX support - kernel-host part
  - Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
  - mmc: vub300: fix NULL-deref on disconnect
  - !22006 Fix CVE-2026-31677
  - X.509: Fix out-of-bounds access when parsing extensions
  - !21918  perf/x86/intel: Add missing branch counters constraint apply
  - crypto: af_alg - limit RX SG extraction by receive buffer budget
  - !21987 ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
  - !21992 urma: move variable initialization before use in error branch
  - openvswitch: defer tunnel netdev_put to RCU release
  - urma: move variable initialization before use in error branch
  - af_key: validate families in pfkey_send_migrate()
  - net: fix fanout UAF in packet_release() via NETDEV_UP race
  - perf/x86/intel: Add missing branch counters constraint apply
  - x86/microcode/intel: Enable staging when available
  - x86/microcode/intel: Support mailbox transfer
  - x86/microcode/intel: Implement staging handler
  - x86/microcode/intel: Define staging state struct
  - x86/microcode/intel: Establish staging control logic
  - x86/microcode: Introduce staging step to reduce late-loading time
  - x86/cpu/topology: Make primary thread mask available with SMP=n
  - x86/fpu: Rename fpu_reset_fpregs() to fpu_reset_fpstate_regs()
  - x86/fpu: Remove export of mxcsr_feature_mask
  - x86/pkeys: Simplify PKRU update in signal frame
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE
  - x86/fpu: Log XSAVE disablement consistently
  - selftests/x86/apx: Add APX test
  - x86/fpu/apx: Enable APX state support
  - x86/fpu/apx: Disallow conflicting MPX presence
  - x86/fpu/apx: Define APX state component
  - tools headers x86 cpufeatures: Sync with the kernel sources
  - x86/cpufeatures: Add X86_FEATURE_APX
  - x86/fpu/xstate: Adjust xstate copying logic for user ABI
  - x86/fpu/xstate: Adjust XSAVE buffer size calculation
  - x86/fpu/xstate: Introduce xfeature order table and accessor macro
  - x86/fpu/xstate: Remove xstate offset check
  - x86/fpu/xstate: Simplify print_xstate_features()
  - selftests/x86/avx: Add AVX tests
  - selftests/x86/xstate: Clarify supported xstates
  - selftests/x86/xstate: Consolidate test invocations into a single entry
  - selftests/x86/xstate: Introduce signal ABI test
  - selftests/x86/xstate: Refactor ptrace ABI test
  - selftests/x86/xstate: Refactor context switching test
  - selftests/x86/xstate: Enumerate and name xstate components
  - selftests/x86/xstate: Refactor XSAVE helpers for general use
  - selftests/x86: Consolidate redundant signal helper functions
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd
  - x86/pkeys: Change caller of update_pkru_in_sigframe()
  - x86/pkeys: Update PKRU to enable all pkeys before XSAVE
  - x86/pkeys: Add helper functions to update PKRU on the sigframe
  - selftests/x86: fix Makefile dependencies to work with clang
  - selftests/x86: remove (or use) unused variables and functions


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-151.0.0.138
changelog:
  - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms
  - !22197  dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - !21790 Fix CVE-2026-31407
  - !22090 Fix CVE-2026-31424
  - !22088 Fix CVE-2026-31423
  - !22086 Fix CVE-2026-31420
  - !22085 Fix CVE-2026-31418
  - !22083 Fix CVE-2026-31516
  - !22084 Fix CVE-2026-31665
  - !22056 Fix CVE-2026-31590
  - !21974 Fix CVE-2026-31542
  - !22042 Fix CVE-2026-31628
  - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically"
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - !22179 Fix CVE-2026-31532
  - !22177 Fix CVE-2026-31533
  - !22180 Fix CVE-2026-31429
  - !22153  iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically"
  - !22172  PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - !21260  bfq: Lock when clearing the q->elevator entry
  - !22024  nvmet: move async event work off nvmet-wq
  - !21972 Fix CVE-2026-31451
  - !21942 Fix CVE-2026-31450
  - !22015  Fix CVE-2026-31449
  - !21937 Fix CVE-2026-31447
  - !21941 Fix CVE-2026-31446
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - !21089 [OLK-6.6] Fix CVE-2025-68345
  - !21115 [OLK-6.6] Fix CVE-2025-68334
  - !21116 [OLK-6.6] Fix CVE-2025-68320
  - !21119 [OLK-6.6] Fix CVE-2025-68765
  - !21117 [OLK-6.6] Fix CVE-2025-68340
  - !21139 [OLK-6.6] Fix CVE-2025-68753
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - !22158  perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series
  - !22156  drm/i915/gt: Check set_default_submission() before deferencing
  - !22155 urma: change kzalloc into vzalloc for ubcore
  - !22044  ALSA: ctxfi: Limit PTP to a single page
  - urma: change kzalloc into vzalloc for ubcore
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - !22154 A set of CVE fixes for Bluetooth
  - !21931 Fix CVE-2026-31452
  - drm/i915/gt: Check set_default_submission() before deferencing
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - !22071 CVE-2026-31673
  - !22050 Fix CVE-2026-31674
  - !22069 CVE-2026-31680
  - !22025 Fix CVE-2026-31682
  - !22002 Fix CVE-2026-31546
  - !22011 Fix CVE-2026-31570
  - !22000 Fix CVE-2026-31495
  - !21999 Fix CVE-2026-31496
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - ALSA: ctxfi: Limit PTP to a single page
  - x86/CPU: Fix FPDSS on Zen1
  - bridge: br_nd_send: linearize skb before parsing ND options
  - nvmet: move async event work off nvmet-wq
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - x86/platform/uv: Handle deconfigured sockets
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: convert inline data to extents when truncate exceeds inline size
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - bfq: Lock when clearing the q->elevator entry
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
  - team: Move team device type change at the end of team_port_add
  - lan966x: Fix sleeping in atomic context
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - tools headers: Sync x86 headers with kernel sources
  - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag
  - perf/x86/intel: Use early_initcall() to hook bts_init()
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use
  - perf/x86/intel: Optimize PEBS extended config
  - perf/x86/intel: Check PEBS dyn_constraints
  - perf/x86/intel: Add a check for dynamic constraints
  - perf/x86/intel: Add counter group support for arch-PEBS
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR
  - perf/x86/intel: Process arch-PEBS records or record fragments
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions
  - perf/x86/intel: Initialize architectural PEBS
  - perf/x86/intel: Correct large PEBS flag check
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call
  - perf/x86: Fix NULL event access and potential PEBS record loss
  - perf/x86: Remove redundant is_x86_event() prototype
  - perf/core: Check sample_type in perf_sample_save_brstack
  - perf/core: Check sample_type in perf_sample_save_callchain
  - perf/x86/intel/ds: Remove redundant assignments to sample.period
  - perf/x86/intel: Introduce pairs of PEBS static calls
  - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs
  - perf/x86/intel: Decouple BTS initialization from PEBS initialization


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-152.0.0.139
changelog:
  - !22246  Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
  - !22187  support mempool and NUMA.remote for 64KB page
  - !22201  mm: memcontrol: don't throttle dying tasks on memory.high
  - !22213  futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - !22212  drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - !22221  EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - !22202  pstore: ram_core: fix incorrect success return when vmap() fails
  - !22203  perf/x86/intel/uncore: Skip discovery table for offline dies
  - !22215  usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22078 Fix CVE-2026-31681
  - !22041 Fix CVE-2026-31664
  - !22082 Fix CVE-2026-31671
  - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches
  - !22199 CVE-2026-31414
  - !22185 Fix CVE-2026-31679
  - !22164 Fix CVE-2026-31551
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - !22173 Fix CVE-2026-31592
  - !22021  smb: client: fix off-by-8 bounds check in check_wsl_eas()
  - !22022  smb: client: fix OOB reads parsing symlink error response
  - !21926  nvme-pci: ensure we're polling a polled queue
  - !21924  ext4: avoid infinite loops caused by residual data
  - !21922  ksmbd: fix OOB write in QUERY_INFO for compound requests
  - !22171  xen/privcmd: fix double free via VMA splitting
  - !22167  *** fix CVE-2026-31443 ***
  - !22166  spi: spi-dw-dma: fix print error log when wait finish transaction
  - perf/x86/intel/uncore: Skip discovery table for offline dies
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - netfilter: nf_conntrack_expect: use expect->helper
  - netfilter: nf_conntrack_expect: honor expectation helper field
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - mm/numa_remote: remove depends on ARM64_4K_PAGES
  - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES
  - openvswitch: validate MPLS set/set_masked payload length
  - xfrm_user: fix info leak in build_report()
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - dmaengine: idxd: Fix crash when the event log is disabled
  - dmaengine: idxd: Delete unnecessary NULL check
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
  - netfilter: xt_multiport: validate range encoding in checkentry
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  - btrfs: fix double free in create_space_info_sub_group() error path
  - btrfs: fix double free in create_space_info() error path
  - interconnect: debugfs: fix devm_kstrdup and kfree mismatch
  - Revert "ALSA: usb: Increase volume range that triggers a warning"
  - x86/kfence: fix booting on 32bit non-PAE systems
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
  - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
  - btrfs: fix leak of kobject name for sub-group space_info
  - net: phy: fix phy_uses_state_machine()
  - fs/ntfs3: Initialize allocated memory before use
  - nvme: fix PCIe subsystem reset controller state transition
  - nvme-pci: do not directly handle subsys reset fallout
  - nvme-fc: rename free_ctrl callback to match name pattern
  - ASoC: codecs: wsa883x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: Drop unused version readout
  - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
  - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
  - mm: kmsan: fix poisoning of high-order non-compound pages
  - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
  - iio: adc: exynos_adc: fix OF populate on driver rebind
  - ALSA: scarlett2: Fix buffer overflow in config retrieval
  - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
  - iio: core: add separate lockdep class for info_exist_lock
  - iio: core: add missing mutex_destroy in iio_dev_release()
  - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
  - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
  - selftests/bpf: Check for timeout in perf_link test
  - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
  - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - perf/x86/intel: Do not enable BTS for guests
  - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
  - platform/x86: hp-bioscfg: Fix automatic module loading
  - netrom: fix double-free in nr_route_frame()
  - slimbus: core: fix device reference leak on report present
  - slimbus: core: fix runtime PM imbalance on report present
  - octeontx2: Fix otx2_dma_map_page() error return code
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
  - wifi: ath12k: fix dma_free_coherent() pointer
  - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
  - iio: chemical: scd4x: fix reported channel endianness
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - iio: adc: ad9467: fix ad9434 vref mask
  - iio: accel: iis328dq: fix gain values
  - of: platform: Use default match table for /firmware
  - of: fix reference count leak in of_alias_scan()
  - x86: make page fault handling disable interrupts properly
  - vsock/test: fix seqpacket message bounds test
  - net: openvswitch: fix data race in ovs_vport_get_upcall_stats
  - octeontx2-af: Fix error handling
  - net: dsa: fix off-by-one in maximum bridge ID determination
  - selftests: net: amt: wait longer for connection before sending packets
  - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
  - drm/amd/pm: Don't clear SI SMC table when setting power limit
  - usbnet: limit max_mtu based on device's hard_mtu
  - mISDN: annotate data-race around dev->work
  - be2net: fix data race in be_get_new_eqd
  - net: hns3: fix data race in hns3_fetch_stats
  - ALSA: usb: Increase volume range that triggers a warning
  - riscv: clocksource: Fix stimecmp update hazard on RV32
  - kconfig: fix static linking of nconf
  - spi: spi-sprd-adi: Fix double free in probe error path
  - spi: sprd-adi: switch to use spi_alloc_host()
  - spi: sprd: adi: Use devm_register_restart_handler()
  - interconnect: debugfs: initialize src_node and dst_node to empty strings
  - iio: adc: ad7280a: handle spi_setup() errors in probe()
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
  - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
  - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
  - comedi: Fix getting range information for subdevices 16 to 255
  - x86/kfence: avoid writing L1TF-vulnerable PTEs
  - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
  - arm64: dts: rockchip: remove dangerous max-link-speed from helios64
  - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
  - scsi: storvsc: Process unsupported MODE_SENSE_10
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
  - Revert "nfc/nci: Add the inconsistency check between the input data length and count"
  - w1: fix redundant counter decrement in w1_attach_slave_device()
  - w1: therm: Fix off-by-one buffer overflow in alarms_store
  - comedi: dmm32at: serialize use of paged registers
  - serial: 8250_pci: Fix broken RS485 for F81504/508/512
  - octeontx2: cn10k: fix RX flowid TCAM mask handling
  - veth: fix data race in veth_get_ethtool_stats
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO.
  - tools: ynl: Specify --no-line-number in ynl-regen.sh.
  - gue: Fix skb memleak with inner IP protocol 0.
  - amd-xgbe: avoid misleading per-packet error log
  - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
  - selftests: net: fib-onlink-tests: Convert to use namespaces by default
  - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace
  - net: usb: dm9601: remove broken SR9700 support
  - igc: fix race condition in TX timestamp read for register 0
  - ice: Avoid detrimental cleanup for bond during interface stop
  - ice: initialize ring_stats->syncp
  - ata: libata: Print features also for ATAPI devices
  - ata: libata: Call ata_dev_config_lpm() for ATAPI devices
  - ata: libata-core: Introduce ata_dev_config_lpm()
  - ata: libata: Add cpr_log to ata_dev_print_features() early return
  - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
  - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
  - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
  - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
  - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
  - dt-bindings: power: rpmpd: Update part number to X1E80100
  - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains
  - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215
  - dt-bindings: power: qcom,rpmpd: Add SM7150
  - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
  - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
  - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
  - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
  - io_uring: move local task_work in exit cancel loop
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
  - dmaengine: ti: k3-udma: fix device leak on udma lookup
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: idxd: fix device leaks on compat bind and unbind
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure
  - dmaengine: bcm-sba-raid: fix device leak on probe
  - dmaengine: at_hdmac: fix device leak on of_dma_xlate()
  - dmaengine: apple-admac: Add "apple,t8103-admac" compatible
  - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
  - drm/amdkfd: fix a memory leak in device_queue_manager_init()
  - drm/amd: Clean up kfd node on surprise disconnect
  - drm/amd/display: Bump the HDMI clock to 340MHz
  - LoongArch: Fix PMU counter allocation for mixed-type event groups
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
  - EDAC/i3200: Fix a resource leak in i3200_probe1()
  - EDAC/x38: Fix a resource leak in x38_probe1()
  - hrtimer: Fix softirq base check in update_needs_ipi()
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
  - USB: serial: option: add Telit LE910 MBIM composition
  - USB: OHCI/UHCI: Add soft dependencies on ehci_platform
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
  - usb: dwc3: Check for USB4 IP_NAME
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
  - phy: rockchip: inno-usb2: fix disconnection in gadget mode
  - phy: freescale: imx8m-pcie: assert phy reset during power on
  - phy: rockchip: inno-usb2: fix communication disruption in gadget mode
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
  - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
  - HID: usbhid: paper over wrong bNumDescriptor field
  - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - phy: stm32-usphyc: Fix off by one in probe()
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
  - phy: drop probe registration printks
  - phy: phy-snps-eusb2: refactor constructs names
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
  - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
  - dmaengine: tegra-adma: Fix use-after-free
  - mm, kfence: describe @slab parameter in __kfence_obj_info()
  - textsearch: describe @list member in ts_ops search
  - ASoC: tlv320adcx140: fix word length
  - ASoC: tlv320adcx140: fix null pointer
  - selftests: drv-net: fix RPS mask handling for high CPU numbers
  - btrfs: fix memory leaks in create_space_info() error paths
  - btrfs: introduce btrfs_space_info sub-group
  - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
  - btrfs: factor out init_space_info() from create_space_info()
  - btrfs: store fs_info in space_info
  - net/mlx5e: Restore destroying state bit after profile cleanup
  - vsock/test: add a final full barrier after run all tests
  - net: update netdev_lock_{type,name}
  - net: bridge: annotate data-races around fdb->{updated,used}
  - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry
  - btrfs: send: check for inline extents in range_is_hole_in_parent()
  - can: etas_es58x: allow partial RX URB allocation to succeed
  - ASoC: codecs: wsa884x: fix codec initialisation
  - firmware: imx: scu-irq: Set mu_resource_id before get handle
  - xfrm: clear trailing padding in build_polexpire()
  - smb: client: fix OOB reads parsing symlink error response
  - smb: client: fix off-by-8 bounds check in check_wsl_eas()
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - ksmbd: fix OOB write in QUERY_INFO for compound requests


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-153.0.0.140
changelog:
  - !22406  CVE
  - !22327  ceph: fix i_nlink underrun during async unlink
  - !22400  bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs
  - !22401  Fix CVE-2026-31486
  - !22383  dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22394  *** fix CVE-2026-31527 ***
  - !22335  ceph: fix memory leaks in ceph_mdsc_build_path()
  - !22351  ixgbevf: add missing negotiate_features op to Hyper-V ops table
  - !22333  ceph: supply snapshot context in ceph_zero_partial_object()
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs
  - !22336  HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - !22345  Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - !22346  Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - !22353  Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - !22347  Bluetooth: MGMT: validate mesh send advertising payload length
  - !22367  Bluetooth: hci_event: move wake reason storage into validated event handlers
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22275  CVE-2026-43313
  - !22272  EFI/CPER: don't dump the entire memory region
  - !22267  KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - !22266 v2  CVE-2026-43265
  - !22355  5 CVE fix patches
  - !22224  mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - !22342  rxrpc: proc: size address buffers for %pISpc output
  - !22363  dmaengine: idxd: Fix leaking event log memory
  - !22356  dmaengine: idxd: Fix memory leak when a wq is reset
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - !22321 Fix CVE-2026-43013
  - !22278 Fix CVE-2026-31699
  - !22269 Fix CVE-2026-31698
  - dmaengine: idxd: Fix leaking event log memory
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table
  - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - rxrpc: proc: size address buffers for %pISpc output
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - !22204  cgroupv2 io bugfix patches
  - !22264  Fix CVE-2026-43262
  - !22307  Fix CVE-2026-43363
  - !22320  Fix CVE-2026-43429
  - !20492  scsi: leapraid: add RAID disk hide/show events and fix misc issues
  - ceph: fix i_nlink underrun during async unlink
  - !22306  dmaengine: idxd: Fix possible invalid memory access after FLR
  - !22304  module: Fix kernel panic when a symbol st_shndx is out of bounds
  - !22317  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22226  kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features
  - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - !22105  cpufreq: conservative: Reset requested_freq on limits change
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - !22037 Fix CVE-2026-31469
  - !22292 Fix CVE-2026-43407
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - !22296 urma: fix potential parameter overflow in initialization
  - !22290  mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - !22276  crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - urma: fix potential parameter overflow in initialization
  - !20782  tracing: Fix soft lockup when lseeking trace file
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - !21650 urma: query resource options by id.
  - !22260 CVE-2026-31419
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - !22217 Fix CVE-2026-31697
  - !22234 Fix CVE-2026-31422
  - !22076 Fix CVE-2026-31684
  - !22074 Fix CVE-2026-31685
  - EFI/CPER: don't dump the entire memory region
  - !22127 rnpvf: update rnpvf driver to version 1.1.10.
  - !22170 rnp: update rnp driver to version 1.1.14.
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - gfs2: fiemap page fault fix
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support
  - !22241 Fix CVE-2026-31779
  - !22240  atm: lec: fix use-after-free in sock_def_readable()
  - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - !22249 [OLK-6.6] Fix CVE-2026-43284
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - ub: ubase: Added proxy functions to ubase
  - ub: ubase: support DTU feature
  - ub: ubase: add USC and UCP
  - ub: ubase: Add Ubase S Device ID
  - !22184 Fix CVE-2026-31675
  - !22220  net: Fix CVE-2026-31518
  - !22219  net/sched: Fix CVE-2026-31421
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - atm: lec: fix use-after-free in sock_def_readable()
  - net: sched: act_csum: validate nested VLAN headers
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - urma: query resource options by id.
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - rnp: update rnp driver to version 1.1.14.
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - rnpvf: update rnpvf driver to version 1.1.10.
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - cpufreq: conservative: Reset requested_freq on limits change
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - tracing: Fix soft lockup when lseeking trace file
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-153.0.0.141
changelog:
  - The RISC-V architecture features have been updated.
    For more details, refer to the rvck-olk repository.


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-154.0.0.142
changelog:
  - !22660 Fix CVE-2026-43119
  - !22696  CVEs
  - !22652 Fix CVE-2026-43223
  - !22651 Fix CVE-2026-43472
  - !22329 Fix CVE-2026-31752
  - !22709  config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - fbcon: check return value of con2fb_acquire_newinfo()
  - !22646 obmm: implement 64K pagesize support
  - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory
  - !22542 ub: cdma: add software TLB invalidation for KSVA memory
  - !22661  USB: core: Limit the length of unkillable synchronous timeouts
  - !22124  CVE-2026-31503
  - !22567 Fix CVE-2026-43170
  - !22475 Fix CVE-2026-43427
  - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM
  - USB: core: Limit the length of unkillable synchronous timeouts
  - !22599  Fix dup panic
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status
  - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET
  - media: pvrusb2: fix URB leak in pvr2_send_request_ex
  - unshare: fix unshare_fs() handling
  - !22479 crypto: hisilicon - turn mainline patch
  - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration
  - !22563 fix migvm_queue_dev_mmap buffer check
  - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches
  - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu
  - KVM: arm64: Fix timer_early_inject conflict with CVM
  - virtCCA-Live-Migration: Add host agent support for CVM live migration
  - !22600 sched_ext: Sync openeuler_defconfig for sched_ext
  - fix migvm_queue_dev_mmap buffer check
  - !22530  KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - !22535  usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE
  - obmm: relax contig_mem_pool restriction for 64KB pages
  - obmm: add VMA access for ptrace/GDB on PFNMAP regions
  - obmm: support VMA split with ownership-aligned attributes
  - !22560 net/oenetcls: Limit rxqs against combined_channels
  - !22523 net/oenetcls: free sk entry hash on ntuple cleanup
  - !22315 sched/fair: Fix overflow in vruntime_eligible()
  - obmm: refactor ownership tracking for PMD-granularity support
  - !22564 Fix CVE-2026-43212
  - !22514  ceph: add a bunch of missing ceph_path_info initializers
  - !22559  blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - x86: config: Enable resctrl related configs
  - !22055 urma: fix the panic when ipourma module is repeatedly loaded
  - sched_ext: Sync openeuler_defconfig for sched_ext
  - alloc_fdtable(): change calling conventions.
  - fs: consistently deref the files table with rcu_dereference_raw()
  - !22462  net: ipa: fix event ring index not programmed for IPA v5.0+
  - !22551 net/oenetcls: RPS enhancements and bug fixes
  - !22182 Fix CVE-2026-31755
  - !22576  arm64: entry: Fix missing sync_sei in irq_ventry
  - obmm: fix PTE protection bits for READWRITE mappings
  - arm64: entry: Fix missing sync_sei in irq_ventry
  - crypto: hisilicon - remove unused and non-public APIs for qm and sec
  - crypto: hisilicon/qm - drop redundant variable initialization
  - crypto: hisilicon/qm - remove else after return
  - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item
  - crypto: hisilicon - fix the format string type error
  - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  - crypto: hisilicon - add device load query functionality to debugfs
  - crypto: hisilicon/qm - increase wait time for mailbox
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write()
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - crypto: hisilicon/qm - move the barrier before writing to the mailbox register
  - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip
  - !22287 patchset for sched_ext
  - usb: dwc3: gadget: Move vbus draw to workqueue context
  - !22504  dm: clear cloned request bio pointer when last clone bio completes
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - !22554  CVE-2026-46333
  - net/oenetcls: Limit rxqs against combined_channels
  - blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - net/oenetcls: remove duplicated linux/inet.h include
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - sched_ext: Update comments replacing breather with aborting mechanism
  - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before
  - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task
  - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new
  - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer
  - tools/sched_ext: update scx_show_state.py for scx_aborting change
  - scx_central: Defer timer start to central dispatch to fix init error
  - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking
  - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask
  - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
  - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
  - selftests/sched_ext: Add missing error check for exit__load()
  - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags
  - sched_ext: Fix starvation of scx_enable() under fair-class saturation
  - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work
  - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs()
  - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq()
  - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue()
  - sched_ext: Fix bypass depth leak on scx_enable() failure
  - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks
  - sched_ext: Exit dispatch and move operations immediately when aborting
  - sched_ext: Simplify breather mechanism with scx_aborting flag
  - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode
  - sched_ext: Refactor do_enqueue_task() local and global DSQ paths
  - sched_ext: Fix SCX_KICK_WAIT to work reliably
  - tools/sched_ext: Provide a compatible helper for scx_bpf_events()
  - tools/sched_ext: Sync with scx repo
  - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers
  - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch
  - sched_ext: Fix unsafe locking in the scx_dump_state()
  - sched_ext: Don't kick CPUs running higher classes
  - sched_ext: Always use SMP versions in kernel/sched/ext.c
  - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU
  - sched_ext: Drop kfuncs marked for removal in 6.15
  - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
  - sched/ext: Prevent update_locked_rq() calls with NULL rq
  - sched_ext: Fix rq lock state in hotplug ops
  - sched_ext: Remove duplicate BTF_ID_FLAGS definitions
  - rhashtable: Fix rhashtable_try_insert test
  - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c
  - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group()
  - sched_ext: Make scx_group_set_weight() always update tg->scx.weight
  - sched/ext: Fix invalid task state transitions on class switch
  - sched/fair: Fix sched_can_stop_tick() for fair tasks
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator
  - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set()
  - sched_ext: Make scx_locked_rq() inline
  - sched_ext: Track currently locked rq
  - sched_ext: Move built-in idle CPU selection policy to a separate file
  - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP
  - selftests/sched_ext: Fix exit selftest hang on UP
  - sched_ext: Use kvzalloc for large exit_dump allocation
  - sched_ext: create_dsq: Return -EEXIST on duplicate request
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock
  - tools include UAPI: Sync linux/sched.h copy with the kernel sources
  - sched/doc: Update documentation after renames and synchronize Chinese version
  - sched/fair: Remove stale FREQUENCY_UTIL comment
  - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr()
  - file: add take_fd() cleanup helper
  - sched/ext: Remove sched_fork() hack
  - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance()
  - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx
  - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h.
  - sched_ext: selftests: Fix grammar in tests description
  - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq()
  - sched_ext: Fix migration disabled handling in targeted dispatches
  - sched_ext: Implement auto local dispatching of migration disabled tasks
  - sched_ext: Fix incorrect time delta calculation in time_delta()
  - sched_ext: Fix lock imbalance in dispatch_to_local_dsq()
  - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems
  - tools/sched_ext: Add helper to check task migration state
  - sched_ext: Fix incorrect autogroup migration detection
  - sched_ext: selftests/dsp_local_on: Fix sporadic failures
  - selftests/sched_ext: Fix enum resolution
  - sched_ext: Include task weight in the error state dump
  - sched_ext: Fixes typos in comments
  - sched_ext: fix kernel-doc warnings
  - sched_ext: Use time helpers in BPF schedulers
  - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now()
  - sched_ext: Add time helpers for BPF schedulers
  - sched_ext: Add scx_bpf_now() for BPF scheduler
  - sched_ext: Implement scx_bpf_now()
  - sched_ext: Relocate scx_enabled() related code
  - sched_ext: Add option -l in selftest runner to list all available tests
  - sched_ext: Include remaining task time slice in error state dump
  - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON
  - sched_ext: idle: small CPU iteration refactoring
  - sched_ext: idle: introduce check_builtin_idle_enabled() helper
  - sched_ext: idle: clarify comments
  - sched_ext: idle: use assign_cpu() to update the idle cpumask
  - cpumask: introduce assign_cpu() macro
  - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology()
  - sched_ext: Use sizeof_field for key_len in dsq_hash_params
  - tools/sched_ext: Receive updates from SCX repo
  - sched_ext: Use the NUMA scheduling domain for NUMA optimizations
  - sched_ext: keep running prev when prev->scx.slice != 0
  - sched_ext: idle: Refresh idle masks during idle-to-idle transitions
  - sched_ext: switch class when preempted by higher priority scheduler
  - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()
  - sched_ext: Fix dsq_local_on selftest
  - sched_ext: initialize kit->cursor.flags
  - sched_ext: Fix invalid irq restore in scx_ops_bypass()
  - MAINTAINERS: add me as reviewer for sched_ext
  - MAINTAINERS: add self as reviewer for sched_ext
  - scx: Fix maximal BPF selftest prog
  - sched_ext: fix application of sizeof to pointer
  - selftests/sched_ext: fix build after renames in sched_ext API
  - sched_ext: Add __weak to fix the build errors
  - sched_ext: Replace scx_next_task_picked() with switch_class() in comment
  - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*()
  - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local()
  - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]()
  - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context
  - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
  - sched_ext: Clarify sched_ext_ops table for userland scheduler
  - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup
  - watchdog/softlockup: Report the most frequent interrupts
  - watchdog/softlockup: Low-overhead detection of interrupt storm
  - genirq: Provide a snapshot mechanism for interrupt statistics
  - genirq: Fix kabi for kstat_irqs in struct irq_desc
  - genirq: Convert kstat_irqs to a struct
  - genirq: Deduplicate interrupt descriptor initialization
  - sched_ext: Avoid live-locking bypass mode switching
  - sched_ext: Fix incorrect use of bitwise AND
  - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap
  - sched_ext: Introduce NUMA awareness to the default idle selection policy
  - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags
  - sched_ext: Rename CFI stubs to names that are recognized by BPF
  - sched_ext: Introduce LLC awareness to the default idle selection policy
  - sched_ext: Clarify ops.select_cpu() for single-CPU tasks
  - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection
  - sched_ext: Use btf_ids to resolve task_struct
  - sched/ext: Use tg_cgroup() to elieminate duplicate code
  - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED
  - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq()
  - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST
  - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx()
  - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type
  - sched_ext: Add a missing newline at the end of an error message
  - sched_ext: Fix enq_last_no_enq_fails selftest
  - sched_ext: Make cast_mask() inline
  - scx: Fix raciness in scx_ops_bypass()
  - scx: Fix exit selftest to use custom DSQ
  - sched_ext: Fix function pointer type mismatches in BPF selftests
  - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ
  - sched: Pass correct scheduling policy to __setscheduler_class
  - sched: Add __setscheduler_class() for sched_ext
  - sched_ext: Remove unnecessary cpu_relax()
  - sched_ext: Don't hold scx_tasks_lock for too long
  - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers
  - sched_ext: bypass mode shouldn't depend on ops.select_cpu()
  - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl()
  - sched_ext: Start schedulers with consistent p->scx.slice values
  - Revert "sched_ext: Use shorter slice while bypassing"
  - sched_ext: use correct function name in pick_task_scx() warning message
  - selftests: sched_ext: Add sched_ext as proper selftest target
  - sched_ext: Documentation: Update instructions for running example schedulers
  - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED
  - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called
  - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value
  - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init()
  - sched_ext: Improve error reporting during loading
  - sched_ext: Add __weak markers to BPF helper function decalarations
  - sched_ext: Remove redundant p->nr_cpus_allowed checker
  - sched_ext: Decouple locks in scx_ops_enable()
  - sched_ext: Decouple locks in scx_ops_disable_workfn()
  - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online()
  - sched_ext: Enable scx_ops_init_task() separately
  - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable()
  - sched_ext: Initialize in bypass mode
  - sched_ext: Remove SCX_OPS_PREPPING
  - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable()
  - sched_ext: Use shorter slice while bypassing
  - sched_ext: Split the global DSQ per NUMA node
  - sched_ext: Relocate find_user_dsq()
  - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new()
  - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL
  - tools/sched_ext: Receive misc updates from SCX repo
  - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle
  - sched_ext: Build fix for !CONFIG_SMP
  - sched_ext: Provide a sysfs enable_seq counter
  - sched_ext: Fix build when !CONFIG_STACKTRACE
  - sched_ext: Don't trigger ops.quiescent/runnable() on migrations
  - sched_ext: Synchronize bypass state changes with rq lock
  - scx_qmap: Implement highpri boosting
  - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq()
  - sched_ext: Compact struct bpf_iter_scx_dsq_kern
  - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq()
  - sched_ext: Move consume_local_task() upward
  - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq()
  - sched_ext: Reorder args for consume_local/remote_task()
  - sched_ext: Restructure dispatch_to_local_dsq()
  - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling
  - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON
  - sched_ext: Refactor consume_remote_task()
  - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate
  - sched_ext: Add missing static to scx_dump_data
  - sched_ext: Add missing static to scx_has_op[]
  - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx()
  - sched: Add dummy version of sched_group_set_idle()
  - sched: Fix kabi for int idle in struct task_group
  - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT
  - sched_ext: Add a cgroup scheduler which uses flattened hierarchy
  - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group
  - sched_ext: Add cgroup support
  - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT
  - sched: Make cpu_shares_read_u64() use tg_weight()
  - sched: Expose css_tg()
  - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable
  - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable
  - sched_ext: Remove sched_class->switch_class()
  - sched_ext: Remove switch_class_scx()
  - sched_ext: Relocate functions in kernel/sched/ext.c
  - sched_ext: Unify regular and core-sched pick task paths
  - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP
  - sched_ext: Don't call put_prev_task_scx() before picking the next task
  - sched: Fix kabi for put_prev_task in struct sched_class
  - sched: Add put_prev_task(.next)
  - sched: Combine the last put_prev_task() and the first set_next_task()
  - sched: Fix kabi pick_task in struct sched_class
  - sched: Rework pick_next_task()
  - sched: Split up put_prev_task_balance()
  - sched: Fixup set_next_task() implementations
  - sched/fair: Unify pick_{,next_}_task_fair()
  - sched/fair: Cleanup pick_task_fair()'s curr
  - sched/fair: Cleanup pick_task_fair() vs throttle
  - sched/fair: Remove unused 'curr' argument from pick_next_entity()
  - sched: Use set_next_task(.first) where required
  - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched()
  - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq()
  - sched_ext: Add missing cfi stub for ops.tick
  - scx_central: Fix smatch checker warning
  - sched_ext: Don't use double locking to migrate tasks across CPUs
  - sched_ext: define missing cfi stubs for sched_ext
  - sched_ext: Improve logging around enable/disable
  - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE
  - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals()
  - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64
  - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu()
  - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked()
  - sched_ext: Fix kabi for balance in struct sched_class
  - sched_ext: Simplify UP support by enabling sched_class->balance() in UP
  - sched_ext: Use update_curr_common() in update_curr_scx()
  - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance()
  - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick()
  - sched_ext: Allow p->scx.disallow only while loading
  - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT]
  - scx/selftests: Verify we can call create_dsq from prog_run
  - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL
  - sched_ext: Fixes incorrect type in bpf_scx_init()
  - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues
  - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches
  - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP
  - sched_ext: Unpin and repin rq lock from balance_scx()
  - sched: Move struct balance_callback definition upward
  - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated
  - sched_ext: Reimplement scx_bpf_reenqueue_local()
  - sched_ext/scx_qmap: Add an example usage of DSQ iterator
  - sched_ext: Implement DSQ iterator
  - sched_ext: Take out ->priq and ->flags from scx_dsq_node
  - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h
  - sched, sched_ext: Open code for_balance_class_range()
  - sched_ext: Minor cleanups in kernel/sched/ext.h
  - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect
  - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task()
  - sched, sched_ext: Simplify dl_prio() case handling in sched_fork()
  - sched/ext: Add BPF function to fetch rq
  - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all
  - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning
  - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency
  - sched_ext: fix typo in set_weight() description
  - sched_ext: Fix spelling mistake: "intead" -> "instead"
  - sched_ext: Drop tools_clean target from the top-level Makefile
  - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed
  - sched_ext: Add cpuperf support
  - cpufreq_schedutil: Refactor sugov_cpu_is_busy()
  - sched_ext: Fix kabi for switch_class in struct sched_class
  - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class()
  - sched_ext: Add selftests
  - sched_ext: Documentation: scheduler: Document extensible scheduler class
  - sched_ext: Add vtime-ordered priority queue to dispatch_q's
  - sched_ext: Implement core-sched support
  - sched_ext: Bypass BPF scheduler while PM events are in progress
  - sched_ext: Implement sched_ext_ops.cpu_online/offline()
  - sched_ext: Implement sched_ext_ops.cpu_acquire/release()
  - sched_ext: Implement SCX_KICK_WAIT
  - sched_ext: Track tasks that are subjects of the in-flight SCX operation
  - sched_ext: Implement tickless support
  - sched_ext: Add task state tracking operations
  - sched_ext: Make watchdog handle ops.dispatch() looping stall
  - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU
  - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support
  - tools/sched_ext: Add scx_show_state.py
  - sched_ext: Print debug dump after an error exit
  - sched_ext: Print sched_ext info when dumping stack
  - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT
  - sched_ext: Implement runnable task stall watchdog
  - sched_ext: Add sysrq-S which disables the BPF scheduler
  - sched_ext: Add scx_simple and scx_example_qmap example schedulers
  - sched_ext: Allow dequeue_task_scx to fail
  - sched_ext: Fix kabi for scx in struct task_struct
  - sched_ext: Implement BPF extensible scheduler class
  - sched: Fix kabi for dequeue_task in struct sched_class
  - sched: Allow sched_class::dequeue_task() to fail
  - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity
  - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class
  - sched/fair: Rename check_preempt_curr() to wakeup_preempt()
  - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair()
  - sched_ext: Add boilerplate for extensible scheduler class
  - sched: Add normal_policy()
  - sched: Factor out update_other_load_avgs() from __update_blocked_others()
  - sched: Factor out cgroup weight conversion functions
  - sched: Fix kabi for switching_to in struct sched_class
  - sched: Add sched_class->switching_to() and expose check_class_changing/changed()
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
  - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c
  - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c
  - sched/cpufreq: Rework schedutil governor performance estimation
  - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched/core: Remove ifdeffery for saved_state
  - sched: Misc cleanups
  - Revert "sched/core: Remove ifdeffery for saved_state"
  - Revert "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched: Simplify sched_move_task()
  - sched: Simplify sched_rr_get_interval()
  - sched: Simplify yield_to()
  - sched: Simplify sched_{set,get}affinity()
  - sched: Simplify syscalls
  - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting"
  - sched: Simplify set_user_nice()
  - cleanup: Make no_free_ptr() __must_check
  - sched: Fix kabi for reweight_task in struct sched_class
  - sched: Add sched_class->reweight_task()
  - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork()
  - sched: Restructure sched_class order sanity checks in sched_init()
  - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse"
  - Revert "sched: Add qos_sched_enabled() helper for future expansion"
  - Revert "sched/fair: Move dynamic affinity helper functions to sched.h"
  - Revert "sched/fair: Add SMT QoS sched core code"
  - Revert "arm64: Add arch code for SMT QoS"
  - Revert "config: Enable SMT_QOS"
  - ub: cdma: add software TLB invalidation for KSVA memory
  - !22510 ub: udma: code optimization about safe mode
  - !21986 urma: Enable RH2D streaming by IPoURMA
  - !22521 v12  SMT QOS
  - usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - !21948 urma: fix spinlock usage in ubagg_get_seg_info function
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - !22501  smb: client: prevent races in ->query_interfaces()
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - !22482  cifs: some missing initializations on replay
  - !22472  smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - !22426  smb: client: prevent races in ->query_interfaces()
  - net/oenetcls: fix RPS CPU index scaling bias
  - ub: udma: code optimization
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - !22511  apei: use blocking notifier for page offline policy chain
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - !22442 v5  ext4 hardware atomic write support
  - urma: Enable RH2D streaming by IPoURMA
  - !22503 ub: ub_fwctl: add querying the peak bandwidth.
  - !22500 ub:ubus: Bugfix control software restart features
  - ceph: add a bunch of missing ceph_path_info initializers
  - apei: use blocking notifier for page offline policy chain
  - urma: fix spinlock usage in ubagg_get_seg_info function
  - ub: udma: resolve legacy issues of shared page tables.
  - ub: udma: support dtu function.
  - ub: udma: support jetty_opt.
  - ub: udma: support ucp & udp.
  - ub: udma: support sharing JFC.
  - ub: udma: supports write with atomic.
  - ub: udma: Supports Safe Mode.
  - !22256 urma: fix reference count imbalance in ubagg and uburma modules
  - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute
  - x86: config: Enable Intel Application Energy Telemetry (AET)
  - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events
  - x86,fs/resctrl: Update documentation for telemetry events
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Move RMID initialization to first mount
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG
  - x86/resctrl: Add energy/perf choices to rdt boot option
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp()
  - fs/resctrl: Refactor mkdir_mondata_subdir()
  - x86/resctrl: Read telemetry events
  - x86/resctrl: Find and enable usable telemetry events
  - x86,fs/resctrl: Add architectural event pointer
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs
  - x86/resctrl: Discover hardware telemetry events
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring
  - x86,fs/resctrl: Add an architectural hook called for first mount
  - x86,fs/resctrl: Support binary fixed point event counters
  - x86,fs/resctrl: Handle events that can be read from any CPU
  - fs/resctrl: Make event details accessible to functions when reading events
  - x86,fs/resctrl: Rename some L3 specific functions
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count()
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr
  - x86/resctrl: Clean up domain_remove_cpu_ctrl()
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types
  - x86/resctrl: Move L3 initialization into new helper function
  - x86,fs/resctrl: Improve domain type checking
  - fs/resctrl: Consider sparse masks when initializing new group's allocation
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled
  - MAINTAINERS: resctrl: Add myself as reviewer
  - x86/resctrl: Configure mbm_event mode if supported
  - fs/resctrl: Introduce the interface to switch between monitor modes
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled
  - fs/resctrl: Introduce the interface to modify assignments in a group
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir
  - fs/resctrl: Provide interface to update the event configurations
  - fs/resctrl: Add event configuration directory under info/L3_MON/
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read()
  - x86/resctrl: Refactor resctrl_arch_rmid_read()
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode
  - fs/resctrl: Pass struct rdtgroup instead of individual members
  - fs/resctrl: Add the functionality to unassign MBM events
  - fs/resctrl: Add the functionality to assign MBM events
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC
  - fs/resctrl: Introduce event configuration field in struct mon_evt
  - x86/resctrl: Add data structures and definitions for ABMC assignment
  - fs/resctrl: Introduce interface to display number of free MBM counters
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain
  - fs/resctrl: Add resctrl file to display number of assignable counters
  - fs/resctrl: Introduce the interface to display monitoring modes
  - x86/resctrl: Add support to enable/disable AMD ABMC feature
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource
  - x86/resctrl: Add ABMC feature in the command line options
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC)
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - ub: ub_fwctl: add querying the peak bandwidth.
  - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process
  - dm: clear cloned request bio pointer when last clone bio completes
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - net/oenetcls: Add mode 2 for rps numa affinity
  - smb: client: prevent races in ->query_interfaces()
  - ub:ubus: Bugfix control software restart features
  - !22481 v3  optimize copy_from_user
  - !22490 ub: ubase&unic: Advanced Features for issue #9110
  - !22424  powerpc, perf: Check that current->mm is alive before getting user callchain
  - gpiolib: acpi: Fix potential out-of-boundary left shift
  - ub: ubase: Provide interface for obtaining ub feature
  - ub: ubase&unic: ubase & unic use non mirror mem
  - !22359 linkdata: fix compile error
  - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only
  - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool
  - !22456 ub:ubus: change the condition of io decoder creating page table or not
  - !22470 ub/unic: bugfix for ubase&unic driver
  - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - !22310 iommu: Optimize the iommu PLBI Framework
  - !22437 iommu/ummu: remove swap operation when ungrant
  - cifs: some missing initializations on replay
  - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - arm64: uaccess: add CONFIG control for copy_from_user_opt
  - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms
  - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - !22427  perf/x86/intel/uncore: Fix die ID init and look up bugs
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure
  - ub: ubase: Resolve the issue of insufficient ctrlq sequences
  - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs
  - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response
  - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time
  - ub: ubase: Solve the mailbox processing times out in abnormal scenarios
  - net: unic: Fixed the issue of memory overwriting in unic traffic flow
  - ub: ubase&unic: encoding alarm rectification
  - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure
  - net: unic: Supports querying of the Ethernet port's NL-layer register
  - ub: ubase: Fix the problem of frequent log printing
  - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices
  - ub: ubase: Delete residual DTU window of the UDMA during reset
  - ub: ubase: Add DTU capability bit printing
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - !22413 ub: ub_fwctl: query port link status add construct first link data
  - bpf/selftests: test_select_reuseport_kern: Remove unused header
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  - ksmbd: fix recursive locking in RPC handle list access
  - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  - mptcp: avoid dup SUB_CLOSED events after disconnect
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  - drm/msm/a6xx: fix bogus hwcg register updates
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
  - net/sched: act_ife: convert comma to semicolon
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - wifi: mac80211: move TDLS work to wiphy work
  - ksmbd: Fix race condition in RPC handle list access
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
  - ksmbd: smbd: fix dma_unmap_sg() nents
  - mei: trace: treat reg parameter as string
  - mm/kfence: randomize the freelist on initialization
  - drm/amdgpu/gfx11: fix wptr reset in KGQ init
  - drm/amdgpu/gfx10: fix wptr reset in KGQ init
  - drm/amdgpu/soc21: fix xclk for APUs
  - drm/imx/tve: fix probe device leak
  - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  - flex_proportions: make fprop_new_period() hardirq safe
  - selftests: mptcp: join: fix local endp not being tracked
  - mptcp: only reset subflow errors when propagated
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size
  - gpio: pca953x: mask interrupts in irq shutdown
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  - ASoC: fsl: imx-card: Do not force slot width to sample width
  - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  - riscv: compat: fix COMPAT_UTS_MACHINE definition
  - pinctrl: meson: mark the GPIO controller as sleeping
  - dma/pool: distinguish between missing and exhausted atomic pools
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  - net: bridge: fix static key check
  - nfc: nci: Fix race between rfkill and nci_unregister_device().
  - net/mlx5e: Account for netdev stats in ndo_get_stats64
  - net/mlx5e: Report rx_discards_phy via rx_dropped
  - ice: stop counting UDP csum mismatch as rx_errors
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  - rocker: fix memory leak in rocker_world_port_post_fini()
  - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  - ipv6: use the right ifindex when replying to icmpv6 from localhost
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  - octeon_ep: Fix memory leak in octep_device_setup()
  - net: bcmasp: fix early exit leak with fixed phy
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - !22370  scsi: target: tcm_loop: Drain commands in target_reset handler
  - !22364  cifs: Fix locking usage for tcon fields
  - net: ipa: fix event ring index not programmed for IPA v5.0+
  - !22458 ub:ubus: Add control software restart features
  - !22447 v4  arm64/ras: Firmware-first SEI error handling with ESB synchronization
  - iommu/ummu: remove swap operation when ungrant
  -  Linkdata: fix build failure due to missing IPsec configs in defconfig
  - ub:ubus: Add control software restart features
  - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL.
  - ub: ub_fwctl: query port link status add construct first link data
  - !22395 ub:ubus: support getting supported features data
  - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors"
  - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device
  - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM
  - ub:ubus: change the condition of io decoder creating page table or not
  - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors"
  - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default
  - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS
  - arm64: Add runtime switch to control ESB for SEI synchronization
  - arm64/entry: Add support to synchronize SEI at the exception boundary
  - !22417 iommu/ummu-core: support TID sharing within same mm
  - urma: fix reference count imbalance in ubagg and uburma modules
  - !22432  spi: use generic driver_override infrastructure
  - Documentation: ext4: Convert includes into toctrees
  - Documentation: ext4: atomic_writes: Demote last three sections
  - block: Don't allow an atomic write be truncated in blkdev_write_iter()
  - nvme: stop using AWUPF
  - ext4: Simplify last in leaf check in ext4_map_query_blocks
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE
  - block: Fix blk_validate_atomic_write_limits() build for arm32
  - block: fix kabi broken in enum req_flag_bits
  - iomap: Lift blocksize restriction on atomic writes
  - ext4: Add atomic block write documentation
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc
  - ext4: Add multi-fsblock atomic write support with bigalloc
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS
  - ext4: Make ext4_meta_trans_blocks() non-static for later use
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write()
  - ext4: Document an edge case for overwrites
  - ext4: Do not fallback to buffered-io for DIO atomic write
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE
  - ext4: Check for atomic writes support in write iter
  - ext4: Add statx support for atomic writes
  - fs: fix kabi broken in struct kstat
  - fs: Add initial atomic write support info to statx
  - fs: iomap: Atomic write support
  - fs: Export generic_atomic_write_valid()
  - nvme: Atomic write support
  - block: Add bdev atomic write limits helpers
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
  - block/fs: Pass an iocb to generic_atomic_write_valid()
  - block: Add fops atomic write support
  - block: Call blkdev_dio_unaligned() from blkdev_direct_IO()
  - block: fix kabi broken in struct queue_limits
  - block: Add core atomic write support
  - fs: Initial atomic write support
  - block: Generalize chunk_sectors support as boundary support
  - block: Pass blk_queue_get_max_sectors() a request pointer
  - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac
  - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs
  - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction
  - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support
  - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe
  - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000
  - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000
  - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver
  - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller
  - spi: use generic driver_override infrastructure
  - iommu/ummu-core: support TID sharing within same mm
  - perf/x86/intel/uncore: Fix die ID init and look up bugs
  - smb: client: prevent races in ->query_interfaces()
  - powerpc, perf: Check that current->mm is alive before getting user callchain
  - iommu: Optimize the iommu PLBI Framework
  - ub:ubus: support getting supported features data
  - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe
  - scsi: target: tcm_loop: Drain commands in target_reset handler
  - cifs: Fix locking usage for tcon fields
  - bridge: br_nd_send: validate ND option lengths
  - sched/fair: Fix overflow in vruntime_eligible()
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics
  - sched/fair: Mark m*_vruntime() with __maybe_unused
  - sched/fair: Clear rel_deadline when initializing forked entities
  - Revert "sched/fair: Clear rel_deadline when initializing forked entities"
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  - udp: Fix wildcard bind conflict check when using hash2
  - tcp: Rearrange tests in inet_csk_bind_conflict().
  - x86/delay: add support for Zhaoxin PAUSEOPT instruction
  - urma: fix the panic when ipourma module is repeatedly loaded
  - apei/ghes: Add Zhaoxin platform support for ghes_edac
  - x86/cpu: detect extended topology for Zhaoxin CPUs
  - ALSA: HDA: Add Centaur HDMI Controller and Codec support
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - efi/cper: Add Zhaoxin mem error decode for KH-50000
  - efi/cper: Add Zhaoxin cache error decode
  - efi/cper: Add Zhaoxin micro-architectural error decode
  - efi/cper: Add Zhaoxin non standard cper error decode
  - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000
  - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode
  - hwmon: zhaoxin-cputemp: Update for KX-8000
  - zhaoxin: Update hardware random number generator driver
  - ALSA: hda: Add support for Zhaoxin SB HDAC controller
  - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT
  - crypto: ccp: SM2 ccp encryption support Hygon model 10h
  - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm
  - mm: export split_vma for module use
  - crypto: ccp: Support SM4-GCM for hygon ccp
  - crypto: ccp: Support SM4-XTS for hygon ccp


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: liliguang <liliguang@baidu.com> - 2.9-1
changelog:
  - update to 2.9
  - dwarf-reader: Avoid adding declarations-only global vars to IR
  - libxml-utils: Pass paramater to xml_char_sptr_to_string by reference
  - ctf-reader: Fix memory leak in lookup_symbol_in_ctf_archive


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.21.0.27-1
changelog:
  - Update package to version 3.21.0.27
    Added libdap::Array::rename_dim() for HK-247
    Added new Direct I/O support so that modules written using libdap can pass compressed data buffers
    Fix handling of libtirpc pkg-config files with -L flags
    Moved the functionality of is_dap4_projected() into libdap4
    Added support for 64-bit sized arrays


author: laokz <zhangkai@iscas.ac.cn> - 3.21.0.27-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: zhaoyonghao10 <zhaoyonghao10@h-partners.com> - 0.70.2-7
changelog:
  - apply 2 patches: backport-Mark-all-protected-packages-as-user-installed-for-.patch, backport-fix--compare-RPMItem-in-transaction-with-rpmvercmp.patch


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: Funda Wang <fundawang@yeah.net> - 2.1.12-16
changelog:
  - Don't use deprecated functions when building against OpenSSL 3.0
  - fix linkage of shared libraries


author: yanglongkang <yanglongkang@h-partners.com> - 3.4.4-5
changelog:
  - Fix x86/ffi64 calls with 6 gp and some sse registers
    Robustify floating point comparison in test
    Fix floating point compare


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: wangkai <13474090681@163.com> - 2.5.31-3
changelog:
  - Fix CVE-2026-40334, CVE-2026-40334, CVE-2026-40338, CVE-2026-40339,
    CVE-2026-40340, CVE-2026-40341


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: Funda Wang <fundawang@yeah.net> - 1.5.8-2
changelog:
  - backport upstream patches
    * Bug fix: iso_image_set_ignore_aclea() inverted the setting
      for reading the XFS-style project id from disk files
    * Silenced error messages about ioctl(FS_IOC_FSGETXATTR)


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


author: xinghe <xinghe2@h-partners.com> - 2:1.6.40-2
changelog:
  - Type:cves
  - CVE:CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720
  - SUG:NA
  - DESC:fix CVE-2025-64505 CVE-2025-64506 CVE-2025-65018 CVE-2025-64720


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.5-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to remove redundant inclusion of libintl.h


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.9.4-19
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libquvi-0.9.4-lua-5.2.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: yixiangzhike <yixiangzhike007@163.com> - 1.15.2-3
changelog:
  - backport patches from upstream
      Fix a memory leak of the glib slist
      Add missing end callback for already downloaded zchunk files
      Fix memory leak of repo and repomd
      Fix a crash when the gnupghomedir is NULL or not specified on Python API


author: yuanchao <1050706328@qq.com> - 0.20.5-3
changelog:
  - fix `incompatible function pointer types passing`errors in test-vala-unstable.vala and test-vala-lang.vala


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zhangpan <zhangpan103@h-partners.com> - 2.74.3-10
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: nickyang <nickyang228@163.com> - 2.74.3-12
changelog:
  - Type:cves
  - ID:CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716
  - SUG:NA
  - DESC:fix CVE-2026-1539 CVE-2026-1467 CVE-2026-1761 CVE-2026-0716


author: nickyang <nickyang228@163.com> - 2.74.3-13
changelog:
  - Type:cves
  - ID:CVE-2026-1760 CVE-2026-1801 CVE-2026-2369
  - SUG:NA
  - DESC:fix CVE-2026-1760 CVE-2026-1801 CVE-2026-2369


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-5
changelog:
  - Type:CVE
  - Id:CVE-2025-4877 CVE-2025-4878 CVE-2025-5351 CVE-2025-5987 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877CVE-2025-4878CVE-2025-5351CVE-2025-5987CVE-2025-5372


author: zhangbinqin <zhangbinqin@h-partners.com> - 0.10.5-9
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2026-0968 CVE-2026-0967 CVE-2026-0966 CVE-2026-0965 CVE-2026-0964 CVE-2025-14821


author: yueyuankun<yueyuankun@kylinos.cn> - 1.11.0-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch to work around strict permissions issues for sshd tests


author: zhangbinqin <zhangbinqin@h-partners.com> - 1.11.0-6
changelog:
  - Type:CVE
  - CVE:CVE-2026-7598
  - SUG:NA
  - DESC:add username_len bounds checking to fix CVE-2026-7598


author: laokz <zhangkai@iscas.ac.cn> - 1.9.6-2
changelog:
  - make with_mem_leak_test option following i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.20-20
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-missing-protos.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-mem-deref.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-fix-resource-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.11-bz729009.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/libtar-1.2.20-no-static-buffer.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2013-4420.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33643-CVE-2021-33644.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/openEuler-CVE-2021-33645-CVE-2021-33646.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/CVE-2021-33640-fix-memory-leak-and-use-after-free-bugs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: Funda Wang <fundawang@yeah.net> - 1.5-2
changelog:
  - add upstream patch supporting tracing for AV1 picture info
  - requires x11 as pkgconfig private, since vdpau_x11.h refers X11/Xlib.h
  - cleanup spec


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-21
changelog:
  - migration: support onecopy migration
  - migration: support 'urma' protocol header type
  - ub: support config ub controller and vfio ub device and ummu
  - tests: add some testcase for ub device config
  - CCA:fixed virsh edit can not save
  - ham migration: add ham migration feature
  - ham migration: add QEMU_MIGRATION_DESTINATION
  - [patch] ham migrate: Move the timeout configuration to the configuration file
  - ham migration: add process of page table
  - ham migration: modify variable type for cleancode
  - ham migration: cleancode
  - !7ham migration: delete virDomainQemuMonitorCommandAsync and add meson config
  - util:resctrl:fixed an issue where the L3MAX value could incorrectly be set to 0
  - ham migration: add comment to libvirt_hammigrate.syms


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-26
changelog:
  - vdpa: Add the count of vdpa devices when calculating Max locked memory
  - virDomainDeviceIsUSB: Handle all USB devices and simplify the code
  - add TengyunS5000C cpu info to cpu map
  - qemu:Implement the RAS feature for aarch64


author: PengruiZhang <zhangpengrui@huawei.com> - 9.10.0-28
changelog:
  - virshFindDisk: fix NULL-dereference of xmlCopyNode() result
  - vir-qemu-sev-validate: Use string() method in xpath
  - network: convert virFileLinkPointsTo to return bool
  - security_util: fix log in virSecurityMoveRememberedLabel
  - Skip the UEFI check for CCA
  - conf: fix integer overflow in virDomainControllerDefParseXML
  - qemu: Replace the deprecated short-formed option "unix"
  - ch_driver: fix condition in virCHDomainRemoveInactive()
  - remote: DeserializeDomainDiskErrors: remove dead code


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-7
changelog:
  - Type: cherry-pick
  - ID:NA
  - SUG:NA
  - DESC: cherry-pick
  -    Add toolchain_clang build support
  -    Part of adopt to new cmake macro
  -    build with clang


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-8
changelog:
  - Type: Update
  - ID:NA
  - SUG:NA
  - DESC: Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.1.tar.gz


author: eastb233 <xiezhiheng@huawei.com> 17.0.6-9
changelog:
  - Update https://gitee.com/openeuler/llvm-project/archive/refs/tags/llvm-for-oE-17.0.6-2509.0.2.tar.gz


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-54
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.1
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-58
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.1
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.1


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-60
changelog:
  - update to llvm-for-oe-17.0.6-2603.0.2
  - release-note https://gitcode.com/openeuler/llvm-project/releases/llvm-for-oE-17.0.6-2603.0.2


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-69
changelog:
  - Migration/urma:reduce plflash update time
  - Migration/urma:avoid clearing remote dirty bitmap after migration completes
  - Migration/urma:add detailed downtime statistics for live migration
  - Migration/urma:support jfr post list mode over URMA
  - Migration/urma:move registration and unregistration ram to thread
  - Migration/urma:Fix VM crash due to packet loss during URMA-based memory migration
  - target/i386: csv: Enhance get/release logic for shared memory region of CSV3 VM
  - target/i386: csv: Remove all nodes within dma unmapping addr range
  - vfio/container: unregister csv3 mmio listener in vfio_disconnect_container()
  - system/physmem: Try to use 2M THP if CSV3 guest RAM backend is memfd
  - target/i386: csv: Support issuing the LAUNCH_FINISH_EX API with host-data for CSV3 guest
  - target/i386: csv: Introduce host-data=str option
  - arm/vfio: provide a vfio-platform device type that supports passthrough of mmcd(MAMI config device) into virtual machines.
  - Migration/urma:fix memory leak caused by hashmap in urma migration
  - bugfix: add PAS_EXPANSION config to support mmcd device
  - ub: fix ub ers map failed 
  - ub: fix vm reset core when config vfio-ub device


author: fanmingzhan <fanmingzhan@h-partners.com> - 11:8.2.0-70
changelog:
  - vfio: fix tpm test case, align the hignmem_platform_bus parameter, and modify the pas_expansion assignment


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-71
changelog:
  - Revert "target/arm/kvm-rme: Add DMA remapping for the shared memory region"
  - arm/kvm-rme: Add support for hisi-cca huge page mapping method
  - arm/kvm-rme: Add device assignment method for cca realm vm
  - arm/kvm-rme: fix qom definition and update KVM_EXIT_ARM_RME_DEV value


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-72
changelog:
  - ub: don't check ers addr size is power of 2
  - ub: support process msg code exch
  - ub: replace malloc with g_malloc0
  - Migration/urma:explicitly set URMA JFS tp_type to URMA_CTP
  - MAINTAINERS: add me as maintainer to virtio-snd
  - virtio-snd: remove TODO comments
  - virtio-snd: handle 5.14.6.2 for PCM_INFO properly(CVE-2026-3196)
  - virtio-snd: fix max_size bounds check in input cb(CVE-2026-3195)
  - virtio-snd: tighten read amount in in_cb(CVE-2026-3195)
  - hw/arm: Close unreleased out_fault_fd
  - pci: avoid the info qtree crash caused by arm-smmuv3-accel


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-73
changelog:
  - target/arm: add kunpeng 920 V1 support
  - target/arm: add kunpeng 950 V1 support
  - target/arm: add kunpeng 920 V2 support
  - hw/virtio/virtio-crypto: verify asym request size(CVE-2025-14876)
  - cryptodev-builtin: Limit the maximum size(CVE-2025-14876)
  - block/vmdk: fix OOB read in vmdk_read_extent()(CVE-2026-2243)
  - lsi53c895a: keep a reference to the device while SCRIPTS execute(CVE-2024-6519)


author: Pengrui Zhang <zhangpengrui@huawei.com> - 11:8.2.0-74
changelog:
  - virtio-blk: avoid using ioeventfd state in irqfd conditional
  - machine: Use error handling when CPU type is checked
  - hw/core/cpu: Update description of CPUState::node
  - hw/cpu/core: Cleanup unused included header in core.c
  - hw/cpu/cluster: Cleanup unused included header in cluster.c
  - hw/arm/bcm2836: Simplify use of reset-cbar property
  - hw/arm/bcm2836: Use ARM_CPU mp-affinity property
  - hw: Simplify accesses to the CPUState::start-powered-off property
  - hw/ppc/xive2_regs: Remove unnecessary cpu.h inclusion
  - hw/mips: Inline bios.h definitions
  - docs: use "buses" rather than "busses"
  - hw/ppc/spapr_cpu_core: Access QDev properties with proper API
  - hw/vfio: fix iteration over global VFIODevice list
  - vfio/iommufd: Remove the use of stat() to check file existence
  - vfio/container: Rename vfio_init_container to vfio_set_iommu
  - target/sparc: Simplify qemu_irq_ack
  - tests/avocado: add a simple i386 replay kernel test
  - tests/avocado: modernise the drive args for replay_linux
  - block: Fix crash when loading snapshot on inactive node
  - roms/efi: clean up edk2 build config
  - roms/efi: exclude efi shell from secure boot builds
  - Migration/urma:Avoid polling jfc timeouts resulting from hardware failures.
  - hyperv/syndbg: check length returned by cpu_physical_memory_map()(CVE-2026-3842)
  - ub: fix ers update error
  - kvm/arm/virt: Implement kvm-vtimer-status
  - hw/arm/virt: Implement timer early inject PV support
  - Migration/urma: replace ulseep with usleep in poll_jfc_wait


