# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: Yuhang Wei<weiyuhang3@huawei.com> - 1.0.6-2
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:modify version display and fix the path for EFI boot in bootloader.sh


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: chenyanpanHW <chenyanpan@huawei.com> - 2.14.19-25
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-multilib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-2.14.3-ref-leaks.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-make-j-safety.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/ORBit2-allow-deprecated.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0005-Fix-link_protocol_is_local_ipv46-for-ipv4-on-some-ip.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0014-Commit-patch-from-bug-662623-to-fix-connection-failu.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0016-bug-732274-fix-parallel-build-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: sunhai <sunhai10@huawei.com> - 36.16.5-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix lost ntfsprogs
          fix lost nvme-cli
          fix BuildRequires


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix(anaconda-pre-log-gen): don't unnecessarily use cat and use grep -E


author: songmingliang <songmingliang@uniontech.com> - 36.16.5-38
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the root user creation GTK GUI not checking if a password
     contains the user name.
          Fix the non-root user creation Text UI not checking if a password
     contains the user name.


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn>- 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: liyancheng <412998149@qq.com> - 0.19-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Support parsing multiple events and process repeat function


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.27.9-5
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: xingwei <xingwei14@h-partners.com> - 8.4.0-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         urlapi: fix redirect to a new fragment or query (only)
         tool_getparam: clear sensitive arguments better


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-4
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:delete report url added by other upstream patch to keep pace with DHCP


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: wangkai <13474090681@163.com> - 128.13.0-1
changelog:
  - Update to 128.13.0
  - Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
    CVE-2025-8033 CVE-2025-8034 CVE-2025-8035


author: wangkai <13474090681@163.com> - 140.3.1-1
changelog:
  - Update to 140.3.1
  - Fix CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533
    CVE-2025-10536 CVE-2025-10537 CVE-2025-9182 CVE-2025-9183 CVE-2025-9184
    CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039 CVE-2025-8040


author: Funda Wang <fundawang@yeah.net> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
    * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
      CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
      CVE-2025-13020


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-7
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.17.1-4
changelog:
  - Remove riscv64 prebuilded files
  - Build protoc, protoc-jar and protoc-jar-maven-plugin in prep state for riscv64


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix str2enum bug & data query refactor
  - add systemd service for anteater
  - remove 'sys-level' config param
  - add chinese descriptions
  - Update TCP Establish Model & Add Nic Loss Detector
  - Add disk throughput detector


author: Liping Hu <huliping10@huawei.com> - 2.0.1-2
changelog:
  - fix delete unnecessary judgments
    fix buffer overflow caused by strcpy()
    cadvisor_probe: fix int to str warnings
    fix compile warnings when disable KAFKA_CHANNEL
    fix segmentation fault when setting out_channel of metrics to logs
    fix writing metadata to log file properly
    bugfix: probe_define access out of bounds
    refactor(cadvisor): remove the dependency on the python-libconf
    avoid use ato*


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 12.3.1-38
changelog:
  - Type: Sync
  - DESC: Sync patches for fixing building issues with clang
  - Source: https://gitee.com/openeuler/gcc/pulls/239


author: dingguangya <dingguangya1@huawei.com> - 1.0-3
changelog:
  -Type:Fix
  -ID:NA
  -SUG:NA
  -DESC: Fix the hard coding problem in the software package building process


author: liqian <liqian@kylinos.cn> - 1.0-7
changelog:
  -Type:Fix
  -ID:NA
  -SUG:NA
  -DESC: Fix Only the spec file is packaged in src.rpm without the source code file, 
         so it cannot be directly decompressed and compiled using src.rpm


author: shenyangyang<shenyangyang4@huawei.com> - 1.0-0.7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: bump release rebuilding for adding rhash.spec to macro gcc_secure_exclude


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: yanglu <yanglu72@h-partners.com> - 2.78.0-1
changelog:
  - update glib-networking version to 2.78.0:
    - disable PKCS#11 tests when GNuTLS is built without PKCS#11 support
    - fix connection tests on 32-bit systems with 64-bit time_t
    - updated translations


author: zhangzikang <zhangzikang@kylinos.cn> - 2.78.3-3
changelog:
  - backport patch:
      backport-gdbusmessage-Clean-the-cached-arg0-when-setting-the-message-body.patch
      backport-gsocketclient-Fix-a-use-after-free-in-g_socket_client_connected_callback.patch
      backport-gcontextspecificgroup-Wait-until-stop_func-is-done.patch
      backport-gresources-fix-memory-leak-from-libelf.patch


author: jinshuaiyu <jinshuaiyu@kylinos.cn> - 2.38-73
changelog:
  - Backport patches from glibc upstream 2.38 branch
  - Free dynarray buffer after parsing nsswitch.conf


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: xuraoqing <xuraoqing@huawei.com> - 3.8.2-1
changelog:
  - update to 3.8.2
  - some API and ABI modifications, see NEWS for details
  - New option --attime to specify current time
  - libgnutls: Add a mechanism to control whether to enforce extended master secret (RFC 7627)
  - libgnutls: Add additional PBKDF limit checks in FIPS mode as defined in SP 800-132
  - libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to %GNUTLS_NO_DEFAULT_EXTENSIONS.
  - libgnutls: Add support for RFC 9258 external PSK importer.
  - libgnutls: ClientHello extensions are randomized by default,
               To make fingerprinting harder, TLS extensions in ClientHello messages are shuffled.
  - gnutls-cli: New option --starttls-name.
  - libgnutls: transparent KTLS support is extended to FreeBSD kernel.
  - libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452).
  - libgnutls: Add API functions to perform ECDH and DH key agreement.
  - libgnutls: Fix timing side-channel inside RSA-PSK key exchange(CVE-2023-5981).


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: Zheng Zengkai <zhengzengkai@huawei.com> - 6.6.0-22.0.0.25
changelog:
  - !6467 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix incorrect variable usage in scc_attr_is_visible()
  - RDMA/hns: Fix null pointer when alloc_scc_param() fails
  - RDMA/hns: Fix scc_param delay_work to execute after sysfs shutdown
  - RDMA/hns: Add mutex_destroy() to destroy the mutex
  - RDMA/hns: Fix a potential Sleep-in-Atomic-Context
  - !6468 v2  scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - !6439 v3  m: convert mm's rss stats to use atomic mode
  - mm: convert mm's rss stats to use atomic mode
  - percpu_counter: introduce atomic mode for percpu_counter
  - !6424  mm/migrate: correct nr_failed in migrate_pages_sync()
  - mm/migrate: add nr_split to trace_mm_migrate_pages stats.
  - mm/migrate: correct nr_failed in migrate_pages_sync()
  - !6390  nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
  - !5482 [OLK-6.6] crypto: update zhaoxin-aes for __pcpu_unique_paes_last_cword
  - crypto: update zhaoxin-aes for __pcpu_unique_paes_last_cword
  - !3171 [OLK-6.6] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - !6443  f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
  - f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
  - !6261 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Modify the print level of CQE error
  - RDMA/hns: Add mutex_destroy()
  - RDMA/hns: Fix GMV table pagesize
  - RDMA/hns: Fix mismatch exception rollback
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Fix deadlock on SRQ async events.
  - RDMA/hns: Remove unused parameters and variables
  - RDMA/hns: Use macro instead of magic number
  - RDMA/hns: Fix return value in hns_roce_map_mr_sg
  - !6265 tpm_tis: Avoid warning splat at shutdown
  - tpm,tpm_tis: Avoid warning splat at shutdown
  - !6402  bpf: Add missing BPF_LINK_TYPE invocations
  - bpf: Add missing BPF_LINK_TYPE invocations
  - !6256 [OLK-6.6] bugfix from upstream v6.9 for AMD EPYC perf
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
  - perf/x86/amd/lbr: Use freeze based on availability
  - !6134 v3  rootfs: Fix support for rootfstype= when root= is given
  - rootfs: Fix support for rootfstype= when root= is given


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-23.0.0.26
changelog:
  - !6306 【OLK-6.6】fix compiling problem in bzwx N5/N6 series NIC drivers
  - drivers: fix compiling problem in bzwx N5/N6 series NIC drivers
  - !6692  ipvlan: enable CONFIG_IPVLAN_L2E option in openeuler config
  - ipvlan: enable CONFIG_IPVLAN_L2E option in openeuler config
  - !6632  ext4: use iomap for regular file's buffered IO path and enable large foilo
  - ext4: add mount option for buffered IO iomap path
  - ext4: don't mark IOMAP_F_DIRTY for buffer write
  - ext4: enable large folio for regular file with iomap buffered IO path
  - filemap: support disable large folios on active inode
  - ext4: partial enable iomap for regular file's buffered IO path
  - ext4: fall back to buffer_head path for defrag
  - ext4: writeback partial blocks before zeroing out range
  - ext4: implement zero_range iomap path
  - ext4: implement mmap iomap path
  - ext4: implement writeback iomap path
  - ext4: implement buffered write iomap path
  - ext4: implement buffered read iomap path
  - ext4: add a new iomap aops for regular file's buffered IO path
  - ext4: introduce seq counter for the extent status entry
  - ext4: factor out ext4_map_create_blocks() to allocate new blocks
  - ext4: use reserved metadata blocks when splitting extent on endio
  - ext4: make ext4_da_map_blocks() buffer_head unaware
  - ext4: make ext4_insert_delayed_block() insert multi-blocks
  - ext4: factor out check for whether a cluster is allocated
  - ext4: make ext4_da_reserve_space() reserve multi-clusters
  - ext4: make ext4_es_insert_delayed_block() insert multi-blocks
  - ext4: drop iblock parameter
  - ext4: trim delalloc extent
  - ext4: check the extent status again before inserting delalloc block
  - ext4: factor out a common helper to query extent map
  - ext4: make ext4_set_iomap() recognize IOMAP_DELALLOC map type
  - ext4: make ext4_map_blocks() distinguish delalloc only extent
  - ext4: add a hole extent entry in cache after punch
  - ext4: convert to exclusive lock while inserting delalloc extents
  - ext4: refactor ext4_da_map_blocks()
  - iomap: do some small logical cleanup in buffered write
  - iomap: make iomap_write_end() return a boolean
  - iomap: use a new variable to handle the written bytes in iomap_write_iter()
  - iomap: don't increase i_size if it's not a write operation
  - iomap: drop the write failure handles when unsharing and zeroing
  - xfs: convert delayed extents to unwritten when zeroing post eof blocks
  - xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
  - xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
  - xfs: match lock mode in xfs_buffered_write_iomap_begin()
  - iomap: add pos and dirty_len into trace_iomap_writepage_map
  - iomap: pass the length of the dirty region to ->map_blocks
  - iomap: map multiple blocks at a time
  - iomap: submit ioends immediately
  - iomap: factor out a iomap_writepage_map_block helper
  - iomap: only call mapping_set_error once for each failed bio
  - iomap: don't chain bios
  - iomap: move the iomap_sector sector calculation out of iomap_add_to_ioend
  - iomap: clean up the iomap_alloc_ioend calling convention
  - iomap: move all remaining per-folio logic into iomap_writepage_map
  - iomap: factor out a iomap_writepage_handle_eof helper
  - iomap: move the PF_MEMALLOC check to iomap_writepages
  - iomap: move the io_folios field out of struct iomap_ioend
  - iomap: treat inline data in iomap_writepage_map as an I/O error
  - iomap: clear the per-folio dirty bits on all writeback failures
  - !6625 v2  perf data convert: Fix segfault when converting to json when cpu_desc isn't set
  - perf data convert: Fix segfault when converting to json when cpu_desc isn't set
  - !6647  infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - net/ethernet/huawei/hinic3: Add the CQM on which the RDMA depends
  - !6624  hisi-acc-vfio-pci:add DFX for acc migration driver
  - hisi_acc_vfio_pci: add exception error handling
  - hisi-acc-vfio-pci:add DFX for acc migration driver
  - !6658  sched: disable sched_autogroup by default
  - sched: disable sched_autogroup by default
  - !6626  Backport page fault and fork optimization
  - mm: swapfile: check usable swap device in __folio_throttle_swaprate()
  - mm/filemap: optimize filemap folio adding
  - lib/xarray: introduce a new helper xas_get_order
  - lib/xarray: introduce a new helper xas_get_order
  - mm/filemap: clean up hugetlb exclusion code
  - mm/filemap: return early if failed to allocate memory for split
  - mm: memory: check userfaultfd_wp() in vmf_orig_pte_uffd_wp()
  - !6179 crypto: hisilicon - fixed some code security review issues
  - crypto: hisilicon/debugfs - Resolve the problem of applying for redundant space in sq dump
  - crypto: hisilicon/sec - Fix memory leak for sec resource release
  - crypto: hisilicon - Adjust debugfs creation and release order
  - crypto: hisilicon/qm - Add the default processing branch
  - crypto: hisilicon/debugfs - Fix the processing logic issue in the debugfs creation
  - crypto: hisilicon/sgl - Delete redundant parameter verification
  - crypto: hisilicon/debugfs - Fix debugfs uninit process issue
  - crypto: hisilicon/sec - Add the condition for configuring the sriov function
  - crypto: hisilicon/zip - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - !6400  btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - !6444  Fix CVE-2024-26869
  - f2fs: fix to truncate meta inode pages forcely
  - f2fs: introduce f2fs_invalidate_internal_cache() for cleanup
  - !6585  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - !6251  ubi: Check for too small LEB size in VTBL code
  - ubi: Check for too small LEB size in VTBL code
  - !6418  media: pvrusb2: fix uaf in pvr2_context_set_notify
  - media: pvrusb2: fix uaf in pvr2_context_set_notify


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-24.0.0.27
changelog:
  - !6824  Introduce CONFIG_ARCH_CUSTOM_NUMA_DISTANCE
  - config: enable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - arm64/numa: Support node_reclaim_distance adjust for arch
  - !6877  maple_tree: avoid checking other gaps after getting the largest gap
  - maple_tree: avoid checking other gaps after getting the largest gap
  - !6859 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.23-6.6.30 LTS Patches
  - x86: update openeuler_defconfig for x86_64
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
  - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst
  - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads
  - Revert "riscv: kdump: fix crashkernel reserving problem on RISC-V"
  - ovl: fix memory leak in ovl_parse_param()
  - phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6
  - i2c: smbus: fix NULL function pointer dereference
  - sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
  - sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr
  - sched/eevdf: Always update V if se->on_rq when reweighting
  - phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
  - riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
  - riscv: Fix TASK_SIZE on 64-bit NOMMU
  - riscv: fix VMALLOC_START definition
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
  - dma: xilinx_dpdma: Fix locking
  - dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
  - phy: qcom: m31: match requested regulator name with dt schema
  - phy: rockchip: naneng-combphy: Fix mux on rk3588
  - phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
  - phy: rockchip-snps-pcie3: fix bifurcation on rk3588
  - phy: freescale: imx8m-pcie: fix pcie link-up instability
  - phy: marvell: a3700-comphy: Fix hardcoded array size
  - phy: marvell: a3700-comphy: Fix out of bounds read
  - soundwire: amd: fix for wake interrupt handling for clockstop mode
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: tegra186: Fix residual calculation
  - dmaengine: owl: fix register access functions
  - x86/tdx: Preserve shared bit on mprotect()
  - phy: qcom: qmp-combo: Fix VCO div offset on v3
  - phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE
  - mtd: diskonchip: work around ubsan link failure
  - udp: preserve the connected status if only UDP cmsg
  - fbdev: fix incorrect address computation in deferred IO
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - ACPI: CPPC: Fix access width used for PCC registers
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses
  - irqchip/gic-v3-its: Prevent double free on error
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu: Assign correct bits for SDMA HDP flush
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - arm64: dts: qcom: sm8450: Fix the msi-map entries
  - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
  - LoongArch: Fix access error when read fault on a write-only VMA
  - LoongArch: Fix callchain parse error with kernel tracepoint events
  - cpu: Re-enable CPU mitigations by default for !X86 architectures
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - btrfs: scrub: run relocation repair when/only needed
  - btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
  - btrfs: fallback if compressed IO fails for ENOSPC
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
  - smb3: missing lock when picking channel
  - smb: client: Fix struct_group() usage in __packed structs
  - mm: support page_mapcount() on page_has_type() pages
  - mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros
  - mmc: sdhci-msm: pervent access to suspended controller
  - mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in qcom_misc_cmd_type_exec()
  - Bluetooth: qca: fix NULL-deref on non-serdev setup
  - Bluetooth: qca: fix NULL-deref on non-serdev suspend
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - rust: remove `params` from `module` macro example
  - kbuild: rust: force `alloc` extern to allow "empty" Rust files
  - kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE
  - rust: make mutually exclusive with CFI_CLANG
  - rust: init: remove impl Zeroable for Infallible
  - rust: don't select CONSTRUCTORS
  - x86/cpu: Fix check for RDPKRU in __show_regs()
  - selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
  - selftests/seccomp: Change the syscall used in KILL_THREAD test
  - selftests/seccomp: user_notification_addfd check nextfd is available
  - Squashfs: check the inode number is not the invalid value of zero
  - squashfs: convert to new timestamp accessors
  - drm/amdgpu: fix visible VRAM handling during faults
  - drm/amdgpu: add shared fdinfo stats
  - drm: add drm_gem_object_is_shared_for_memory_stats() helper
  - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly
  - mm/gup: explicitly define and check internal GUP flags, disallow FOLL_TOUCH
  - KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"
  - KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - tls: fix lockless read of strp->msg_ready in ->poll
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - ice: fix LAG and VF lock dependency in ice_reset_vf()
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()
  - net: phy: dp83869: Fix MII mode failure
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - ARM: dts: imx6ull-tarragon: fix USB over-current polarity
  - eth: bnxt: fix counting packets discarded due to OOM and netpoll
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - mlxsw: spectrum_acl_tcam: Fix race in region ID allocation
  - mlxsw: Use refcount_t for reference counting
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - ipvs: Fix checksumming on GSO of SCTP packets
  - Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional()
  - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
  - Bluetooth: btusb: mediatek: Fix double free of skb in coredump
  - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
  - Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE
  - Bluetooth: btusb: Fix triggering coredump implementation for QCA
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check
  - net: phy: mediatek-ge-soc: follow netdev LED trigger semantics
  - net: gtp: Fix Use-After-Free in gtp_dellink
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - ipv4: check for NULL idev in ip_route_use_hint()
  - net: fix sk_memory_allocated_{add|sub} vs softirqs
  - net: make SK_MEMORY_PCPU_RESERV tunable
  - tools: ynl: don't ignore errors in NLMSG_DONE messages
  - ax25: Fix netdev refcount issue
  - NFC: trf7970a: disable all regulators on removal
  - net: dsa: mv88e6xx: fix supported_interfaces setup in mv88e6250_phylink_get_caps()
  - cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()
  - bnxt_en: Fix the PCI-AER routines
  - bnxt_en: refactor reset close code
  - bridge/br_netlink.c: no need to return void function
  - icmp: prevent possible NULL dereferences from icmp_build_probe()
  - ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with the valid property
  - mlxsw: core_env: Fix driver initialization with old firmware
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - net: bcmasp: fix memory leak when bringing down interface
  - vxlan: drop packets from invalid src-address
  - net: libwx: fix alloc msix vectors failed
  - wifi: mac80211: fix unaligned le16 access
  - wifi: mac80211: remove link before AP
  - wifi: mac80211_hwsim: init peer measurement result
  - drm/gma500: Remove lid code
  - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded
  - wifi: mac80211: clean up assignments to pointer cache.
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - gpio: tangier: Use correct type for the IRQ chip data
  - arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller
  - arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"
  - arm64: dts: mediatek: mt7986: drop invalid thermal block clock
  - arm64: dts: mediatek: mt7986: reorder nodes
  - arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller
  - arm64: dts: mediatek: mt7986: drop invalid properties from ethsys
  - arm64: dts: mediatek: mt7986: reorder properties
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358
  - arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for MT6315
  - arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for MT6315
  - arm64: dts: mediatek: cherry: Describe CPU supplies
  - arm64: dts: mediatek: cherry: Add platform thermal configuration
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
  - arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
  - arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
  - arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
  - HID: logitech-dj: allow mice to use all types of reports
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
  - cifs: reinstate original behavior again for forceuid/forcegid
  - smb: client: fix rename(2) regression against samba
  - cifs: Fix reacquisition of volume cookie on still-live connection
  - selftests: kselftest: Fix build failure with NOLIBC
  - thunderbolt: Reset only non-USB4 host routers in resume
  - PCI/ASPM: Fix deadlock when enabling ASPM
  - ksmbd: common: use struct_group_attr instead of struct_group for network_open_info
  - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
  - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
  - powerpc/ftrace: Ignore ftrace locations in exit text sections
  - virtio_net: Do not send RSS key if it is not supported
  - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
  - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
  - nilfs2: fix OOB in nilfs_set_de_type
  - bootconfig: use memblock_free_late to free xbc memory to buddy
  - nouveau: fix instmem race condition around ptr stores
  - drm/vmwgfx: Fix crtc's atomic check conditional
  - drm/vmwgfx: Sort primary plane formats by order of preference
  - drm/vmwgfx: Fix prime import/export
  - drm/amdgpu: remove invalid resource->start check v2
  - drm/amdkfd: Fix memory leak in create_process failure
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - fuse: fix leaked ENOSYS error on first statx call
  - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
  - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries
  - mm/userfaultfd: allow hugetlb change protection upon poison entry
  - init/main.c: Fix potential static_command_line memory overflow
  - arm64: hibernate: Fix level3 translation fault in swsusp_save()
  - arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H
  - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
  - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
  - KVM: x86/pmu: Disable support for adaptive PEBS
  - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
  - sched: Add missing memory barrier in switch_mm_cid
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - speakup: Avoid crash on very long word
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - serial: core: Fix missing shutdown and startup for serial base port
  - serial: core: Clearing the circular buffer before NULLifying it
  - serial: stm32: Reset .throttled state in .startup()
  - serial: stm32: Return IRQ_NONE in the ISR if no handling happend
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - serial: mxs-auart: add spinlock around changing cts state
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - binder: check offset alignment in binder_get_object()
  - ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
  - ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N
  - ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad ICE-1
  - ALSA: hda/tas2781: correct the register for pow calibrated data
  - ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages
  - net/mlx5: E-switch, store eswitch pointer before registering devlink_param
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - x86/bugs: Fix BHI retpoline check
  - clk: mediatek: Do a runtime PM get on controllers during probe
  - clk: Get runtime PM before walking tree for clk_summary
  - clk: Show active consumers of clocks in debugfs
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - interconnect: Don't access req_list while it's being manipulated
  - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes
  - usb: new quirk to reduce the SET_ADDRESS request timeout
  - usb: xhci: Add timeout argument in address_device USB HCD callback
  - drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go
  - ALSA: scarlett2: Rename scarlett_gen2 to scarlett2
  - PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word()
  - PCI/DPC: Use FIELD_GET()
  - ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support
  - ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support
  - ALSA: scarlett2: Add correct product series name to messages
  - ALSA: scarlett2: Default mixer driver to enabled
  - thunderbolt: Reset topology created by the boot firmware
  - thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4 routers
  - thunderbolt: Introduce tb_path_deactivate_hop()
  - thunderbolt: Introduce tb_port_reset()
  - ASoC: ti: Convert Pandora ASoC to GPIO descriptors
  - ALSA: scarlett2: Add support for Clarett 8Pre USB
  - ALSA: scarlett2: Move USB IDs out from device_info struct
  - drm/radeon: make -fstrict-flex-arrays=3 happy
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - drm: nv04: Fix out of bounds access
  - s390/cio: fix race condition during online processing
  - s390/qdio: handle deferred cc1
  - perf lock contention: Add a missing NULL check
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - drm/i915/mst: Limit MST+DSC to TGL+
  - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
  - net: ethernet: mtk_eth_soc: fix WED + wifi reset
  - gpiolib: swnode: Remove wrong header inclusion
  - s390/ism: Properly fix receive message buffer allocation
  - net: dsa: mt7530: fix port mirroring for MT7988 SoC switch
  - net: dsa: mt7530: fix mirroring frames received on local port
  - tun: limit printing rate when illegal packet received by tun dev
  - ice: Fix checking for unsupported keys on non-tunnel device
  - ice: tc: allow zero flags in parsing tc flower
  - ice: tc: check src_vsi in case of traffic from VF
  - net: stmmac: Fix IP-cores specific MAC capabilities
  - net: stmmac: Fix max-speed being ignored on queue re-init
  - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation
  - net: change maximum number of UDP segments to 128
  - net/mlx5e: Prevent deadlock while disabling aRFS
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
  - net: sparx5: flower: fix fragment flags handling
  - af_unix: Don't peek OOB data without MSG_OOB.
  - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
  - netfilter: flowtable: incorrect pppoe tuple
  - netfilter: flowtable: validate pppoe header
  - netfilter: nft_set_pipapo: do not free live element
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - scsi: ufs: qcom: Add missing interconnect bandwidth values for Gear 5
  - arm64: tlb: Fix TLBI RANGE operand
  - arm64/mm: Modify range-based tlbi to decrement scale
  - net: usb: ax88179_178a: avoid writing the mac address before first reading
  - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING
  - random: handle creditable entropy from atomic process context
  - selftests/ftrace: Limit length in subsystem-enable tests
  - SUNRPC: Fix rpcgss_context trace event acceptor field
  - drm/i915/vma: Fix UAF on destroy against retire race
  - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure
  - media: videobuf2: request more buffers for vb2_read
  - drm/msm/dpu: populate SSPP scaler block version
  - selftests: timers: Fix posix_timers ksft_print_msg() warning
  - ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE
  - ceph: rename _to_client() to _to_fs_client()
  - ceph: pass the mdsc to several helpers
  - drm/amd/display: Do not recursively call manual trigger programming
  - selftests/timers/posix_timers: Reimplement check_timer_distribution()
  - selftests: timers: Convert posix_timers test to generate KTAP output
  - drm/i915: Disable live M/N updates when using bigjoiner
  - drm/i915: Adjust seamless_m_n flag behaviour
  - drm/i915: Enable VRR later during fastsets
  - drm/i915: Extract intel_crtc_vblank_evade_scanlines()
  - drm/i915: Change intel_pipe_update_{start,end}() calling convention
  - drm/i915/cdclk: Fix voltage_level programming edge case
  - drm/i915/mst: Reject FEC+MST on ICL
  - drm/i915: Fix FEC pipe A vs. DDI A mixup
  - smb: client: refresh referral without acquiring refpath_lock
  - smb: client: guarantee refcounted children from parent session
  - smb3: show beginning time for per share stats
  - smb: client: fix UAF in smb2_reconnect_server()
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses()
  - drm/amd/display: fix disable otg wa logic in DCN316
  - drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
  - drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
  - drm/amdgpu: fix incorrect number of active RBs for gfx11
  - drm/amdgpu: always force full reset for SOC21
  - drm/amdgpu: Reset dGPU if suspend got aborted
  - drm/i915: Disable port sync when bigjoiner is used
  - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
  - x86/bugs: Fix BHI handling of RRSBA
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
  - x86/bugs: Fix BHI documentation
  - x86/bugs: Fix return type of spectre_bhi_state()
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - perf/x86: Fix out of range data
  - vhost: Add smp_rmb() in vhost_enable_notify()
  - vhost: Add smp_rmb() in vhost_vq_avail_empty()
  - arm64: dts: imx8-ss-dma: fix spi lpcg indices
  - arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
  - arm64: dts: imx8-ss-conn: fix usb lpcg indices
  - arm64: dts: imx8-ss-dma: fix adc lpcg indices
  - arm64: dts: imx8-ss-dma: fix can lpcg indices
  - arm64: dts: imx8qm-ss-dma: fix can lpcg indices
  - drm/client: Fully protect modes[] with dev->mode_config.mutex
  - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - drm/ast: Fix soft lockup
  - drm/amdkfd: Reset GPU on queue preemption failure
  - drm/i915/vrr: Disable VRR when using bigjoiner
  - drm/vmwgfx: Enable DMA mappings with SEV
  - accel/ivpu: Fix deadlock in context_xa
  - scsi: sg: Avoid race in error handling & drop bogus warn
  - scsi: sg: Avoid sg device teardown race
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - io_uring/net: restore msg_control on sendzc retry
  - btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
  - btrfs: record delayed inode root in transaction
  - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - selftests: mptcp: use += operator to append strings
  - iommu/vt-d: Allocate local memory for page request queue
  - iommu/vt-d: Fix wrong use of pasid config
  - tracing: hide unused ftrace_event_id_fops
  - net: ena: Set tx_info->xdpf value to NULL
  - net: ena: Use tx_ring instead of xdp_ring for XDP channel TX
  - net: ena: Pass ena_adapter instead of net_device to ena_xmit_common()
  - net: ena: Move XDP code to its new files
  - net: ena: Fix incorrect descriptor free behavior
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - af_unix: Fix garbage collector racing against connect()
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
  - net: dsa: mt7530: trap link-local frames regardless of ST Port State
  - Revert "s390/ism: fix receive message buffer allocation"
  - net: sparx5: fix wrong config being used when reconfiguring PCS
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
  - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow
  - net/mlx5: Correctly compare pkt reformat ids
  - net/mlx5: Properly link new fs rules into the tree
  - net/mlx5: offset comp irq index in name by one
  - net/mlx5: Register devlink first under devlink lock
  - net/mlx5: SF, Stop waiting for FW as teardown was called
  - netfilter: complete validation of user input
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
  - Bluetooth: SCO: Fix not validating setsockopt user input
  - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
  - Bluetooth: hci_sync: Use QoS to determine which PHY to scan
  - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
  - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - af_unix: Clear stale u->oob_skb.
  - net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
  - net: ks8851: Inline ks8851_rx_skb()
  - bnxt_en: Reset PTP tx_avail after possible firmware reset
  - bnxt_en: Fix error recovery for RoCE ulp client
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
  - s390/ism: fix receive message buffer allocation
  - geneve: fix header validation in geneve[6]_xmit_skb
  - block: fix q->blkg_list corruption during disk rebind
  - octeontx2-pf: Fix transmit scheduler resource leak
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
  - nouveau: fix function cast warning
  - Revert "drm/qxl: simplify qxl_fence_wait"
  - cxl/core: Fix initialization of mbox_cmd.size_out in get event
  - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
  - drm/msm/dpu: don't allow overriding data from catalog
  - cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before assigned
  - cxl/mem: Fix for the index of Clear Event Record Handle
  - firmware: arm_scmi: Make raw debugfs entries non-seekable
  - ARM: OMAP2+: fix USB regression on Nokia N8x0
  - mmc: omap: restore original power up/down steps
  - mmc: omap: fix deferred probe
  - mmc: omap: fix broken slot switch lookup
  - ARM: OMAP2+: fix N810 MMC gpiod table
  - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
  - media: cec: core: remove length check of Timer Status
  - PM: s2idle: Make sure CPUs will wakeup directly on resume
  - ACPI: scan: Do not increase dep_unmet for already met dependencies
  - platform/chrome: cros_ec_uart: properly fix race condition
  - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
  - Bluetooth: Fix memory leak in hci_req_sync_complete()
  - ring-buffer: Only update pages_touched when a new page is touched
  - raid1: fix use-after-free for original bio in raid1_write_request()
  - ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
  - batman-adv: Avoid infinite loop trying to resize local TT
  - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
  - ata: libata-core: Allow command duration limits detection for ACS-4 drives
  - smb3: fix Open files on server counter going negative
  - drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes
  - Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()"
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  - net: mpls: error out if inner headers are not set
  - Bluetooth: btintel: Fixe build regression
  - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
  - randomize_kstack: Improve entropy diffusion
  - media: mediatek: vcodec: adding lock to protect encoder context list
  - media: mediatek: vcodec: adding lock to protect decoder context list
  - media: mediatek: vcodec: Fix oops when HEVC init fails
  - selftests: mptcp: display simult in extra_msg
  - gcc-plugins/stackleak: Avoid .head.text section
  - ALSA: hda/realtek: Add quirks for some Clevo laptops
  - fbmon: prevent division by zero in fb_videomode_from_videomode()
  - drivers/nvme: Add quirks for device 126f:2262
  - modpost: fix null pointer dereference
  - io_uring: clear opcode specific data for an early failure
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  - x86/xen: attempt to inflate the memory balloon on PVH
  - ASoC: soc-core.c: Skip dummy codec when adding platforms
  - thermal/of: Assume polling-delay(-passive) 0 when absent
  - ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  - usb: typec: tcpci: add generic tcpci fallback compatible
  - thunderbolt: Keep the domain powered when USB4 port is in redrive mode
  - usb: typec: ucsi: Limit read size on v1.2
  - usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
  - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
  - tools: iio: replace seekdir() in iio_generic_buffer
  - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  - Input: xpad - add support for Snakebyte GAMEPADs
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
  - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  - Input: allocate keycode for Display refresh rate toggle
  - Input: imagis - use FIELD_GET where applicable
  - RDMA/cm: add timeout to cm_destroy_id wait
  - block: prevent division by zero in blk_rq_stat_sum()
  - input/touchscreen: imagis: Correct the maximum touch area value
  - libperf evlist: Avoid out-of-bounds access
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm: Check output polling initialized before disabling
  - drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
  - HID: input: avoid polling stylus battery on Chromebook Pompom
  - i2c: designware: Fix RX FIFO depth define on Wangxun 10Gb NIC
  - accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings
  - drm/amd/display: Fix nanosec stat overflow
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: add a hint for block bitmap corrupt state in mb_groups
  - ASoC: Intel: avs: Populate board selection with new I2S entries
  - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter
  - media: sta2x11: fix irq handler cast
  - Julia Lawall reported this null pointer dereference, this should fix it.
  - rcu-tasks: Repair RCU Tasks Trace quiescence check
  - rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
  - ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops
  - isofs: handle CDs with bad root inode but good Joliet root directory
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - sysv: don't call sb_bread() with pointers_lock held
  - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  - drm/ttm: return ENOSPC from ttm_bo_mem_space v3
  - ASoC: SOF: amd: Optimize quirk for Valve Galileo
  - drm: panel-orientation-quirks: Add quirk for GPD Win Mini
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  - drm/vc4: don't check if plane->state->fb == state->fb
  - Bluetooth: Add new quirk for broken read key length on ATS2851
  - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
  - ice: use relative VSI index for VFs instead of PF VSI number
  - btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  - wifi: cfg80211: check A-MSDU format more carefully
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm
  - overflow: Allow non-type arg to type_max() and type_min()
  - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
  - wifi: ath11k: decrease MHI channel buffer length to 8KB
  - dma-direct: Leak pages on dma_set_decrypted() failure
  - net: pcs: xpcs: Return EINVAL in the internal methods
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  - pstore/zone: Add a null pointer check to the psz_kmsg_read
  - ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of CONFIG_X86_ANDROID_TABLETS
  - wifi: mt76: mt7996: add locking for accessing mapped registers
  - wifi: mt76: mt7996: disable AMSDU for non-data frames
  - wifi: mt76: mt7915: add locking for accessing mapped registers
  - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
  - firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename()
  - net: skbuff: add overflow debug check to pull/push helpers
  - ionic: set adminq irq affinity
  - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
  - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
  - net: add netdev_lockdep_set_classes() to virtual drivers
  - arm64: dts: rockchip: fix rk3399 hdmi ports node
  - arm64: dts: rockchip: fix rk3328 hdmi ports node
  - ARM: dts: rockchip: fix rk322x hdmi ports node
  - ARM: dts: rockchip: fix rk3288 hdmi ports node
  - cpuidle: Avoid potential overflow in integer multiplication
  - panic: Flush kernel log buffer at the end
  - printk: For @suppress_panic_printk check for other CPU in panic
  - wifi: iwlwifi: pcie: Add the PCI device id for new hardware
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
  - net: phy: phy_device: Prevent nullptr exceptions on ISR
  - net: stmmac: dwmac-starfive: Add support for JH7100 SoC
  - bnx2x: Fix firmware version string character counts
  - wifi: rtw89: fix null pointer access when abort scan
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - x86: set SPECTRE_BHI_ON as default
  - KVM: x86: Add BHI_NO
  - x86/bhi: Mitigate KVM by default
  - x86/bhi: Add BHI mitigation knob
  - x86/bhi: Enumerate Branch History Injection (BHI) bug
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
  - x86/bhi: Add support for clearing branch history at syscall entry
  - x86/syscall: Don't force use of indirect calls for system calls
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
  - x86/boot: Move mem_encrypt= parsing to the decompressor
  - x86/efistub: Remap kernel text read-only before dropping NX attribute
  - x86/sev: Move early startup code into .head.text section
  - x86/sme: Move early SME kernel encryption handling into .head.text
  - efi/libstub: Add generic support for parsing mem_encrypt=
  - x86/head/64: Move the __head definition to <asm/init.h>
  - bpf: put uprobe link's path and task in release callback
  - mptcp: don't account accept() of non-MPC client as fallback to TCP
  - mptcp: don't overwrite sock_ops in mptcp_is_tcpsk()
  - selftests: mptcp: connect: fix shellcheck warnings
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - Revert "x86/mpparse: Register APIC address only once"
  - drm/i915/gt: Enable only one CCS for compute workload
  - drm/i915/gt: Do not generate the command streamer for all the CCS
  - drm/i915/gt: Disable HW load balancing for CCS
  - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
  - smb: client: fix potential UAF in smb2_is_network_name_deleted()
  - smb: client: fix potential UAF in is_valid_oplock_break()
  - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break()
  - smb: client: fix potential UAF in cifs_dump_full_key()
  - smb: client: fix potential UAF in cifs_stats_proc_show()
  - smb: client: fix potential UAF in cifs_stats_proc_write()
  - smb: client: fix potential UAF in cifs_debug_files_proc_show()
  - smb3: retrying on failed server close
  - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
  - smb: client: handle DFS tcons in cifs_construct_tcon()
  - riscv: process: Fix kernel gp leakage
  - riscv: Fix spurious errors from __get/put_kernel_nofault
  - s390/entry: align system call table on 8 bytes
  - selftests/mm: include strings.h for ffsl
  - mm/secretmem: fix GUP-fast succeeding on secretmem folios
  - arm64/ptrace: Use saved floating point state type to determine SVE layout
  - perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  - x86/mm/pat: fix VM_PAT handling in COW mappings
  - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  - driver core: Introduce device_link_wait_removal()
  - io_uring/kbuf: hold io_buffer_list reference over mmap
  - io_uring: use private workqueue for exit work
  - io_uring/kbuf: protect io_buffer_list teardown with a reference
  - io_uring/kbuf: get rid of bl->is_ready
  - io_uring/kbuf: get rid of lower BGID lists
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  - ALSA: hda/realtek - Fix inactive headset mic jack
  - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
  - ksmbd: validate payload size in ipc response
  - ksmbd: don't send oplock break if rename fails
  - gpio: cdev: fix missed label sanitizing in debounce_setup()
  - gpio: cdev: check for NULL labels when sanitizing them for irqs
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
  - ice: fix typo in assignment
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
  - riscv: Disable preemption when using patch_map()
  - ASoC: SOF: amd: fix for false dsp interrupts
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning
  - spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe
  - cifs: Fix caching to try to do open O_WRONLY as rdwr on server
  - Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
  - scsi: mylex: Fix sysfs buffer lengths
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  - regmap: maple: Fix uninitialized symbol 'ret' warnings
  - ASoC: amd: acp: fix for acp_init function error handling
  - spi: s3c64xx: Use DMA mode from fifo size
  - spi: s3c64xx: determine the fifo depth only once
  - spi: s3c64xx: allow full FIFO masks
  - spi: s3c64xx: define a magic value
  - spi: s3c64xx: remove else after return
  - spi: s3c64xx: explicitly include <linux/bits.h>
  - spi: s3c64xx: sort headers alphabetically
  - spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  - ASoC: rt722-sdca-sdw: fix locking sequence
  - ASoC: rt712-sdca-sdw: fix locking sequence
  - ASoC: rt711-sdw: fix locking sequence
  - ASoC: rt711-sdca: fix locking sequence
  - ASoC: rt5682-sdw: fix locking sequence
  - drm/prime: Unbreak virtgpu dma-buf export
  - nouveau/uvmm: fix addr/range calcs for remap operations
  - drm/panfrost: fix power transition timeout warnings
  - ALSA: hda: cs35l56: Add ACPI device match tables
  - regmap: maple: Fix cache corruption in regcache_maple_drop()
  - RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
  - drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
  - ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
  - 9p: Fix read/write debug statements to report server reply
  - fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
  - KVM: SVM: Add support for allowing zero SEV ASIDs
  - KVM: SVM: Use unsigned integers when dealing with ASIDs
  - net: ravb: Always update error counters
  - net: ravb: Always process TX descriptor ring
  - net: ravb: Let IP-specific receive function to interrogate descriptors
  - e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
  - e1000e: Minor flow correction in e1000_shutdown function
  - e1000e: Workaround for sporadic MDI error on Meteor Lake systems
  - intel: legacy: field get conversion
  - intel: add bit macro includes where needed
  - i40e: Remove circular header dependencies and fix headers
  - i40e: Split i40e_osdep.h
  - i40e: Move memory allocation structures to i40e_alloc.h
  - i40e: Simplify memory allocation functions
  - virtchnl: Add header dependencies
  - i40e: Refactor I40E_MDIO_CLAUSE* macros
  - i40e: Remove back pointer from i40e_hw structure
  - i40e: Enforce software interrupt during busy-poll exit
  - i40e: Remove _t suffix from enum type names
  - drm/amd: Flush GFXOFF requests in prepare stage
  - drm/amd: Add concept of running prepare_suspend() sequence for IP blocks
  - drm/amd: Evict resources during PM ops prepare() callback
  - drm/amd/display: Prevent crash when disable stream
  - drm/amd/display: Fix DPSTREAM CLK on and off sequence
  - usb: typec: ucsi: Fix race between typec_switch and role_switch
  - i40e: fix vf may be used uninitialized in this function warning
  - i40e: fix i40e_count_filters() to count only active/new filters
  - octeontx2-af: Add array index check
  - octeontx2-pf: check negative error code in otx2_open()
  - octeontx2-af: Fix issue with loading coalesced KPU profiles
  - udp: prevent local UDP tunnel packets from being GROed
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - r8169: skip DASH fw status checks when DASH is disabled
  - mlxbf_gige: stop interface during shutdown
  - ipv6: Fix infinite recursion in fib6_dump_done().
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
  - tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-wildcard addresses.
  - selftests: reuseaddr_conflict: add missing new line at the end of the output
  - erspan: make sure erspan_base_hdr is present in skb->head
  - i40e: Fix VF MAC filter removal
  - ice: fix enabling RX VLAN filtering
  - gro: fix ownership transfer
  - selftests: net: gro fwd: update vxlan GRO test expectations
  - net: dsa: mv88e6xxx: fix usable ports on 88e6020
  - net: phy: micrel: Fix potential null pointer dereference
  - net: fec: Set mac_managed_pm during probe
  - net: txgbe: fix i2c dev name cannot match clkdev
  - net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
  - net: stmmac: fix rx queue priority assignment
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
  - net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
  - net/sched: act_skbmod: prevent kernel-infoleak
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
  - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  - netfilter: validate user input for expected length
  - netfilter: nf_tables: discard table flag update with pending basechain deletion
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - netfilter: nf_tables: flush pending destroy work before exit_net release
  - netfilter: nf_tables: reject new basechain after table flag update
  - x86/bugs: Fix the SRSO mitigation on Zen3/4
  - x86/nospec: Refactor UNTRAIN_RET[_*]
  - x86/srso: Disentangle rethunk-dependent options
  - x86/srso: Improve i-cache locality for alias mitigation
  - vsock/virtio: fix packet delivery to tap device
  - net: mana: Fix Rx DMA datasize and skb_over_panic
  - net: usb: ax88179_178a: avoid the interface always configured as random address
  - net/rds: fix possible cp null dereference
  - xen-netfront: Add missing skb_mark_for_recycle
  - selftests: mptcp: join: fix dev in check_endpoint
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - netfilter: nf_tables: release batch on table validation from abort path
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - Bluetooth: hci_event: set the conn encrypted before conn establishes
  - Bluetooth: add quirk for broken address properties
  - Bluetooth: qca: fix device-address endianness
  - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  - Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
  - x86/bpf: Fix IP after emitting call depth accounting
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  - selinux: avoid dereference of garbage after mount failure
  - KVM: arm64: Fix host-programmed guest events in nVHE
  - RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
  - RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
  - gpio: cdev: sanitize the label before requesting the interrupt
  - modpost: do not make find_tosym() return NULL
  - btrfs: fix race when detecting delalloc ranges during fiemap
  - btrfs: ensure fiemap doesn't race with writes when FIEMAP_FLAG_SYNC is given
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - mm/treewide: replace pud_large() with pud_leaf()
  - dm integrity: fix out-of-range warning
  - drm/i915/mtl: Update workaround 14018575942
  - drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
  - drm/i915/mtl: Update workaround 14016712196
  - drm/i915: Replace several IS_METEORLAKE with proper IP version checks
  - drm/i915: Eliminate IS_MTL_GRAPHICS_STEP
  - drm/i915/xelpg: Call Xe_LPG workaround functions based on IP version
  - drm/i915: Consolidate condition for Wa_22011802037
  - drm/i915: Tidy workaround definitions
  - drm/i915/dg2: Drop pre-production GT workarounds
  - inet: inet_defrag: prevent sk release while still in use
  - Octeontx2-af: fix pause frame configuration in GMP mode
  - net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
  - net: bcmasp: Bring up unimac after PHY link up
  - netfilter: nf_tables: skip netdev hook unregistration if table is dormant
  - netfilter: nf_tables: reject table flag and netdev basechain updates
  - netfilter: nf_tables: reject destroy command to remove basechain hooks
  - cifs: Fix duplicate fscache cookie warnings
  - bpf: Protect against int overflow for stack access size
  - mlxbf_gige: call request_irq() after NAPI initialized
  - tls: get psock ref after taking rxlock to avoid leak
  - tls: adjust recv return with async crypto and failed copy to userspace
  - tls: recv: process_rx_list shouldn't use an offset with kvec
  - net: hns3: mark unexcuted loopback test result as UNEXECUTED
  - net: hns3: fix kernel crash when devlink reload during pf initialization
  - net: hns3: fix index limit to support all queue stats
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  - selftests: vxlan_mdb: Fix failures with old libnet
  - net: wwan: t7xx: Split 64bit accesses to fix alignment issues
  - tcp: properly terminate timers for kernel sockets
  - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
  - s390/qeth: handle deferred cc1
  - igc: Remove stale comment about Tx timestamping
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
  - ice: fix memory corruption bug with suspend and rebuild
  - ice: realloc VSI stats arrays
  - ice: Refactor FW data type and fix bitmap casting issue
  - ALSA: hda: cs35l56: Set the init_done flag before component_add()
  - wifi: iwlwifi: mvm: include link ID when releasing frames
  - wifi: iwlwifi: disable multi rx queue for 9000
  - wifi: iwlwifi: mvm: rfi: fix potential response leaks
  - mlxbf_gige: stop PHY during open() error paths
  - tools: ynl: fix setting presence bits in simple nests
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - arm64: bpf: fix 32bit unconditional bswap
  - dma-buf: Fix NULL pointer dereference in sanitycheck()
  - bpf, arm64: fix bug in BPF_LDX_MEMSX
  - s390/bpf: Fix bpf_plt pointer arithmetic
  - scripts/bpf_doc: Use silent mode when exec make cmd
  - drm/i915: Pre-populate the cursor physical dma address
  - drm/i915/display: Use i915_gem_object_get_dma_address to get dma address
  - Revert "workqueue.c: Increase workqueue name length"
  - Revert "workqueue: Move pwq->max_active to wq->max_active"
  - Revert "workqueue: Factor out pwq_is_empty()"
  - Revert "workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()"
  - Revert "workqueue: Move nr_active handling into helpers"
  - Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while activating"
  - Revert "workqueue: Introduce struct wq_node_nr_active"
  - Revert "workqueue: Shorten events_freezable_power_efficient name"
  - drm/amdgpu: fix use-after-free bug
  - tools/resolve_btfids: fix build with musl libc
  - x86/sev: Skip ROM range scans and validation for SEV-SNP guests
  - scsi: lpfc: Correct size for wqe for memset()
  - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset()
  - usb: dwc3: pci: Drop duplicate ID
  - Revert "x86/bugs: Use fixed addressing for VERW operand"
  - x86/bugs: Use fixed addressing for VERW operand
  - scsi: qla2xxx: Delay I/O Abort on PCI error
  - scsi: qla2xxx: Change debug message during driver unload
  - scsi: qla2xxx: Fix double free of fcport
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer
  - scsi: qla2xxx: Fix command flush on cable pull
  - scsi: qla2xxx: NVME|FCP prefer flag not being honored
  - scsi: qla2xxx: Update manufacturer detail
  - scsi: qla2xxx: Split FCE|EFT trace control
  - scsi: qla2xxx: Fix N2N stuck connection
  - scsi: qla2xxx: Prevent command send on chip reset
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  - usb: typec: ucsi_acpi: Refactor and fix DELL quirk
  - usb: typec: ucsi: Ack unsupported commands
  - usb: typec: ucsi: Clear EVENT_PENDING under PPM lock
  - usb: typec: Return size of buffer if pd_set operation succeeds
  - usb: udc: remove warning when queue disabled ep
  - usb: dwc2: gadget: LPM flow fix
  - usb: dwc2: gadget: Fix exiting from clock gating
  - usb: dwc2: host: Fix ISOC flow in DDMA mode
  - usb: dwc2: host: Fix hibernation flow
  - usb: dwc2: host: Fix remote wakeup from hibernation
  - USB: core: Fix deadlock in port "disable" sysfs attribute
  - USB: core: Add hub_get() and hub_put() routines
  - USB: core: Fix deadlock in usb_deauthorize_interface()
  - usb: dwc3: Properly set system wakeup
  - staging: vc04_services: fix information leak in create_component()
  - staging: vc04_services: changen strncpy() to strscpy_pad()
  - scsi: core: Fix unremoved procfs host directory regression
  - scsi: sd: Fix TCG OPAL unlock on system resume
  - vfio/pds: Make sure migration file isn't accessed after reset
  - drm/amd/display: Clear OPTC mem select on disable
  - drm/amd/display: Disconnect phantom pipe OPP from OPTC being disabled
  - drm/amd/display: Fix hang/underflow when transitioning to ODM4:1
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - usb: cdc-wdm: close race between read and workqueue
  - Revert "usb: phy: generic: Get the vbus supply"
  - mtd: spinand: Add support for 5-byte IDs
  - Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync
  - drm/i915/gt: Reset queue_priority_hint on parking
  - drm/i915: Do not match JSL in ehl_combo_pll_div_frac_wa_needed()
  - drm/i915/dsi: Go back to the previous INIT_OTP/DISPLAY_ON order, mostly
  - drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
  - drm/i915/hwmon: Fix locking inversion in sysfs getter
  - drm/amdgpu: fix deadlock while reading mqd from debugfs
  - drm/amdkfd: fix TLB flush after unmap for GFX9.4.2
  - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
  - net: ll_temac: platform_get_resource replaced by wrong function
  - nouveau/dmem: handle kcalloc() allocation failure
  - thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
  - block: Do not force full zone append completion in req_bio_endio()
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove()
  - mmc: core: Avoid negative index with array access
  - mmc: core: Initialize mmc_blk_ioc_data
  - mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc HS200 mode
  - selftests/mm: fix ARM related issue with fork after pthread_create
  - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM
  - mm: cachestat: fix two shmem bugs
  - hexagon: vmlinux.lds.S: handle attributes section
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  - Revert "drm/amd/display: Fix sending VSC (+ colorimetry) packets for DP/eDP displays without PSR"
  - wifi: iwlwifi: fw: don't always use FW dump trig
  - wifi: iwlwifi: mvm: disable MLO for the time being
  - wifi: cfg80211: add a flag to disable wireless extensions
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - btrfs: zoned: use zone aware sb location for scrub
  - btrfs: zoned: don't skip block groups with 100% zone unusable
  - btrfs: fix race in read_extent_buffer_pages()
  - tmpfs: fix race on handling dquot rbtree
  - ARM: prctl: reject PR_SET_MDWE on pre-ARMv6
  - prctl: generalize PR_SET_MDWE support check to be per-arch
  - x86/efistub: Reinstate soft limit for initrd loading
  - x86/efistub: Add missing boot_params for mixed mode compat entry
  - init: open /initrd.image with O_LARGEFILE
  - ALSA: hda/tas2781: add locks to kcontrols
  - ALSA: hda/tas2781: remove digital gain kcontrol
  - perf top: Use evsel's cpus to replace user_requested_cpus
  - selftests/mm: Fix build with _FORTIFY_SOURCE
  - selftests/mm: gup_test: conform test to TAP format output
  - pwm: img: fix pwm clock lookup
  - efi: fix panic in kdump kernel
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
  - x86/mpparse: Register APIC address only once
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
  - irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type
  - irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi()
  - irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi()
  - irqchip/renesas-rzg2l: Add macro to retrieve TITSR register offset based on register's index
  - irqchip/renesas-rzg2l: Flush posted write in irq_eoi()
  - irqchip/renesas-rzg2l: Implement restriction when writing ISCR register
  - printk: Update @console_may_schedule in console_trylock_spinning()
  - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
  - swiotlb: Fix alignment checks when both allocation and DMA masks are present
  - swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc()
  - swiotlb: Fix double-allocation of slots due to broken alignment handling
  - entry: Respect changes to system call number by trace_sys_enter()
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - ARM: 9352/1: iwmmxt: Remove support for PJ4/PJ4B cores
  - clocksource/drivers/arm_global_timer: Fix maximum prescaler value
  - x86/sev: Fix position dependent variable references in startup code
  - x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
  - vfio/fsl-mc: Block calling interrupt handler without trigger
  - vfio/platform: Create persistent IRQ handlers
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - btrfs: fix deadlock with fiemap and extent locking
  - xfs: remove conditional building of rt geometry validator functions
  - xfs: reset XFS_ATTR_INCOMPLETE filter on node removal
  - xfs: update dir3 leaf block metadata after swap
  - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
  - xfs: short circuit xfs_growfs_data_private() if delta is zero
  - xfs: initialise di_crc in xfs_log_dinode
  - xfs: add missing nrext64 inode flag check to scrub
  - xfs: force all buffers to be written during btree bulk load
  - xfs: fix an off-by-one error in xreap_agextent_binval
  - xfs: recompute growfsrtfree transaction reservation while growing rt volume
  - xfs: remove unused fields from struct xbtree_ifakeroot
  - xfs: make xchk_iget safer in the presence of corrupt inode btrees
  - xfs: don't allow overly small or large realtime volumes
  - xfs: fix 32-bit truncation in xfs_compute_rextslog
  - xfs: make rextslog computation consistent with mkfs
  - xfs: transfer recovered intent item ownership in ->iop_recover
  - xfs: pass the xfs_defer_pending object to iop_recover
  - xfs: use xfs_defer_pending objects to recover intent items
  - xfs: don't leak recovered attri intent items
  - xfs: consider minlen sized extents in xfs_rtallocate_extent_block
  - xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t
  - xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h
  - wifi: rtw88: 8821cu: Fix connection failure
  - wifi: iwlwifi: pcie: fix RB status reading
  - ASoC: amd: yc: Revert "Fix non-functional mic on Lenovo 21J2"
  - x86/efistub: Call mixed mode boot services on the firmware's stack
  - drm/amd/display: handle range offsets in VRR ranges
  - drm/i915: Don't explode when the dig port we don't have an AUX CH
  - iio: imu: inv_mpu6050: fix FIFO parsing when empty
  - iio: imu: inv_mpu6050: fix frequency setting when chip is off
  - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table
  - iio: accel: adxl367: fix I2C FIFO data register
  - iio: accel: adxl367: fix DEVID read after reset
  - arm64: dts: qcom: sc8280xp-x13s: limit pcie4 link speed
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - ARM: imx_v6_v7_defconfig: Restore CONFIG_BACKLIGHT_CLASS_DEVICE
  - tee: optee: Fix kernel panic caused by incorrect error handling
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook
  - ALSA: hda/realtek - Add Headset Mic supported Acer NB platform
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - Revert "tty: serial: simplify qcom_geni_serial_send_chunk_fifo()"
  - vt: fix unicode buffer corruption when deleting characters
  - mei: me: add arrow lake point H DID
  - mei: me: add arrow lake point S DID
  - serial: port: Don't suspend if the port is still busy
  - misc: fastrpc: Pass proper arguments to scm call
  - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  - xhci: Fix failure to detect ring expansion need.
  - usb: port: Don't try to peer unused USB ports based on location
  - usb: gadget: ncm: Fix handling of zero block length packets
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  - drm/i915: Check before removing mm notifier
  - tty: serial: imx: Fix broken RS485
  - drm/amdgpu/pm: Fix the error of pwm1_enable setting
  - tracing: Use .flush() call to wake up readers
  - SEV: disable SEV-ES DebugSwap by default
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
  - KVM: x86: Mark target gfn of emulated atomic instruction as dirty
  - firewire: ohci: prevent leak of left-over IRQ on unbind
  - init/Kconfig: lower GCC version check for -Warray-bounds
  - Input: xpad - add additional HyperX Controller Identifiers
  - cgroup/cpuset: Fix retval in update_cpumask()
  - usb: typec: tpcm: Fix PORT_RESET behavior for self powered devices
  - selftests: mptcp: diag: return KSFT_FAIL not test_cnt
  - mm, mmap: fix vma_merge() case 7 with vma_ops->close
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  - crypto: sun8i-ce - Fix use after free in unprepare
  - crypto: rk3288 - Fix use after free in unprepare
  - drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
  - nouveau: lock the client object tree.
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  - netfilter: nf_tables: reject constant set with timeout
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
  - net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.
  - drm/amd/display: Use freesync when `DRM_EDID_FEATURE_CONTINUOUS_FREQ` found
  - workqueue: Shorten events_freezable_power_efficient name
  - drm/bridge: lt8912b: do not return negative values from .get_modes()
  - drm/bridge: lt8912b: clear the EDID property on failures
  - drm/bridge: lt8912b: use drm_bridge_edid_read()
  - drm/bridge: add ->edid_read hook and drm_bridge_edid_read()
  - drm/ttm: Make sure the mapped tt pages are decrypted when needed
  - wifi: brcmfmac: Demote vendor-specific attach/detach messages to info
  - wifi: brcmfmac: cfg80211: Use WSEC to set SAE password
  - wifi: brcmfmac: add per-vendor feature detection callback
  - x86/pm: Work around false positive kmemleak report in msr_build_context()
  - dm snapshot: fix lockup in dm_exception_table_exit
  - drm/amd/display: Fix noise issue on HDMI AV mute
  - drm/amd/display: Return the correct HDCP error code
  - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  - ahci: asm1064: asm1166: don't limit reported ports
  - ahci: asm1064: correct count of reported ports
  - wireguard: selftests: set RISCV_ISA_FALLBACK on riscv{32,64}
  - wireguard: netlink: access device through ctx instead of peer
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list
  - LoongArch/crypto: Clean up useless assignment operations
  - LoongArch: Define the __io_aw() hook as mmiowb()
  - LoongArch: Change __my_cpu_offset definition to avoid mis-optimization
  - virtio: reenable config if freezing device failed
  - cxl/trace: Properly initialize cxl_poison region name
  - net: hns3: tracing: fix hclgevf trace event strings
  - drm/i915: Add missing ; to __assign_str() macros in tracepoint code
  - NFSD: Fix nfsd_clid_class use of __string_len() macro
  - net: esp: fix bad handling of pages from page_pool
  - x86/CPU/AMD: Update the Zenbleed microcode revisions
  - cpufreq: dt: always allocate zeroed cpumask
  - mtd: rawnand: Constrain even more when continuous reads are enabled
  - mtd: rawnand: Fix and simplify again the continuous read derivations
  - cifs: open_cached_dir(): add FILE_READ_EA to desired access
  - cifs: reduce warning log level for server not advertising interfaces
  - cifs: make cifs_chan_update_iface() a void function
  - cifs: delete unnecessary NULL checks in cifs_chan_update_iface()
  - cifs: do not let cifs_chan_update_iface deallocate channels
  - cifs: make sure server interfaces are requested only for SMB3+
  - cifs: add xid to query server interface call
  - nilfs2: prevent kernel bug at submit_bh_wbc()
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - f2fs: truncate page cache before clearing flags when aborting atomic write
  - f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag
  - Revert "block/mq-deadline: use correct way to throttling write requests"
  - memtest: use {READ,WRITE}_ONCE in memory scanning
  - drm/vc4: hdmi: do not return negative values from .get_modes()
  - drm/imx/ipuv3: do not return negative values from .get_modes()
  - drm/exynos: do not return negative values from .get_modes()
  - drm/panel: do not return negative error codes from drm_panel_get_modes()
  - drm/probe-helper: warn about negative .get_modes()
  - s390/zcrypt: fix reference counting on zcrypt card objects
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - dlm: fix user space lkb refcounting
  - ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
  - ring-buffer: Fix full_waiters_pending in poll
  - ring-buffer: Fix resetting of shortest_full
  - ring-buffer: Do not set shortest_full when full target is hit
  - ring-buffer: Fix waking up ring buffer readers
  - io_uring: clean rings on NO_MMAP alloc fail
  - platform/x86/intel/tpmi: Change vsec offset to u64
  - ksmbd: retrieve number of blocks using vfs_getattr in set_file_allocation_info
  - ksmbd: replace generic_fillattr with vfs_getattr
  - server: convert to new timestamp accessors
  - vfio/platform: Disable virqfds on cleanup
  - vfio/pci: Lock external INTx masking ops
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - thermal/drivers/mediatek: Fix control buffer enablement on MT7896
  - cifs: allow changing password during remount
  - cifs: prevent updating file size from server if we have a read/write lease
  - smb: client: stop revalidating reparse points unnecessarily
  - PCI: hv: Fix ring buffer size calculation
  - PCI: dwc: endpoint: Fix advertised resizable BAR size
  - PCI: qcom: Enable BDF to SID translation properly
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  - NFS: Read unlock folio on nfs_page_create_from_folio() error
  - nfs: fix UAF in direct writes
  - sparc32: Fix parport build with sparc32
  - io_uring: fix mshot io-wq checks
  - io_uring/net: correctly handle multishot recvmsg retry setup
  - PCI/AER: Block runtime suspend when handling errors
  - speakup: Fix 8bit characters from direct synth
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  - phy: tegra: xusb: Add API to retrieve the port number of phy
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  - nvmem: meson-efuse: fix function pointer type mismatch
  - ext4: fix corruption during on-line resize
  - hwmon: (amc6821) add of_match table
  - landlock: Warn once if a Landlock action is requested while disabled
  - drm/etnaviv: Restore some id values
  - leds: trigger: netdev: Fix kernel panic on interface rename trig notify
  - Bluetooth: btnxpuart: Fix btnxpuart_close
  - mmc: core: Fix switch on gp3 partition
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - block: Fix page refcounts for unaligned buffers in __bio_release_pages()
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  - dm-raid: fix lockdep waring in "pers->hot_add_disk"
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  - btrfs: qgroup: always free reserved space for extent records
  - serial: Lock console when calling into driver before registration
  - serial: core: only stop transmit when HW fifo is empty
  - usb: dwc3-am62: Disable wakeup at remove
  - usb: dwc3-am62: fix module unload/reload behavior
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  - fuse: don't unhash root
  - fuse: fix root lookup with nonzero generation
  - fuse: replace remaining make_bad_inode() with fuse_make_bad()
  - mmc: tmio: avoid concurrent runs of mmc_request_done()
  - PM: sleep: wakeirq: fix wake irq warning in system suspend
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  - KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled
  - USB: serial: option: add MeiG Smart SLM320 product
  - USB: serial: cp210x: add ID for MGP Instruments PDS100
  - USB: serial: add device ID for VeriFone adapter
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  - powerpc/fsl: Fix mfpmr build errors with newer binutils
  - usb: xhci: Add error handling in xhci_map_urb_for_dma
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
  - vfio/pds: Always clear the save/restore FDs on reset
  - PM: suspend: Set mem_sleep_current during kernel command line setup
  - cpufreq: Limit resolving a frequency to policy min/max
  - docs: Restore "smart quotes" for quotes
  - iio: adc: rockchip_saradc: use mask for write_enable bitfield
  - iio: adc: rockchip_saradc: fix bitmask for channels on SARADCv2
  - md/raid5: fix atomicity violation in raid5_cache_count
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  - parisc: Fix csum_ipv6_magic on 64-bit systems
  - parisc: Fix csum_ipv6_magic on 32-bit systems
  - parisc: Fix ip_fast_csum
  - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
  - x86/nmi: Fix the inverse "in NMI handler" check
  - md/md-bitmap: fix incorrect usage for sb_index
  - mtd: rawnand: meson: fix scrambling mode value in command macro
  - ubi: correct the calculation of fastmap size
  - ubifs: Set page uptodate in the correct place
  - fuse: fix VM_MAYSHARE and direct_io_allow_mmap
  - fat: fix uninitialized field in nostale filehandles
  - bounds: support non-power-of-two CONFIG_NR_CPUS
  - kasan/test: avoid gcc warning for intentional overflow
  - block: Clear zone limits for a non-zoned stacked queue
  - ext4: correct best extent lstart adjustment logic
  - selftests/mqueue: Set timeout to 180 seconds
  - sparc: vDSO: fix return value of __setup handler
  - sparc64: NMI watchdog: fix return value of __setup handler
  - powerpc/smp: Increase nr_cpu_ids to include the boot CPU
  - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core
  - powercap: intel_rapl_tpmi: Fix System Domain probing
  - powercap: intel_rapl_tpmi: Fix a register bug
  - powercap: intel_rapl: Fix locking in TPMI RAPL
  - sched: Simplify tg_set_cfs_bandwidth()
  - powercap: intel_rapl: Fix a NULL pointer dereference
  - thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature
  - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf()
  - arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping
  - arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT
  - media: mc: Expand MUST_CONNECT flag to always require an enabled link
  - media: mc: Rename pad variable to clarify intent
  - media: mc: Add num_links flag to media_pad
  - media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
  - media: mc: Fix flags handling when creating pad links
  - media: mc: Add local pad to pipeline regardless of the link state
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - pci_iounmap(): Fix MMIO mapping leak
  - drm/vmwgfx: Fix the lifetime of the bo cursor memory
  - serial: max310x: fix NULL pointer dereference in I2C instantiation
  - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  - remoteproc: virtio: Fix wdg cannot recovery remote processor
  - arm64: dts: qcom: sc7280: Add additional MSI interrupts
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  - wifi: brcmfmac: avoid invalid list operation when vendor attach fails
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - drm/vmwgfx: Unmap the surface before resetting it on a plane state
  - KVM: x86: Use a switch statement and macros in __feature_translate()
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace
  - x86/efistub: Don't clear BSS twice in mixed mode
  - x86/efistub: Clear decompressor BSS in native EFI entrypoint
  - dm-integrity: align the outgoing bio in integrity_recheck
  - dm io: Support IO priority
  - selftests: forwarding: Fix ping failure due to short timeout
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
  - net: dsa: mt7530: fix handling of all link-local frames
  - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
  - bpf: report RCU QS in cpumap kthread
  - net: report RCU QS on threaded NAPI repolling
  - rcu: add a helper to report consolidated flavor QS
  - netfilter: nf_tables: do not compare internal table flags on updates
  - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  - octeontx2-af: Use separate handlers for interrupts
  - octeontx2-pf: Send UP messages to VF only when VF is up.
  - octeontx2-pf: Use default max_active works instead of one
  - octeontx2-pf: Wait till detach_resources msg is complete
  - octeontx2: Detect the mbox up or down message via register
  - devlink: fix port new reply cmd type
  - net/bnx2x: Prevent access to a freed page in page_pool
  - dm-integrity: fix a memory leak when rechecking the data
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
  - ceph: stop copying to iter at EOF on sync reads
  - ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels
  - hsr: Handle failures in module init
  - rds: introduce acquire/release ordering in acquire/release_in_xmit()
  - wireguard: receive: annotate data-race around receiving_counter.counter
  - virtio: packed: fix unmap leak for indirect desc table
  - vdpa/mlx5: Allow CVQ size changes
  - vdpa_sim: reset must not run
  - drm: Fix drm_fixp2int_round() making it add 0.5
  - spi: spi-imx: fix off-by-one in mx51 CPU mode burst length
  - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
  - net: veth: do not manipulate GRO when using XDP
  - xfrm: Allow UDP encapsulation only in offload modes
  - packet: annotate data-races around ignore_outgoing
  - xen/events: increment refcnt only if event channel is refcounted
  - xen/evtchn: avoid WARN() when unbinding an event channel
  - riscv: Fix compilation error with FAST_GUP and rv32
  - io_uring: fix poll_remove stalled req completion
  - net: ethernet: mtk_eth_soc: fix PPE hanging issue
  - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
  - nvme: fix reconnection fail due to reserved tag allocation
  - net: txgbe: fix clk_name exceed MAX_DEV_ID limits
  - hsr: Fix uninit-value access in hsr_get_node()
  - vmxnet3: Fix missing reserved tailroom
  - tcp: Fix refcnt handling in __inet_hash_connect().
  - io_uring: Fix release of pinned pages when __io_uaddr_map fails
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
  - soc: fsl: dpio: fix kcalloc() argument order
  - net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
  - s390/vtime: fix average steal time calculation
  - octeontx2-af: Use matching wake_up API variant in CGX command interface
  - rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  - nouveau: reset the bo resource bus info after an eviction
  - ASoC: rockchip: i2s-tdm: Fix inaccurate sampling rates
  - spi: lpspi: Avoid potential use-after-free in probe()
  - io_uring: don't save/restore iowait state
  - thermal/drivers/qoriq: Fix getting tmu range
  - thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path
  - ASoC: tlv320adc3xxx: Don't strip remove function when driver is builtin
  - x86/hyperv: Use per cpu initial stack for vtl context
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
  - staging: greybus: fix get_channel_from_mode() failure path
  - serial: 8250_exar: Don't remove GPIO device on suspend
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it
  - bus: mhi: ep: check the correct variable in mhi_ep_register_controller()
  - iio: gts-helper: Fix division loop
  - kconfig: fix infinite loop when expanding a macro at the end of file
  - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function
  - coresight: Fix issue where a source device's helpers aren't disabled
  - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
  - serial: max310x: fix syntax error in IRQ error message
  - tty: vt: fix 20 vs 0x20 typo in EScsiignore
  - usb: phy: generic: Get the vbus supply
  - iio: pressure: mprls0025pa fix off-by-one enum
  - remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef
  - remoteproc: stm32: Fix incorrect type in assignment for va
  - mei: gsc_proxy: match component when GSC is on different bus
  - comedi: comedi_test: Prevent timers rescheduling during deletion
  - io_uring/net: correct the type of variable
  - afs: Revert "afs: Hide silly-rename files from userspace"
  - f2fs: zone: fix to remove pow2 check condition for zoned block device
  - f2fs: compress: fix reserve_cblocks counting error when out of space
  - f2fs: compress: relocate some judgments in f2fs_reserve_compress_blocks
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs
  - NFS: Fix an off by one in root_nfs_cat()
  - NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt
  - Input: iqs7222 - add support for IQS7222D v1.1 and v1.2
  - RDMA/mana_ib: Fix bug in creation of dma regions
  - f2fs: ro: compress: fix to avoid caching unaligned extent
  - f2fs: fix to use correct segment type in f2fs_allocate_data_block()
  - watchdog: stm32_iwdg: initialize default timeout
  - watchdog: starfive: Check pm_runtime_enabled() before decrementing usage counter
  - f2fs: check number of blocks in a current section
  - f2fs: compress: fix to check compress flag w/ .i_sem lock
  - NFSv4.2: fix listxattr maximum XDR buffer size
  - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
  - f2fs: compress: fix to check zstd compress level correctly in mount option
  - f2fs: fix to create selinux label during whiteout initialization
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
  - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
  - RDMA/device: Fix a race between mad_client and cm_client init
  - i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
  - scsi: csiostor: Avoid function pointer casts
  - f2fs: fix to avoid potential panic during recovery
  - f2fs: compress: fix to cover f2fs_disable_compressed_file() w/ i_sem
  - f2fs: zone: fix to wait completion of last bio in zone correctly
  - f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic
  - f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode
  - f2fs: update blkaddr in __set_data_blkaddr() for cleanup
  - f2fs: introduce get_dnode_addr() to clean up codes
  - f2fs: delete obsolete FI_DROP_CACHE
  - f2fs: delete obsolete FI_FIRST_BLOCK_WRITTEN
  - f2fs: compress: fix to check unreleased compressed cluster
  - f2fs: compress: fix to cover normal cluster write with cp_rwsem
  - f2fs: compress: fix to guarantee persisting compressed blocks by CP
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - RDMA/irdma: Remove duplicate assignment
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - ALSA: hda/tas2781: restore power state after system_resume
  - ALSA: hda/tas2781: configure the amp after firmware load
  - ALSA: hda/tas2781: do not call pm_runtime_force_* in system_resume/suspend
  - ALSA: hda/tas2781: add ptrs to calibration functions
  - ALSA: hda/tas2781: do not reset cur_* values in runtime_suspend
  - ALSA: hda/tas2781: add lock to system_suspend
  - ALSA: hda/tas2781: use dev_dbg in system_resume
  - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
  - cifs: Fix writeback data corruption
  - cifs: Don't use certain unnecessary folio_*() functions
  - smb: do not test the return value of folio_start_writeback()
  - PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - clk: Fix clk_core_get NULL dereference
  - sparc32: Fix section mismatch in leon_pci_grpci
  - backlight: lp8788: Fully initialize backlight_properties during probe
  - backlight: lm3639: Fully initialize backlight_properties during probe
  - backlight: da9052: Fully initialize backlight_properties during probe
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness
  - backlight: lm3630a: Initialize backlight_properties on init
  - backlight: ktz8866: Correct the check for of_property_read_u32
  - leds: sgm3140: Add missing timer cleanup and flash gpio control
  - leds: aw2013: Unlock mutex before destroying it
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
  - mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults
  - modules: wait do_free_init correctly
  - drm/msm/dpu: add division of drm_display_mode's hskew parameter
  - clk: qcom: gcc-ipq5018: fix register offset for GCC_UBI0_AXI_ARES reset
  - clk: qcom: gcc-ipq5018: fix 'halt_reg' offset of 'gcc_pcie1_pipe_clk'
  - clk: qcom: gcc-ipq5018: fix 'enable_reg' offset of 'gcc_gmac0_sys_clk'
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
  - powerpc/pseries: Fix potential memleak in papr_get_attr()
  - mfd: cs42l43: Fix wrong register defaults
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - gpio: nomadik: fix offset bug in nmk_pmx_set()
  - drm/amd/pm: Fix esm reg mask use to get pcie speed
  - drm/tests: helpers: Include missing drm_drv header
  - arm64: ftrace: Don't forbid CALL_OPS+CC_OPTIMIZE_FOR_SIZE with Clang
  - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
  - media: ttpci: fix two memleaks in budget_av_attach
  - media: go7007: fix a memleak in go7007_load_encoder
  - media: dvb-frontends: avoid stack overflow warnings with clang
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
  - HID: amd_sfh: Avoid disabling the interrupt
  - HID: amd_sfh: Update HPD sensor structure elements
  - perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  - ASoC: meson: axg-tdm-interface: add frame rate constraint
  - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
  - mtd: maps: physmap-core: fix flash size larger than 32-bit
  - clk: imx: imx8mp: Fix SAI_MCLK_SEL definition
  - drm/tidss: Fix sync-lost issue with two displays
  - drm/tidss: Fix initial plane zpos values
  - crypto: jitter - fix CRYPTO_JITTERENTROPY help text
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
  - crypto: arm/sha - fix function cast warnings
  - perf print-events: make is_event_supported() more robust
  - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
  - media: i2c: imx290: Fix IMX920 typo
  - media: ivsc: csi: Swap SINK and SOURCE pads
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create
  - clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
  - clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
  - clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
  - clk: mediatek: mt8135: Fix an error handling path in clk_mt8135_apmixed_probe()
  - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()
  - pinctrl: renesas: Allow the compiler to optimize away sh_pfc_pm
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
  - drm/panel: boe-tv101wum-nl6: make use of prepare_prev_first
  - drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
  - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
  - media: pvrusb2: fix pvr2_stream_callback casts
  - media: pvrusb2: remove redundant NULL check
  - media: go7007: add check of return value of go7007_read_addr()
  - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
  - media: sun8i-di: Fix chroma difference threshold
  - media: sun8i-di: Fix power on/off sequences
  - media: sun8i-di: Fix coefficient writes
  - media: cedrus: h265: Fix configuring bitstream size
  - NTB: fix possible name leak in ntb_register_device()
  - drm: ci: use clk_ignore_unused for apq8016
  - ASoC: SOF: Add some bounds checking to firmware data
  - powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
  - ASoC: meson: t9015: fix function pointer type mismatch
  - ASoC: meson: aiu: fix function pointer type mismatch
  - perf metric: Don't remove scale from counts
  - perf stat: Avoid metric-only segv
  - perf expr: Fix "has_event" function for metric style events
  - ALSA: seq: fix function cast warnings
  - clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
  - clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
  - drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
  - drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled
  - drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN
  - dt-bindings: msm: qcom, mdss: Include ommited fam-b compatible
  - perf srcline: Add missed addr2line closes
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
  - drivers/ps3: select VIDEO to provide cmdline functions
  - crypto: xilinx - call finalize with bh disabled
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
  - PCI/P2PDMA: Fix a sleeping issue in a RCU read section
  - quota: Properly annotate i_dquot arrays with __rcu
  - quota: Fix rcu annotations of inode dquot pointers
  - clk: qcom: reset: Ensure write completion on reset de/assertion
  - clk: qcom: reset: Commonize the de/assert functions
  - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'
  - pinctrl: mediatek: Drop bogus slew rate register range for MT8192
  - pinctrl: mediatek: Drop bogus slew rate register range for MT8186
  - media: edia: dvbdev: fix a use-after-free
  - mtd: spinand: esmt: Extend IDs to 5 bytes
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - media: v4l2-tpg: fix some memleaks in tpg_alloc
  - media: em28xx: annotate unchecked call to media_device_register()
  - clk: meson: Add missing clocks to axg_clk_regmaps
  - perf bpf: Clean up the generated/copied vmlinux.h
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
  - media: v4l2: cci: print leading 0 on error
  - clk: samsung: exynos850: Propagate SPI IPCLK rate change
  - pinctrl: renesas: r8a779g0: Add missing SCIF_CLK2 pin group/function
  - drm/vmwgfx: Fix vmw_du_get_cursor_mob fencing of newly-created MOBs
  - ASoC: sh: rz-ssi: Fix error message print
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
  - perf pmu: Treat the msr pmu as software
  - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
  - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
  - perf record: Check conflict between '--timestamp-filename' option and pipe mode before recording
  - perf top: Uniform the event name for the hybrid machine
  - perf record: Fix possible incorrect free in record__switch_output()
  - PCI/DPC: Print all TLP Prefixes, not just the first
  - media: cadence: csi2rx: use match fwnode for media link
  - media: tc358743: register v4l2 async device only after successful setup
  - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
  - ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
  - ASoC: amd: acp: Add missing error handling in sof-mach
  - drm/lima: fix a memleak in lima_heap_alloc
  - drm/panel-edp: use put_sync in unprepare
  - drm/rockchip: lvds: do not print scary message when probing defer
  - drm/rockchip: lvds: do not overwrite error code
  - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
  - drm/vkms: Avoid reading beyond LUT array
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil
  - drm/rockchip: inno_hdmi: Fix video timing
  - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()
  - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()
  - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
  - drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe()
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
  - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
  - drm/tegra: dsi: Add missing check for of_find_device_by_node
  - dm: call the resume method on internal suspend
  - dm raid: fix false positive for requeue needed during reshape
  - bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes()
  - nfp: flower: handle acti_netdevs allocation failure
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
  - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
  - OPP: debugfs: Fix warning around icc_get_name()
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - net: phy: dp83822: Fix RGMII TX delay configuration
  - Bluetooth: Fix eir name length
  - net: phy: fix phy_get_internal_delay accessing an empty array
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - ipv6: fib6_rules: flush route cache when rule is changed
  - iommu: Fix compilation without CONFIG_IOMMU_INTEL
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Fix hashtab overflow check on 32-bit arches
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  - s390/cache: prevent rebuild of shared_cpu_list
  - Bluetooth: fix use-after-free in accessing skb after sending it
  - Bluetooth: af_bluetooth: Fix deadlock
  - Bluetooth: btusb: Fix memory leak
  - Bluetooth: msft: Fix memory leak
  - Bluetooth: msft: __hci_cmd_sync() doesn't return NULL
  - Bluetooth: hci_core: Fix possible buffer overflow
  - Bluetooth: btrtl: fix out of bounds memory access
  - Bluetooth: hci_h5: Add ability to allocate memory for private data
  - Bluetooth: hci_sync: Fix overwriting request callback
  - Bluetooth: hci_core: Cancel request on command timeout
  - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
  - Bluetooth: hci_event: Fix not indicating new connection for BIG Sync
  - Bluetooth: Remove BT_HS
  - Bluetooth: Remove superfluous call to hci_conn_check_pending()
  - Bluetooth: mgmt: Remove leftover queuing of power_off work
  - Bluetooth: Remove HCI_POWER_OFF_TIMEOUT
  - ice: fix stats being updated by way too large values
  - igb: Fix missing time sync events
  - igc: Fix missing time sync events
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers
  - wifi: brcm80211: handle pmk_op allocation failure
  - wifi: rtw88: 8821c: Fix false alarm count
  - wifi: rtw88: 8821c: Fix beacon loss and disconnect
  - wifi: rtw88: 8821cu: Fix firmware upload fail
  - ACPI: CPPC: enable AMD CPPC V2 support for family 17h processors
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function
  - arm64: dts: qcom: sm8550: Fix SPMI channels size
  - SUNRPC: fix some memleaks in gssx_dec_option_array
  - SUNRPC: fix a memleak in gss_import_v2_context
  - x86, relocs: Ignore relocations in .notes section
  - objtool: Fix UNWIND_HINT_{SAVE,RESTORE} across basic blocks
  - arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s
  - arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller
  - arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu
  - ACPI: scan: Fix device check notification handling
  - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
  - ACPI: resource: Do IRQ override on Lunnen Ground laptops
  - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
  - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
  - gpiolib: Pass consumer device through to core in devm_fwnode_gpiod_get_index()
  - regulator: userspace-consumer: add module device table
  - arm64: dts: imx8mp-evk: Fix hdmi@3d node
  - arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M Plus eDM SBC
  - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
  - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
  - arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF
  - pstore: inode: Only d_invalidate() is needed
  - pstore: inode: Convert mutex usage to guard(mutex)
  - net: mctp: copy skb ext data when fragmenting
  - arm64: dts: renesas: r8a779g0: Correct avb[01] reg sizes
  - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
  - arm64: dts: renesas: rzg2l: Add missing interrupts to IRQC nodes
  - wifi: mt76: mt792x: fix a potential loading failure of the 6Ghz channel config from ACPI
  - wifi: mt76: mt7921e: fix use-after-free in free_irq()
  - wifi: mt76: mt792x: fix ethtool warning
  - wifi: mt76: mt7996: fix HIF_TXD_V2_1 value
  - wifi: mt76: mt7996: fix efuse reading issue
  - wifi: mt76: mt7996: fix HE beamformer phy cap for station vif
  - wifi: mt76: mt7996: fix incorrect interpretation of EHT MCS caps
  - wifi: mt76: mt7996: fix TWT issues
  - memory: tegra: Correct DLA client names
  - ARM: dts: arm: realview: Fix development chip ROM compatible value
  - wifi: wilc1000: revert reset line logic flip
  - arm64: dts: ti: k3-am62p: Fix memory ranges for DMSS
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path
  - arm64: dts: ti: Add common1 register space for AM62x SoC
  - arm64: dts: ti: Add common1 register space for AM65x SoC
  - arm64: dts: mt8195-cherry-tomato: change watchdog reset boot flow
  - arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC
  - arm64: dts: ti: k3-am64: Enable SDHCI nodes at the board level
  - arm64: dts: ti: k3-am642-sk: Add boot phase tags marking
  - arm64: dts: ti: k3-am642-evm: Add boot phase tags marking
  - arm64: dts: ti: k3-j784s4-evm: Remove Pinmux for CTS and RTS in wkup_uart0
  - arm64: dts: ti: k3-j721s2-common-proc-board: Remove Pinmux for CTS and RTS in wkup_uart0
  - arm64: dts: ti: k3-j7200-common-proc-board: Remove clock-frequency from mcu_uart0
  - arm64: dts: ti: k3-j7200-common-proc-board: Modify Pinmux for wkup_uart0 and mcu_uart0
  - net: ena: Remove ena_select_queue
  - powercap: dtpm_cpu: Fix error check against freq_qos_add_request()
  - arm64: dts: qcom: sm8150: correct PCIe wake-gpios
  - arm64: dts: qcom: sm8150: use 'gpios' suffix for PCI GPIOs
  - arm64: dts: qcom: sdm845-db845c: correct PCIe wake-gpios
  - wifi: brcmsmac: avoid function pointer casts
  - iommu/amd: Mark interrupt as managed
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA
  - arm64: dts: ti: k3-am62-main: disable usb lpm
  - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
  - cpufreq: qcom-hw: add CONFIG_COMMON_CLK dependency
  - arm64: dts: mediatek: mt8186: Add missing xhci clock to usb controllers
  - arm64: dts: mediatek: mt8186: Add missing clocks to ssusb power domains
  - ARM: dts: qcom: msm8974: correct qfprom node size
  - soc: qcom: llcc: Check return value on Broadcast_OR reg read
  - arm64: dts: qcom: sdm845: Use the Low Power Island CX/MX for SLPI
  - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
  - wifi: iwlwifi: mvm: Fix the listener MAC filter flags
  - can: m_can: Start/Cancel polling timer together with interrupts
  - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
  - arm64: dts: mediatek: mt8186: fix VENC power domain clocks
  - arm64: dts: mediatek: mt8192: fix vencoder clock name
  - arm64: dts: mediatek: mt8192-asurada: Remove CrosEC base detection node
  - arm64: dts: mediatek: mt7986: add "#reset-cells" to infracfg
  - arm64: dts: mediatek: mt7986: drop "#clock-cells" from PWM
  - arm64: dts: mediatek: mt7986: fix SPI nodename
  - arm64: dts: mediatek: mt7986: fix SPI bus width properties
  - arm64: dts: mediatek: mt7986: drop crypto's unneeded/invalid clock name
  - arm64: dts: mediatek: mt7986: fix reference to PWM in fan node
  - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
  - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
  - selftests: forwarding: Add missing multicast routing config entries
  - selftests: forwarding: Add missing config entries
  - s390/vdso: drop '-fPIC' from LDFLAGS
  - s390/pai: fix attr_event_free upper limit for pai device drivers
  - wifi: iwlwifi: mvm: don't set replay counters to 0xff
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
  - wifi: iwlwifi: mvm: fix erroneous queue index mask
  - wifi: iwlwifi: support EHT for WH
  - tools/resolve_btfids: Fix cross-compilation to non-host endianness
  - tools/resolve_btfids: Refactor set sorting with types from btf_ids.h
  - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
  - printk: Disable passing console lock owner completely during panic()
  - wifi: ath12k: fix incorrect logic of calculating vdev_stats_id
  - arm64: dts: qcom: sm6115: declare VLS CLAMP register for USB3 PHY
  - arm64: dts: qcom: qcm2290: declare VLS CLAMP register for USB3 PHY
  - wifi: wfx: fix memory leak when starting AP
  - libbpf: Use OPTS_SET() macro in bpf_xdp_query()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use
  - arm64: dts: ti: k3-j784s4: Fix power domain for VTM node
  - arm64: dts: ti: k3-j721s2: Fix power domain for VTM node
  - net: blackhole_dev: fix build warning for ethh set but not used
  - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
  - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
  - gpio: vf610: allow disabling the vf610 driver
  - wifi: iwlwifi: read BIOS PNVM only for non-Intel SKU
  - wifi: iwlwifi: mvm: fix the TLC command after ADD_STA
  - wifi: iwlwifi: mvm: d3: fix IPN byte order
  - wifi: iwlwifi: fix EWRD table validity check
  - wifi: iwlwifi: mvm: initialize rates in FW earlier
  - wifi: iwlwifi: acpi: fix WPFC reading
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination
  - wifi: iwlwifi: mvm: report beacon protection failures
  - wifi: ath12k: fix fetching MCBC flag for QCN9274
  - wifi: ath12k: Update Qualcomm Innovation Center, Inc. copyrights
  - wifi: ath11k: change to move WMI_VDEV_PARAM_SET_HEMU_MODE before WMI_PEER_ASSOC_CMDID
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API
  - arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM module
  - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL board
  - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL OSM-S board
  - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL board
  - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL OSM-S board
  - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
  - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S i.MX8MM
  - selftests/bpf: Disable IPv6 for lwt_redirect test
  - arm64: dts: renesas: r8a779g0: Add missing SCIF_CLK2
  - arm64: dts: renesas: r8a779g0: Restore sort order
  - arm64: dts: qcom: sa8540p: Drop gfx.lvl as power-domain for gpucc
  - pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl
  - libbpf: Fix faccessat() usage on Android
  - cpufreq: mediatek-hw: Don't error out if supply is not found
  - arm64: dts: qcom: sdm845-oneplus-common: improve DAI node naming
  - soc: qcom: socinfo: rename PM2250 to PM4125
  - arm64: dts: qcom: sm8450: Add missing interconnects to serial
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
  - selftests/bpf: Wait for the netstamp_needed_key static key to be turned on
  - selftests/bpf: Fix the flaky tc_redirect_dtime test
  - selftests/bpf: Add netkit to tc_redirect selftest
  - selftests/bpf: De-veth-ize the tc_redirect test case
  - wifi: ath12k: Fix issues in channel list update
  - selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values
  - libbpf: Apply map_set_def_max_entries() for inner_maps on creation
  - selftests/bpf: Fix potential premature unload in bpf_testmod
  - bpftool: Silence build warning about calloc()
  - inet_diag: annotate data-races around inet_diag_table[]
  - sock_diag: annotate data-races around sock_diag_handlers[family]
  - cpufreq: mediatek-hw: Wait for CPU supplies before probing
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - arm64: dts: qcom: sc8180x: Shrink aoss_qmp register space size
  - arm64: dts: qcom: sc8180x: Require LOW_SVS vote for MMCX if DISPCC is on
  - arm64: dts: qcom: sc8180x: Don't hold MDP core clock at FMAX
  - arm64: dts: qcom: sc8180x: Fix eDP PHY power-domains
  - arm64: dts: qcom: sc8180x: Add missing CPU off state
  - arm64: dts: qcom: sc8180x: Fix up big CPU idle state entry latency
  - arm64: dts: qcom: sc8180x: Hook up VDD_CX as GCC parent domain
  - ARM: dts: renesas: r8a73a4: Fix external clocks and clock rate
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
  - wifi: wilc1000: fix multi-vif management when deleting a vif
  - wifi: wilc1000: do not realloc workqueue everytime an interface is added
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - wifi: wilc1000: fix RCU usage in connect path
  - wifi: wilc1000: fix declarations ordering
  - wifi: b43: Disable QoS for bcm4331
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - timekeeping: Fix cross-timestamp interpolation for non-x86
  - timekeeping: Fix cross-timestamp interpolation corner case decision
  - timekeeping: Fix cross-timestamp interpolation on counter wrap
  - x86/sme: Fix memory encryption setting if enabled by default and not overridden
  - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
  - io_uring/net: move receive multishot out of the generic msghdr path
  - io_uring/net: unify how recvmsg and sendmsg copy in the msghdr
  - rtc: test: Fix invalid format specifier.
  - time: test: Fix incorrect format specifier
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg
  - lib/cmdline: Fix an invalid format specifier in an assertion msg
  - kunit: test: Log the correct filter string in executor_test
  - ovl: Always reject mounting over case-insensitive directories
  - ovl: add support for appending lowerdirs one by one
  - ovl: refactor layer parsing helpers
  - ovl: store and show the user provided lowerdir mount option
  - ovl: remove unused code in lowerdir param parsing
  - md: Don't clear MD_CLOSING when the raid is about to stop
  - fs/select: rework stack allocation hack for clang
  - rcu/exp: Handle RCU expedited grace period kworker allocation failure
  - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure recovery
  - s390/dasd: fix double module refcount decrement
  - s390/dasd: Use dev_*() for device log messages
  - io_uring: remove unconditional looping in local task_work handling
  - io_uring: remove looping around handling traditional task_work
  - fs: Fix rw_hint validation
  - workqueue: Introduce struct wq_node_nr_active
  - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating
  - workqueue: Move nr_active handling into helpers
  - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()
  - workqueue: Factor out pwq_is_empty()
  - workqueue: Move pwq->max_active to wq->max_active
  - workqueue.c: Increase workqueue name length
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
  - Input: gpio_keys_polled - suppress deferred probe error for gpio
  - xfrm: set skb control buffer based on packet offload as well
  - xfrm: fix xfrm child route lookup for packet offload
  - ASoC: amd: yc: Add HP Pavilion Aero Laptop 13-be2xxx(8BD6) into DMI quirk table
  - x86/hyperv: Allow 15-bit APIC IDs for VTL platforms
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
  - arm64: tegra: Set the correct PHY mode for MGBE
  - perf: RISCV: Fix panic on pmu overflow handler
  - firewire: core: use long bus reset on gap count error
  - Bluetooth: mgmt: Fix limited discoverable off timeout
  - ASoC: amd: yc: Fix non-functional mic on Lenovo 21J2
  - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
  - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
  - ASoC: amd: yc: Add Lenovo ThinkBook 21J0 into DMI quirk table
  - drm/ttm/tests: depend on UML || COMPILE_TEST
  - wifi: mac80211: only call drv_sta_rc_update for uploaded stations
  - net: smsc95xx: add support for SYS TEC USB-SPEmodule1
  - regulator: max5970: Fix regulator child node name
  - ARM: dts: renesas: rcar-gen2: Add missing #interrupt-cells to DA9063 nodes
  - arm64: dts: qcom: Fix interrupt-map cell sizes
  - arm: dts: Fix dtc interrupt_map warnings
  - arm64: dts: Fix dtc interrupt_provider warnings
  - arm: dts: Fix dtc interrupt_provider warnings
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly
  - platform/x86: x86-android-tablets: Fix acer_b1_750_goodix_gpios name
  - perf: CXL: fix CPMU filter value mask length
  - cxl/region: Allow out of order assembly of autodiscovered regions
  - cxl/region: Handle endpoint decoders in cxl_region_find_decoder()
  - block: sed-opal: handle empty atoms when parsing response
  - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
  - net/iucv: fix the allocation size of iucv_path_table array
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
  - riscv: dts: sifive: add missing #interrupt-cells to pmic
  - ARM: dts: rockchip: Drop interrupts property from pwm-rockchip nodes
  - RDMA/mlx5: Relax DEVX access upon modify commands
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
  - arm64: dts: rockchip: mark system power controller on rk3588-evb1
  - soc: microchip: Fix POLARFIRE_SOC_SYS_CTRL input prompt
  - arm64/sve: Lower the maximum allocation for the SVE ptrace regset
  - gen_compile_commands: fix invalid escape sequence warning
  - ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device
  - MIPS: Clear Cause.BD in instruction_pointer_set
  - x86/xen: Add some null pointer checking to smp.c
  - ASoC: amd: yc: Fix non-functional mic on Lenovo 82UU
  - regmap: kunit: Ensure that changed bytes are actually different
  - spi: intel-pci: Add support for Lunar Lake-M SPI serial flash
  - ASoC: rt5645: Make LattePanda board DMI match more precise
  - selftests: tls: use exact comparison in recv_partial
  - selftests: openvswitch: Add validation for the recursion test
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count)
  - wifi: iwlwifi: mvm: use correct address 3 in A-MSDU
  - ASoC: cs42l43: Handle error from devm_pm_runtime_enable
  - media: rkisp1: Fix IRQ handling due to shared interrupts
  - soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free
  - io_uring: drop any code related to SCM_RIGHTS
  - io_uring/unix: drop usage of io_uring socket
  - platform/x86: p2sb: On Goldmont only cache P2SB and SPI devfn BAR
  - !6730  quota: Fix potential NULL pointer dereference
  - quota: Fix potential NULL pointer dereference
  - !6782 i2c: hisi: Add I2C controller reset and initialization  proccess in bus recovery action
  - i2c: hisi: Correct the description comment for PIN_MUX METHOD
  - i2c: hisi: Add I2C controller reset and initialization proccess in bus recovery action
  - !6760 spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  - spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  - !3176 [OLK-6.6] Turning off Zhaoxin ahci controller runtime pm
  - Turning off Zhaoxin ahci controller runtime pm
  - !6403  iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - !6479  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - !6005 [OLK-6.6]Add Yunsilicon eth driver and rdma driver
  - drivers: support for xsc drivers from Yunsilicon Technology
  - !6595  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
  - arm64: update openeuler_defconfig for HVO enable
  - arm64: mm: Re-enable OPTIMIZE_HUGETLB_VMEMMAP
  - arm64: mm: HVO: support BBM of vmemmap pgtable safely
  - mm: HVO: introduce helper function to update and flush pgtable
  - !6731 [OLK-6.6] watchdog: Fix call trace when failed to initialize sdei
  - watchdog: Fix call trace when failed to initialize sdei
  - !6651 [OLK - 6.6]net: hns3: add support for Hisilicon ptp sync device
  - net: hns3: add support for Hisilicon ptp sync device
  - !6385  ipvlan: Fix warning while IPVLAN_L2E disabled
  - ipvlan: Fix warning while IPVLAN_L2E disabled
  - !6409 [OLK-6.6] irqchip: gic-v3: Collection table support muti pages
  - irqchip: gic-v3: Collection table support muti pages
  - !6735 v2  SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
  - SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
  - !6590 v6  Introduce BPF_READAHEAD option for optimizing read performance
  - arch: Add BPF_READAHEAD config options for supported architectures
  - mm, fs: Add BPF_READAHEAD build option for bpf readhead
  - !6681 v2  btrfs: fix data races when accessing the reserved amount of block reserves
  - btrfs: fix data races when accessing the reserved amount of block reserves


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-25.0.0.28
changelog:
  - !6930  fix general protection fault in update_cpumask
  - cgroup/cpuset: fix general protection fault in update_cpumask
  - !6905 v2  arm64: mmap: disable align larger anonymous mappings on THP boundaries
  - arm64: mmap: disable align larger anonymous mappings on THP boundaries
  - !7015  Fixes and cleanups to fs-writeback
  - fs/writeback: remove unnecessary return in writeback_inodes_sb
  - fs/writeback: correct comment of __wakeup_flusher_threads_bdi
  - fs/writeback: only calculate dirtied_before when b_io is empty
  - fs/writeback: remove unused parameter wb of finish_writeback_work
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - fs/writeback: avoid to writeback non-expired inode in kupdate writeback
  - !6581  LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - !6483  LoongArch: fix boot error caused by ioremap_page_range error
  - LoongArch: fix boot error caused by ioremap_page_range error
  - !6759 net: hns3: backport some maillist patches
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c
  - net: hns3: dump more reg info based on ras mod
  - net: hns3: add command queue trace for hns3
  - net: hns3: add support to query scc version by devlink info
  - net: hns3: revert "net: hns3: dump more reg info based on ras mod"
  - net: hns3: revert "net: hns3: add command queue trace for hns3"
  - net: hns3: revert "net: hns3: add support to query scc version by devlink info"
  - !7011 v3  bugfix patches from OLK-5.10
  - x86/quirks: Add parameter to clear MSIs early on boot
  - x86/PCI: Export find_cap() to be used in early PCI code
  - !6844  block: fix deadlock between bd_link_disk_holder and partition scan
  - block: fix deadlock between bd_link_disk_holder and partition scan
  - !5879 [OLK-6.6] Fix 'duplicate symbol rnp10_netdev_ops' error  for RNPGBE driver with x86_64-allyesconfig
  - RNPGBE: NET: Fix 'duplicate symbol rnp10_netdev_ops' errors
  - !5836 [OLK-6.6] Fix "'snprintf' output between 10 and 37 bytes into a destination of size 24" warning for RNP driver with loongarch-allmodconfig
  - RNP: NET: Fix "'snprintf' output between 10 and 37 bytes into a 	  destination of size 24" wanrings


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-25.0.0.29
changelog:
  - Add riscv-kernel patch, which adds support for sg2042 and th1520 RISC-V SoCs. 
  - This patch only applies to the RISC-V architecture, the related commit list:
  -
  - th1520: riscv: config: Enable th1520 support
  - riscv: thead: Use the wback_inv instead of wback_only
  - riscv: errata: thead: use pa based instructions for CMO
  - riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - Revert "riscv: errata: thead: use riscv_nonstd_cache_ops for CMO"
  - Revert "riscv: errata: thead: use pa based instructions for CMO"
  - riscv: mm: fix NOCACHE_THEAD does not set bit[61] correctly
  - riscv: mm: update T-Head memory type definitions
  - Revert "sg2042: riscv: changing T-Head PBMT attributes"
  - riscv: remove compression for riscv Image
  - th1520: cpufreq: correct typo in config name
  - th1520: riscv: dts: thead: Add Milk-V Meles board
  - th1520: cpufreq: light-mpw-cpufreq: fix -Wunused-variable in panic_cpufreq_notifier_call
  - th1520: cpufreq: light-mpw-cpufreq: fix cpu_pll1 already disabled warning
  - riscv: Add th1520-lichee-cluster-4a dts support (8G/16G)
  - riscv: dts: th1520-beaglev-ahead: add alias for emmc & sd
  - riscv: dts: th1520-lichee-pi-4a: add alias for emmc & sd
  - riscv: dts: lpi4a 16g support
  - th1520: perf vendor events riscv: add T-HEAD C9xx JSON file
  - th1520: riscv: dts: thead: Add PMU event node
  - riscv: pinctrl: th1520: fix build
  - riscv: dts: th1520: lpi4a: add rpmsg node
  - riscv: dts: th1520: add mbox client node
  - riscv: rpmsg: mailbox-client: sync thead sdk 1.4.2
  - riscv: panic: add thead sdk quirks
  - riscv: dts: add watchdog node
  - th1520: riscv: dts: Add th1520 reset device tree
  - th1520: reset: Add th1520 reset driver support
  - th1520: dt-bindings: reset: Document th1520 reset control
  - riscv: light_wdt: update sdk 1.4.2
  - th1520_light_event: update sdk 1.4.2
  - th1520_aon: update sdk 1.4.2
  - th1520: fix compile th1520-beaglev-ahead error
  - th1520: add TH1520 cpu frequency driver
  - th1520: riscv: errata: thead: use pa based instructions for CMO
  - th1520: riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - riscv: dts: thead: Add TH1520 CPU reset node
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A USB
  - th1520: riscv: dts: thead: Add Lichee Pi 4A IO expansions
  - th1520: riscv: dts: thead: Add TH1520 USB nodes
  - th1520: riscv: dts: thead: Add TH1520 I2C nodes
  - th1520: usb: dwc3: add T-HEAD TH1520 usb driver
  - th1520: dt-bindings: usb: Add T-HEAD TH1520 USB controller
  - th1520: riscv: dts: thead: Add BeagleV Ahead SDIO0 pins
  - th1520: riscv: dts: thead: Add Lichee Pi 4A SDIO0 pins
  - th1520: riscv: dts: thead: Add TH1520 ethernet nodes
  - th1520: net: stmmac: add glue layer for T-HEAD TH1520 SoC
  - th1520: dt-bindings: net: add T-HEAD dwmac support
  - th1520: dt-bindings: net: snps,dwmac: allow dwmac-3.70a to set pbl properties
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A PWM fan
  - th1520: riscv: dts: thead: Add TH1520 PVT node
  - th1520: riscv: dts: thead: Add TH1520 PWM node
  - th1520: pwm: add T-HEAD PWM driver
  - th1520: dt-bindings: pwm: Add T-HEAD PWM controller
  - th1520: gpio: dwapb: Use generic request, free and set_config
  - riscv: dts: thead: Enable LicheePi 4A eMMC and microSD
  - riscv: dts: thead: Enable BeagleV Ahead eMMC and microSD
  - riscv: dts: thead: Add TH1520 mmc controllers and sdhci clock
  - riscv: defconfig: Enable mmc and dma drivers for T-Head TH1520
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520
  - mmc: sdhci: add __sdhci_execute_tuning() to header
  - dt-bindings: mmc: sdhci-of-dwcmhsc: Add T-Head TH1520 support
  - th1520: riscv: dtb: thead: Add BeagleV Ahead LEDs
  - th1520: riscv: dts: thead: Add TH1520 pinctrl settings for UART0
  - th1520: riscv: dts: thead: Adjust TH1520 GPIO labels
  - th1520: riscv: dts: thead: Add TH1520 GPIO ranges
  - th1520: riscv: dts: thead: Add TH1520 pin control nodes
  - th1520: pinctrl: Add driver for the T-Head TH1520 SoC
  - th1520: dt-bindings: pinctrl: Add thead,th1520-pinctrl bindings
  - th1520: dt-bindings: gpio: dwapb: allow gpio-ranges
  - sg2042: riscv: config: Enable sg2042 support
  - sg2042: riscv: changing T-Head PBMT attributes
  - sg2042: kconfig: Enable DW_APB_TIMER_OF in ARCH_SOPHGO
  - sg2042: pcie contronller msi-x whitelist add device_id
  - sg2042: nvidia hda: force msi
  - sg2042: radeon hack: force 64-bit msi to fit top intc
  - sg2042: amdgpu: disable rebar
  - sg2042: ttm: disallow cached mapping
  - sg2042: mango pci hack: broadcast when no MSI source known
  - sg2042: riscv: dts: separate sg2042 mtime and mtimecmp to fit aclint format
  - sg2042: dt-bindings: timer: thead,c900-aclint-mtimer: separate mtime and mtimecmp regs
  - sg2042: riscv: dts: modify the PCIe range
  - sg2042: drivers: clk: turn off non-essential clocks by default
  - sg2042: drivers: clk: Avoid the problem of serial port garbled characters
  - sg2042: mm: Modify __find_max_addr for memory hole
  - sg2042: riscv: dts: Add timer apb clock
  - sg2042: riscv: dts: Remove cma node
  - sg2042: riscv: dts: Add uart apb clock and remove sysdma clock
  - sg2042: riscv: dts: Move memory node from dts to zsbl
  - sg2042: riscv: dts: Reduce bootargs
  - sg2042: riscv: dts: Configure external interrupt in m mode
  - sg2042: rebase: v6.6-rc1: Fix some compile warnings
  - sg2042: riscv: dts: Remove nvme paremeter in bootargs
  - sg2042: riscv: dtsi: confirm correspondence between PMU events and IDs
  - sg2042: driver: pcie: support msix for top intr
  - sg2042: driver: mmc: add config for MMC_SDHCI_SOPHGO
  - sg2042: riscv: Kconfig: Set vector as default no
  - sg2042: driver: soc: Add sophgo sg2042 soc support
  - sg2042: driver: net: Add sophgo sg2042 soc support
  - sg2042: driver: mmc: Add sophgo sg2042 soc support
  - sg2042: driver: pcie: Add sophgo sg2042 soc support
  - sg2042: driver: reset: Add sophgo sg2042 soc support
  - sg2042: driver: pinctrl: Add sophgo sg2042 soc support
  - sg2042: driver: clk: Add sophgo sg2042 soc support
  - sg2042: riscv: dts: Add sophgo sg2042 soc support
  - sg2042: riscv: defconfig: enable SOPHGO SoC
  - sg2042: riscv: dts: sophgo: add Milk-V Pioneer board device tree
  - sg2042: riscv: dts: add initial Sophgo SG2042 SoC device tree
  - sg2042: dt-bindings: interrupt-controller: Add Sophgo sg2042 CLINT mswi
  - sg2042: dt-bindings: timer: Add Sophgo sg2042 CLINT timer
  - sg2042: dt-bindings: interrupt-controller: Add Sophgo SG2042 PLIC
  - sg2042: dt-bindings: riscv: Add T-HEAD C920 compatibles
  - sg2042: dt-bindings: riscv: add sophgo sg2042 bindings
  - sg2042: dt-bindings: vendor-prefixes: add milkv/sophgo
  - sg2042: riscv: Add SOPHGO SOC family Kconfig support


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-26.0.0.30
changelog:
  - !7198 v2  mm: prepare more high-order pages on pcplist
  - mm: prepare more high-order pages to be stored on the per-cpu lists
  - mm: page_alloc: use the correct THP order for THP PCP
  - !7196 v3  Backport folio feature and bugfix
  - mm: madvise: avoid split during MADV_PAGEOUT and MADV_COLD
  - mm: vmscan: avoid split during shrink_folio_list()
  - mm: swap: allow storage of all mTHP orders
  - mm: swap: update get_swap_pages() to take folio order
  - mm: swap: simplify struct percpu_cluster
  - mm: swap: free_swap_and_cache_nr() as batched free_swap_and_cache()
  - mm: swap: remove CLUSTER_FLAG_HUGE from swap_cluster_info:flags
  - mm/madvise: don't forget to leave lazy MMU mode in madvise_cold_or_pageout_pte_range()
  - mm/madvise: add cond_resched() in madvise_cold_or_pageout_pte_range()
  - mm: support multi-size THP numa balancing
  - mm: factor out the numa mapping rebuilding into a new helper
  - mm: alloc_anon_folio: avoid doing vma_thp_gfp_mask in fallback cases
  - huge_memory.c: document huge page splitting rules more thoroughly
  - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
  - mm/migrate: split source folio if it is on deferred split list
  - mm: hold PTL from the first PTE while reclaiming a large folio
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0
  - mm/filemap: don't decrease mmap_miss when folio has workingset flag
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - arm64: mm: swap: support THP_SWAP on hardware with MTE
  - mm: remove PageAnonExclusive assertions in unuse_pte()
  - mm: remove struct page from get_shadow_from_swap_cache
  - selftests: mm: fix unused and uninitialized variable warning
  - XArray: set the marks correctly when splitting an entry
  - mm/huge_memory: check new folio order when split a folio
  - mm: huge_memory: enable debugfs to split huge pages to any order
  - mm: thp: split huge page to any lower order pages
  - mm: page_owner: add support for splitting to any order in split page_owner
  - mm: memcg: make memcg huge page split support any order split
  - mm/page_owner: use order instead of nr in split_page_owner()
  - mm/memcg: use order instead of nr in split_page_memcg()
  - mm: support order-1 folios in the page cache
  - mm/huge_memory: only split PMD mapping when necessary in unmap_folio()
  - selftests/mm: split_huge_page_test: conform test to TAP format output
  - mm: huge_memory: use more folio api in __split_huge_page_tail()
  - mm/vmalloc: fix return value of vb_alloc if size is 0
  - mm: use memalloc_nofs_save() in page_cache_ra_order()
  - mm: madvise: pageout: ignore references rather than clearing young
  - mm: ratelimit stat flush from workingset shrinker
  - mm, oom:dump_tasks add rss detailed information printing
  - arm64/mm: improve comment in contpte_ptep_get_lockless()
  - arm64/mm: export contpte symbols only to GPL users
  - mm: page_alloc: enforce minimum zone size to do high atomic reserves
  - mm: page_alloc: correct high atomic reserve calculations
  - mm: fix draining remote pageset
  - !7190  entry: inline syscall enter/exit functions
  - entry: Move syscall_enter_from_user_mode() to header file
  - entry: Move enter_from_user_mode() to header file
  - entry: Move exit to usermode functions to header file
  - !7130 v2  openeuler_defconfig: update oedefconfig for the minimum set
  - openeuler_defconfig: update oedefconfig for the minimum set
  - !7141 spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: Add verification for the max_frequency provided by the firmware
  - !7136 Fix failed in acpi_gpiochip_find() by adding parent node match
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - !6778 v2 Fix two soc bugs of hip09
  - irqchip: gicv3: Add workaround for hip09 erratum 162200806
  - irqchip: gicv3: Add workaround for hip09 erratum 162200803
  - !7165 v2  tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - !7184 v3  md: do not delete safemode_timer in mddev_suspend
  - md: do not delete safemode_timer in mddev_suspend
  - !7131 net: hns3: Fix ROH mac address initialization.
  - net: hns3: Fix ROH mac address initialization.
  - !7126 net: hns3: some bugfixes for hns3 driver
  - net: hns3: fix kernel crash when devlink reload during initialization
  - net: hns3: direct return when receive a unknown mailbox message
  - net: hns3: release PTP resources if pf initialization failed
  - net: hns3: change type of numa_node_mask as nodemask_t
  - net: hns3: using cpumask_copy when set value to cpumask_t
  - net: hns3: set irq affinity directly
  - net: hns3: use appropriate barrier function after setting a bit value
  - net: hns3: don't need to check an unsigned number is less than 0
  - net: hns3: add 
  - net: hns3: using user configure after hardware reset
  - net: hns3: add cond_resched() to hns3 ring buffer init process
  - net: hns3: fix kernel crash problem in concurrent scenario
  - net: hns3: fix port vlan filter not disabled issue
  - net: hns3: revert "net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode"
  - !7159 【OLK 6.6】 backport some mailist patches for perf
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !7068  kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - !7153  Backports for OLK-6.6
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets
  - netfilter: bridge: confirm multicast packets before passing them up the stack
  - !7069  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - !7075 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix Use-After-Free of rsv_qp
  - RDMA/hns: Fix a missing check of atomic wr length
  - !3184 [OLK-6.6] add support for Zhaoxin ZXPAUSE instruction
  - x86/delay: add support for Zhaoxin ZXPAUSE instruction
  - !7078 v2  Backport four conflict stable patch
  - mm: turn folio_test_hugetlb into a PageType
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - fork: defer linking file vma until vma is fully initialized
  - mm, treewide: introduce NR_PAGE_ORDERS
  - !7067 crypto: hisilicon fix some issues
  - uacce: fix for cdev memory leak
  - crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable
  - crypto: hisilicon/zip - optimize the address offset of the reg query function
  - !4084 riscv64: initial LIVEPATCH_WO_FTRACE support
  - riscv64: add initial livepatch support
  - livepatch: add arch hook before doing klp_resolve_symbols
  - !6868  irqchip/loongson-pch-pic: Update interrupt registration policy
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - !6004 [OLK-6.6] fix bug：ethtool -S and ethtool -x/X for mucse rnpm drvier
  - mucse: ethtool -S and ethtool -x/X for mucse rnpm drvier

   at the end when print msg


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-27.0.0.31
changelog:
  - !7527  ext4 iomap performance optimize
  - ext4: fallback to generic_perform_write once iov_iter_count <= PAGE_SIZE
  - iomap: export __iomap_write_{begin|end}
  - !7530  mm: more thp control for large folio
  - mm: correct the docs for thp_fault_alloc and thp_fault_fallback
  - mm: add docs for per-order mTHP counters and transhuge_page ABI
  - mm: add per-order mTHP anon_swpout and anon_swpout_fallback counters
  - mm: add per-order mTHP anon_fault_alloc and anon_fault_fallback counters
  - mm: add control to allow specified high-order pages stored on PCP list
  - mm: huge_memory: add thp mapping align control
  - mm: huge_memory: add folio_get_unmapped_area()
  - mm: filemap: make mTHP configurable for exec mapping
  - mm/filemap: Allow arch to request folio size for exec memory
  - mm/memcontrol: remove __mod_lruvec_page_state()
  - mm/khugepaged: use a folio more in collapse_file()
  - mm: remove inc/dec lruvec page state functions
  - !7521 v2  Avoiding false sharing in field access of tk_core
  - openeuler_defconfig: Enable CONFIG_ARCH_LLC_128_LINE_SIZE for Hisilicon platforms
  - timekeeping: Avoiding false sharing in field access of tk_core
  - !7182 v3  mm: mglru: reuse some legacy trace
  - mm: multi-gen LRU: reuse some legacy trace events
  - mm, vmscan: remove ISOLATE_UNMAPPED
  - trace-vmscan-postprocess: sync with tracepoints updates
  - !7219 Hygon model 6h L3 PMU event duplicate creating issue fix
  - perf/x86/uncore: Create L3 event strictly to the CPU vendor
  - !7474  sched/fair: set burst to zero when cfs bandwidth is cancelled
  - sched/fair: set burst to zero when set max to cpu.max
  - sched/fair: limit burst to zero when cfs bandwidth is toggled off
  - !7475  Makefile.oever: add OPENEULER_RELEASE for version.h
  - Makefile.oever: add OPENEULER_RELEASE for version.h
  - !6241 add pmu support for loongarch kvm
  - LoongArch: KVM: Add PMU support
  - !5654 [OLK-6.6] USB: UAS: return ENODEV when submit urbs fail with device not attached
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - !5218 [OLK-6.6] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - crypto: ccp: Move the fixup code for Hygon psp to Hygon specific files
  - crypto: ccp: Bind specific sp_dev_vdata for Hygon secure processor
  - crypto: ccp: Introduce hygon specific interface to support driver
  - !6311 v2  ima: Avoid blocking in RCU read-side critical section
  - ima: Avoid blocking in RCU read-side critical section
  - !6837  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !5644 [OLK-6.6] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !7454  add new kvm_type for Confidential VMs
  - kvm: add macro CONFIG_CVM_HOST to defconfig
  - kvm: add new kvm_type for cvm
  - !7405 v2  mm: prepare to support weighted interleaving mempolicy
  - mm: prepare to support weighted interleaving mempolicy
  - !7370 v2  sched: smart_grid: silence complier error
  - sched: smart_grid: silence complier error
  - !7227  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !5291 [OLK-6.6] iommu/dma: Fix not fully traversing iova reservations issue
  - iommu/dma: Fix not fully traversing iova reservations issue
  - !6774 [OLK-6.6] merge upstream  4 wangxun related patches to fix i2c bug
  - Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
  - Revert "net: txgbe: fix i2c dev name cannot match clkdev"
  - net: wangxun: add ethtool_ops for channel number
  - clkdev: Update clkdev id usage to allow for longer names
  - !7206 v2  sched: programmable: Allow set tag for pid 1.
  - sched: programmable: Allow set tag for pid 1.


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.58-2
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update i40e version to 2.22.8 to fix kernel-6.1 based build error


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Remove the obsolte u64_stats_fetch_*_irq() users
         use mul_u64_u64_div_u64 and convert .adjfreq to .adjfine


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.4-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-for-cargo-test-sometimes-fails-when-make-runs-with-several-simultaneous-jobs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/add-dunce-lib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/del-some-testcases-who-need-network-but-cannot-connect-smoothly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:1.21.1-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:[pci] Ensure that pci_read_config() initialises all fields
         [image] Do not clear current working URI when executing embedded image
         [uri] Retain original encodings for path, query, and fragment fields
         [uri] Allow for relative URIs that include colons within the path


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: wulongyao <wulongyao1@huawei.com> - 1:17.0.16.8-0
changelog:
  - update to 17.0.16
  - modified Apply-TBI-to-ZGC-of-JDK17.patch
  - delete 8314236-Overflow-in-Collections.rotate.patch
  - modified puyuan-jdk17.0.9-patch.patch
  - modified 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modified Backport-Important-Fixed-Issues.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch


author: Dingli Zhang <dingli@iscas.ac.cn> - 1:21.0.7.6-4
changelog:
  - add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
  - add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.7.6-6
changelog:
  - add Backport-JDK-7036144-GZIPInputStream-readTrailer-use.patch
  - add Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - add Backport-JDK-8340532-C2-assert-is_OuterStripMinedLoo.patch
  - add huawei-fix-arm32-build-fail-undefined-reference-_Copy_conjo.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.8.9-0
changelog:
  - update to jdk21.0.8-ga
  - delete 8334780-Crash-assert-h_array_list.not_null-failed-in.patch
  - delete Backport-JDK-8328107-Shenandoah-C2-TestVerifyLoopOpt.patch
  - delete Backport-JDK-8333805-Replaying-compilation-with-null.patch
  - delete Backport-JDK-8338010-WB_IsFrameDeoptimized-miss-Reso.patch
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - delete Backport-JDK-8314236-Overflow-in-Collections.rotate.patch
  - modify huawei-Add-KAE-zip-feature.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: sundapeng <sundapeng_yewu@cmss.chinamobile.com> - 2.8.2-17
changelog:
  - log clean relative index range check of group consider empty log segment to avoid too many empty log segment left


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Li Nan <linan122@huawei.com> - 6.6.0-113.0.0.105
changelog:
  - !18464  i40e: add max boundary check for VF filters
  - !18433  dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18256     Add EDAC basic support and RRL enhancement for CWF/SRF/GNR/GNR-D
  - !18254 Add IFS support for ClearWater Forest
  - !18455  KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18289 Expand scope of khugepaged anonymous collapse
  - !18324 arm64: Enable vmalloc-huge with ptdump
  - !18419  sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - i40e: add max boundary check for VF filters
  - !18151  ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - !18152  fs/buffer: fix use-after-free when call bh_read() helper
  - !18312  ext4: preserve SB_I_VERSION on remount
  - !18313  fs: quota: create dedicated workqueue for quota_release_work
  - !18311  ext4: fix an off-by-one issue during moving extents
  - !17401  fscrypt: Don't use problematic non-inline crypto engines
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write
  - !18237  fuse: support sysfs api for flush and
  - !18422  net/hinic3: Modify driver version
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  - !18425  Fix CVE-2025-39989
  - !18427  i40e: fix idx validation in config queues msg
  - i40e: fix idx validation in config queues msg
  - x86/mce: use is_copy_from_user() to determine copy-from-user context
  - x86/extable: Remove unused fixup type EX_TYPE_COPY
  - net/hinic3: Modify driver version
  - !18414 Fix add define COMPAT_ELF_HWCAP3
  - !18406  pcmcia: Add error handling for add_interval() in do_validate_mem()
  - sched/core: Add sched_change_qos_group() in sched_cgroup_fork()
  - !18401  Bluetooth: btrtl: Prevent potential NULL dereference
  - !18241 ras: ACPI: HED: Always initialize before evged
  - Fix add define COMPAT_ELF_HWCAP3
  - !17928 bus: fsl-mc: fix double-free on mc_dev
  - !17908 fix CVE-2025-38630
  - !18224 fix CVE-2025-38624
  - !17871 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - !17877 fs/ntfs3: cancle set bad inode after removing name fails
  - !17909 fix CVE-2025-38555
  - !17872 f2fs: fix to avoid panic in f2fs_evict_inode
  - !17760 Fix CVE-2025-38414
  - !17611 net: ravb: Fix missing rtnl lock in suspend/resume path
  - !17859 f2fs: fix to bail out in get_new_segment()
  - !17354 net/atm/resources: Release atm_dev_mutex after removing procfs in atm_…
  - !18032 [OLK-6.6] Fix CVE-2025-37897
  - !18030 [OLK-6.6] Fix CVE-2025-37914
  - !18037 [OLK-6.6] Fix CVE-2025-37917
  - !18036 [OLK-6.6] Fix CVE-2025-37922
  - !18035 [OLK-6.6] Fix CVE-2025-37935
  - !18034 [OLK-6.6] Fix CVE-2025-37931
  - !18033 [OLK-6.6] Fix CVE-2025-37901
  - !18028 [OLK-6.6] Fix CVE-2025-37987
  - !18027 [OLK-6.6] Fix CVE-2025-37983
  - !17807 Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - pcmcia: Add error handling for add_interval() in do_validate_mem()
  - !18326 [OLK-6.6] Support Hygon TKM (Trusted Key Management) Guest live migration
  - !18199  block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - !18131  loop: Avoid updating block size under exclusive owner
  - !18006  scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - !18402  kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - !18249 enfs: add new path state PM_STATE_UNSTABLE
  - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  - Bluetooth: btrtl: Prevent potential NULL dereference
  - nfs/enfs: cleanups in pm_set_path_state()
  - nfs/enfs: prefer normal rpc transport over unstable one
  - nfs/enfs: introduce reconnect time KUnit tests
  - nfs/enfs: set PM_STATE_UNSTABLE if path is unstable
  - nfs/enfs: introduce enum PM_STATE_UNSTABLE
  - !18357  *** OLK-6.6-fix-CVE-2025-39787 ***
  - !18374  locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - !18362  umount performance fix
  - locking/qspinlock: Fix CNA NUMA node setup before numa_store_cpu_info()
  - do_make_slave(): choose new master sanely
  - change_mnt_propagation(): do_make_slave() is a no-op unless IS_MNT_SHARED()
  - change_mnt_propagation() cleanups, step 1
  - soc: qcom: mdt_loader: Deal with zero e_shentsize
  - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
  - soc: qcom: mdt_loader: Ensure we don't read past the ELF header
  - crypto: ccp: ensure kvm_bind_vtkm is only executed once for csv guest
  - crypto: ccp: support vtkm live migration
  - arm64: Enable vmalloc-huge with ptdump
  - arm64: Restrict pagetable teardown to avoid false warning
  - fs: quota: create dedicated workqueue for quota_release_work
  - ext4: preserve SB_I_VERSION on remount
  - ext4: fix an off-by-one issue during moving extents
  - mm: drop all references of writable and SCAN_PAGE_RO
  - mm: enable khugepaged anonymous collapse on non-writable regions
  - khugepaged: pass folio instead of head page to trace events
  - ras: ACPI: HED: Always initialize before evged
  - fuse: fix issues in fuse_resend_pqueue() implementation
  - fuse: Introduce sysfs API for resend pending requests
  - fuse: Introduce sysfs API for flushing pending requests
  - PCI: pnv_php: Clean up allocated IRQs on unplug
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
  - EDAC/{skx_common,i10nm}: Use scnprintf() for safer buffer handling
  - EDAC/i10nm: Add Intel Granite Rapids-D support
  - EDAC/i10nm: Fix the bitwise operation between variables of different sizes
  - EDAC/{skx_common,i10nm}: Add RRL support for Intel Granite Rapids server
  - EDAC/{skx_common,i10nm}: Refactor show_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Refactor enable_retry_rd_err_log()
  - EDAC/{skx_common,i10nm}: Structure the per-channel RRL registers
  - EDAC/i10nm: Explicitly set the modes of the RRL register sets
  - EDAC/{i10nm,skx,skx_common}: Support UV systems
  - EDAC/i10nm: Add Intel Clearwater Forest server support
  - EDAC/{skx_common,i10nm}: Remove the AMAP register for determing DDR5
  - EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list
  - fs/buffer: fix use-after-free when call bh_read() helper
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  - loop: Avoid updating block size under exclusive owner
  - openeuler_defconfig: Add CONFIG_HISILICON_ERRATUM_162100803
  - irqchip/gicv3-its: Add workaround for HIP09/HIP10/HIP10C/HIP12 erratum 162100803/162200807/162400807/165010802
  - net/atm/resources: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE
  - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
  - btrfs: adjust subpage bit start based on sectorsize
  - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
  - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
  - net_sched: ets: Fix double list add in class with netem as child qdisc
  - pds_core: Prevent possible adminq overflow/stuck condition
  - qibfs: fix _another_ leak
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
  - bus: fsl-mc: fix double-free on mc_dev
  - usb: gadget : fix use-after-free in composite_dev_cleanup()
  - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  - fs/ntfs3: cancle set bad inode after removing name fails
  - f2fs: fix to bail out in get_new_segment()
  - net: ravb: Fix missing rtnl lock in suspend/resume path
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
  - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  - f2fs: fix to avoid panic in f2fs_evict_inode
  - fscrypt: Don't use problematic non-inline crypto engines


author: Li Nan <linan122@huawei.com> - 6.6.0-114.0.0.106
changelog:
  - !18640 v3  Errata management for VM Live migration
  - !18638  CVE-2025-39982
  - !18564  perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - !18639 net: hns3: fix null pointer in debugfs issue
  - KVM: arm64: fix kvm kabi conflict
  - smccc: kvm_guest: Align with DISCOVER_IMPL_CPUS ABI
  - smccc: kvm_guest: Fix kernel builds for 32 bit arm
  - smccc/kvm_guest: Enable errata based on implementation CPUs
  - arm64: Make  _midr_in_range_list() an exported function
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2
  - KVM: arm64: Specify hypercall ABI for retrieving target implementations
  - arm64: Modify _midr_range() functions to read MIDR/REVIDR internally
  - KVM: arm64: Allow userspace to change the implementation ID registers
  - KVM: arm64: Load VPIDR_EL2 with the VM's MIDR_EL1 value
  - KVM: arm64: Maintain per-VM copy of implementation ID regs
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
  - !18624 tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - !18622 support mempool feature
  - net: hns3: fix null pointer in debugfs issue
  - net: hns3: avoid bitwise copy during RX buffer replace leg when page pool enabled
  - net: hns3: fixed vf get max channels bug
  - net: hns3: `req_autoneg` for fiber is initialized to `support_autoneg` instead of OFF.
  - net: hns3: use user configure after hardware reset when using kernel PHY.
  - net: hns3: Return error code when function fails.
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
  - net: hns3: using the num_tqps in the vf driver to apply for resources
  - net: hns3: add support to query tc map info of VF queues
  - net: hns3: merge rss tc configuration
  - net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
  - !18550  cpu/SMT: recover global num_threads after disable smt switch fail
  - !18589 net: hibmcge: support pci_driver.shutdown()
  - !18579  regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18415  sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - !18593  crypto: essiv - Check ssize for decryption and in-place encryption
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources
  - tools/include: Sync arm64 headers with the kernel sources
  - tools/include: Sync arm64 asm/cputype.h with the kernel sources
  - openeuler_defconfig: enable CONFIG_PFN_RANGE_ALLOC by default
  - mm/pfn_range_alloc: check if folio is hwpoisoned in pfn_range_free
  - mm/pfn_range_alloc: add a interface to show borrowable physical range
  - mm/pfn_range_alloc: support update cachable attribue of linear mapping
  - mm/pfn_range_alloc: introduce set_linear_mapping_invalid
  - mm/pfn_range_alloc: introduce hugetlb_pool_alloc_size
  - mm/pfn_range_alloc: add tracepoint for hugetlb_pool_alloc and hugetlb_pool_free
  - mm/pfn_range_alloc: add tracepoint for pfn_range_alloc and pfn_range_free
  - mm/pfn_range_alloc: support allocate and free from hugetlb pool
  - mm/pfn_range_alloc: add interfaces to alloc/free for drivers
  - mm/pfn_range_alloc: reserve memory for each node
  - mm/contig_alloc: fix alloc_contig_range when __GFP_COMP and order < MAX_ORDER
  - mm: page_alloc: speed up fallbacks in rmqueue_bulk()
  - mm/page_alloc: clarify should_claim_block() commentary
  - mm/page_alloc: clarify terminology in migratetype fallback code
  - mm/page_alloc: add some detailed comments in can_steal_fallback
  - mm: page_alloc: remove remnants of unlocked migratetype updates
  - mm: page_alloc: don't steal single pages from biggest buddy
  - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()
  - mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook()
  - mm/page_alloc: sort out the alloc_contig_range() gfp flags mess
  - mm/page_alloc: make __alloc_contig_migrate_range() static
  - mm/page_isolation: don't pass gfp flags to isolate_single_pageblock()
  - mm/contig_alloc: support __GFP_COMP
  - mm: remove unused has_isolate_pageblock
  - mm: page_alloc: simpify page del and expand
  - mm: remove migration for HugePage in isolate_single_pageblock()
  - mm/page_alloc: keep track of free highatomic
  - mm: page_alloc: fix highatomic typing in multi-block buddies
  - mm: page_alloc: batch vmstat updates in expand()
  - mm: page_alloc: change move_freepages() to __move_freepages_block()
  - mm: page_alloc: consolidate free page accounting
  - mm: page_isolation: prepare for hygienic freelists
  - mm: page_alloc: set migratetype inside move_freepages()
  - mm: page_alloc: close migratetype race between freeing and stealing
  - mm: page_alloc: fix freelist movement during block conversion
  - mm: page_alloc: fix move_freepages_block() range error
  - mm: page_alloc: move free pages when converting block during isolation
  - mm: page_alloc: fix up block types when merging compatible blocks
  - mm: page_alloc: optimize free_unref_folios()
  - mm: page_alloc: remove pcppage migratetype caching
  - mm: page_alloc: simplify __free_pages_ok()
  - mm/page_alloc: remove unnecessary next_page in break_down_buddy_pages
  - mm/page_alloc: remove unnecessary check in break_down_buddy_pages
  - !18608  mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - !18588 add memory ras feature support
  - mm: add memory reclaim notifier
  - mm: fix __count_zid_vm_events when CONFIG_ZONE_EXTMEM is enabled
  - panic: add notifier call before other cpu shutdown
  - !18592  Make ID reg writable
  - crypto: essiv - Check ssize for decryption and in-place encryption
  - KVM: arm64: use KABI_EXTEND to revert struct kvm kabi change
  - KVM: arm64: Make AA64PFR1_EL1.NMI writeable
  - KVM: arm64: Expose S1PIE to guests
  - KVM: arm64: Sanitise ID_AA64MMFR3_EL1
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
  - KVM: arm64: Make ID_AA64MMFR1_EL1.{HCX, TWED} writable from userspace
  - KVM: arm64: Remove duplicated AA64MMFR1_EL1 XNX
  - KVM: arm64: Make the L1Ip feature bits in CTR_EL0 writable from userspace
  - KVM: arm64: rename functions for invariant sys regs
  - KVM: arm64: show writable masks for feature registers
  - KVM: arm64: Treat CTR_EL0 as a VM feature ID register
  - KVM: arm64: Add helper for writing ID regs
  - KVM: arm64: Use read-only helper for reading VM ID registers
  - KVM: arm64: Only reset vCPU-scoped feature ID regs once
  - KVM: arm64: Reset VM feature ID regs from kvm_reset_sys_regs()
  - KVM: arm64: Rename is_id_reg() to imply VM scope
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace
  - KVM: arm64: Document vCPU feature selection UAPIs
  - KVM: arm64: Allow userspace to change ID_AA64ZFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64PFR0_EL1
  - KVM: arm64: Allow userspace to change ID_AA64MMFR{0-2}_EL1
  - KVM: arm64: Allow userspace to change ID_AA64ISAR{0-2}_EL1
  - KVM: arm64: Bump up the default KVM sanitised debug version to v8p8
  - KVM: arm64: Reject attempts to set invalid debug arch version
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version
  - KVM: arm64: Use guest ID register values for the sake of emulation
  - KVM: arm64: Document KVM_ARM_GET_REG_WRITABLE_MASKS
  - KVM: arm64: Allow userspace to get the writable masks for feature ID registers
  - net: hibmcge: support pci_driver.shutdown()
  - net: hibmcge: select FIXED_PHY
  - !18568 support NUMA.remote feature
  - !18498  serial: 8250: fix panic due to PSLVERR
  - regulator: core: fix NULL dereference on unbind due to stale coupling data
  - !18409 crypto: hisilicon - support for new ZIP features
  - !18545  HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - !18563  arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - mm/numa_remote: add kernel doc for numa remote feature
  - mm/numa_remote: extend cmdline numa_remote to limit the max number of remote node
  - mm: memory-failure: use kill_accessing_process() in ghes
  - mm: memory-failure: remove task_struct from kill_accessing_process()
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
  - arm64: configs: enable NUMA_REMOTE by default
  - mm/numa_remote: enable oom_kill_cpuless_numa_allocating_task when numa_remote is enabled
  - mm/oom_kill: kill current in OOM when binding to cpu-less nodes
  - mm/numa_rmeote: add preonline interface for each memory device
  - mm/numa_remote: add pre-online count in meminfo
  - mm/numa_remote: add sysfs to distinguish whether a remote node
  - mm/numa_remote: introduce hugetlb_nowatermark mode for remote node
  - mm/numa_remote: undo isolation of remote memory asynchronously
  - mm/numa_remote: introduce pre-online mode to support hotplug unready memory
  - mm/numa_remote: introduce nofallback mode for remote node
  - mm/numa_remote: support to set node distance
  - mm/numa_remote: support to hotplug/hotremove remote memory
  - mm/numa_remote: prepare numa node for remote memory
  - mm/memory_hotplug: support to hotplug memory on ZONE_EXTMEM
  - mm/hugetlb: fix folio is still mapped when deleted
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
  - arm64/mpam: Fix L2 MBWU monitor multiplexing issue
  - !18559  arm64/mpam: Fix MBWU monitor overflow handling
  - !18544  fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !18536  arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18130 Net: nebula_matrix: set nebula_matrix driver to a newer state
  - !16777 RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - arm64/mpam: Print MPAM register operation for debug
  - arm64/mpam: Fix MBWU monitor overflow handling
  - cpu/SMT: recover global num_threads after disable smt switch fail
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  - fs/resctrl: Re-allocate rmid for the monitor when migrating across control groups
  - !17676 [OLK-6.6] Backported patches of Transient Scheduler Attacks (TSA)
  - arm-smmu-v3: add 'HIP10C' for 162100602 errata
  - !18533 [OLK-6.6]:update patches for sw64 architecture
  - !18516  arm64: Add support for HIP09 Spectre-BHB mitigation
  - !18457  arm64: add cnp verification on Hisilicon erratum 162100125
  - !18513  Fix CVE-2025-39679
  - !18531  arm/syscalls: mark syscall invocation as likely in
  - !11635  arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
  - !18507 Fix wrong CPU aff3 conversion between  MPIDR and SYS_LSUDVMBM_EL2
  - sw64: add CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y to defconfig
  - sw64: fix the condition for enabling hw_una_enabled
  - sw64: efi: fix compile error when CONFIG_EFI=n
  - sw64: powercap: fix misuse of an uninitialized temporary variable
  - sw64: powercap: increase the interval of polling mode
  - sw64: powercap: fix Kconfig dependency for SW64_POWERCAP
  - sw64: powercap: avoid checking meaningless target freq
  - sw64: smp: fix unaligned access before trap_init()
  - sw64: irqchip: update effective affinity for INTx
  - sw64: msi: fix affinity change of managed irq
  - sw64: use orig_r0 as syscall nr
  - sw64: revert ioremap() to __va() in ioport_map()
  - sw64: fix unresolved reference error when close pci
  - sw64: kvm: add the C4 kvm_regs structure to uapi kvm.h
  - arm/syscalls: mark syscall invocation as likely in invoke_syscall
  - !18517  media: rc: fix races with imon_disconnect()
  - !18327 net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - !18488 RDMA/hns: Fix wrong WQE data when QP wraps around
  - KVM: hisi_virt: tlbi: Fix wrong CPU aff3 conversion between MPIDR and SYS_LSUDVMBM_EL2
  - media: rc: fix races with imon_disconnect()
  - arm64: Add support for HIP09 Spectre-BHB mitigation
  - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
  - !18495  CVE-2025-39967
  - !18258  perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions and Don't use PMCCNTR_EL0 on SMT cores
  - serial: 8250: fix panic due to PSLVERR
  - fbcon: Fix OOB access in font allocation
  - fbcon: fix integer overflow in fbcon_do_set_font
  - !16738 perf vendor events arm64: Add N2, V2, N3, V3 events/metrics
  - !18385  e1000e: fix heap overflow in e1000_set_eeprom
  - !18395  scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - config: enable CONFIG_MITIGATION_TSA and CONFIG_KVM_HYPERV by default on x86
  - x86/cpu: Shorten CPU matching macro
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines
  - x86/microcode/AMD: Handle the case of no BIOS microcode
  - KVM: SVM: Advertise TSA CPUID bits to guests
  - tools headers: Sync x86 headers with the kernel source
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  - x86/microcode/AMD: Add some forgotten models to the SHA check
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array
  - x86/microcode/AMD: Split load_microcode_amd()
  - x86/microcode/AMD: Pay attention to the stepping dynamically
  - KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page()
  - x86/microcode/intel: Set new revision only after a successful update
  - x86/platform/atom: Switch to new Intel CPU model defines
  - x86/process: Move the buffer clearing before MONITOR
  - x86/microcode/AMD: Add TSA microcode SHAs
  - x86/microcode/AMD: Load only SHA256-checksummed patches
  - x86/microcode/AMD: Add get_patch_level()
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode()
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
  - x86/microcode/AMD: Avoid -Wformat warning with clang-15
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool
  - x86/microcode/AMD: Flush patch buffer mapping after application
  - x86/microcode: Rework early revisions reporting
  - x86/bugs: Add a Transient Scheduler Attacks mitigation
  - x86/bugs: Rename MDS machinery to something more generic
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h>
  - KVM: x86: Swap incoming guest CPUID into vCPU before massaging in KVM_SET_CPUID2
  - KVM: x86: Explicitly do runtime CPUID updates "after" initial setup
  - KVM: x86: Rename kvm_cpu_cap_mask() to kvm_cpu_cap_init()
  - x86/cpu: Expose only stepping min/max interface
  - x86/cpu: Introduce new microcode matching helper
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines
  - cpufreq: Switch to new Intel CPU model defines
  - EDAC/skx: Switch to new Intel CPU model defines
  - EDAC/i10nm: Switch to new Intel CPU model defines
  - x86/aperfmperf: Switch to new Intel CPU model defines
  - x86/apic: Switch to new Intel CPU model defines
  - x86/bugs: Switch to new Intel CPU model defines
  - x86/CPU/AMD: Improve the erratum 1386 workaround
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake
  - KVM: x86: Make Hyper-V emulation optional
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS
  - KVM: VMX: Split off hyperv_evmcs.{ch}
  - net: ubl: add CONFIG_UB_UBL definition and UBL interface
  - RDMA/hns: Fix wrong WQE data when QP wraps around
  - arm64: add cnp verification on Hisilicon erratum 162100125
  - net:nebula-matrix:Add S1000 SNIC driver support
  - sdei_watchdog: Add CPU_PM_ENTER_FAILED handling in sdei_watchdog_pm_notifier
  - crypto: hisilicon/qm - clear all VF configurations in the hardware
  - Revert "crypto: hisilicon/qm - fix vfs_num error"
  - crypto: hisilicon/qm - invalidate queues in use
  - Revert "crypto: hisilicon/qm - invalidate queues in use"
  - Revert "crypto: hisilicon/qm - clear the memory before enabling the device"
  - crypto: hisilicon/zip - add hashjoin, gather, and UDMA data move features
  - crypto: hisilicon/zip - add lz4 and lz77_only to algorithm sysfs
  - crypto: hisilicon/sec2 - Fix false-positive warning of uninitialised qp_ctx
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow
  - e1000e: fix heap overflow in e1000_set_eeprom
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions
  - RNPGBE: NET: Fix dmesg 'unknow speed' show when 1000M
  - perf vendor events arm64: Add V3 events/metrics
  - perf vendor events arm64: Add N3 events/metrics
  - perf vendor events arm64: Add FUJITSU-MONAKA PMU event
  - perf vendor events arm64: Update N2/V2 events from source
  - arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register


author: Li Nan <linan122@huawei.com> - 6.6.0-115.0.0.107
changelog:
  - !18713 iommu: Enabling Broadcast TLB Maintenance (BTM) for UMMU on ARM64
  - iommu: Fix kabi breakage due to opening KVM_PINNED_VMID
  - vfio: Fix kabi breakage due to closing VFIO_CONTAINER
  - iommu: Pass in kvm pointer to domain_alloc_user
  - iommufd: Associate kvm pointer to iommufd ctx
  - KVM: arm64: Introduce support to pin VMIDs
  - KVM: Add generic infrastructure to support pinned VMIDs
  - !18695 PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - !18761 net: hns3: the multi-tcs VF can be configured only when the interface is down
  - !18735  KVM: arm64: Prevent access to vCPU events before init
  - !18598 arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - net: hns3: the multi-tcs VF can be configured only when the interface is down
  - net: hns3: remap vf's queue and qset when vport start
  - net: hns3: support dpdk using vf multiple tcs
  - net: hns3: add support for vf get dscp configuration from pf
  - net: hns3: add support for vf multiple tcs
  - !18597 iommu/ummu-core: Add ummu-core framework.
  - !18316  jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - KVM: arm64: Prevent access to vCPU events before init
  - !18421 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.84-6.6.85 LTS Patches
  - !18702  i40e: fix idx validation in i40e_validate_queue_map
  - !18699  *** CVE-2025-39973 ***
  - !18649  tty: n_gsm: Don't block input queue by waiting MSC
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device()
  - iommu/ummu-core: core interfaces for ummu drivers
  - iommu/ummu-core: impl ioctl interface for /dev/ummu device
  - iommu/ummu-core: add pseudo Token Dev for Token ID abstraction
  - iommu/ummu-core: add UMMU Token ID operation interfaces
  - iommu/ummu-core: add UMMU EID operation interfaces
  - iommu/ummu-core: support IOVA on demand mapping
  - iommu/ummu-core: get iova_domain from iommu_domain
  - !18659  ptp: Add a upper bound on max_vclocks
  - !18680  futex: Prevent use-after-free during requeue-PI
  - !18683  qed: Don't collect too many protection override GRC elements
  - !18682  i40e: fix validation of VF state in get resources
  - !18681  i40e: fix input validation logic for action_meta
  - !18679  cnic: Fix use-after-free bugs in cnic_delete_task
  - !18668  openvswitch: Fix unsafe attribute parsing in output_userspace()
  - !18267  CVE-2025-39832
  - !18705  mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh
  - watchdog/perf: Provide function for adjusting the event period
  - Revert "watchdog/perf: Provide function for adjusting the event period"
  - Revert "arm64/watchdog_hld: Add a cpufreq notifier for update watchdog thresh"
  - !18690 [OLK-6.6] Fix CVE-2025-38290
  - !18672 [OLK-6.6] Fix CVE-2025-38286
  - !17950 net: atm: add lec_mutex
  - iommu/ummu-core: introduce UMMU-CORE, basic configs
  - iommu/ummu-core: support iommu ksva mode
  - iommu/ummu-core: introduce iommu sva permission operation
  - iommu/ummu-core: introduce iommu_sva_bind_isolated interface
  - iommu/ummu-core: add the user invalidation type in iommufd file
  - iommu/ummu-core: iommu_dev new min_pasids attribute
  - mm: fix compilation error due to MAX_PAGE_ORDER isn't declared
  - i40e: fix idx validation in i40e_validate_queue_map
  - i40e: add validation for ring_len param
  - i40e: increase max descriptors for XL710
  - !18372 sched/fair: remove qos_reweight logic under non-SMP scenario
  - !18423 ext4: disambiguate the return value of ext4_dio_write_end_io()
  - !18328 [OLK-6.6] fix txgbe link fec issues and  enhance hot reset mechanism
  - wifi: ath12k: fix node corruption in ar->arvifs list
  - !18662 net: hibmcge: fix the inappropriate netif_device_detach()
  - !18605 net: ubl: add depend to ARM64 and remove config in x86
  - qed: Don't collect too many protection override GRC elements
  - i40e: fix validation of VF state in get resources
  - i40e: fix input validation logic for action_meta
  - futex: Prevent use-after-free during requeue-PI
  - cnic: Fix use-after-free bugs in cnic_delete_task
  - !18666  bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - !18270  Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - !18271  libceph: fix invalid accesses to ceph_connection_v1_info
  - !18272  CVE-2025-39889
  - !18273  ppp: fix memory leak in pad_compress_skb
  - !18268  RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - openvswitch: Fix unsafe attribute parsing in output_userspace()
  - pinctrl: at91: Fix possible out-of-boundary access
  - !18646  tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - !18630  tracing: dynevent: Add a missing lockdown check on dynevent
  - bpf-rvi: block: fix memleak issue in bpf_show_partitions_start()
  - iommu/ummu-core: New ub bus added to the iommu framework
  - !18525 ub: add UBUS and UBFI driver framework
  - !18486  ACPI: pfr_update: Fix the driver update version check
  - !18363  comedi: pcl726: Prevent invalid irq number
  - net: hibmcge: fix the inappropriate netif_device_detach()
  - net: hibmcge: remove unnecessary check for np_link_fail in scenarios without phy.
  - net: hibmcge: fix rx buf avl irq is not re-enabled in irq_handle issue
  - ptp: Add a upper bound on max_vclocks
  - tty: n_gsm: Don't block input queue by waiting MSC
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
  - tracing: dynevent: Add a missing lockdown check on dynevent
  - ub:ubus: Supports decoder event processing
  - ub:ubus: Support for sending decoder commands
  - ub:ubus: Support for range table mapping and unmapping functions
  - ub:ubus: Support for page-range table address mapping and unmapping
  - ub:ubus: Support for Bus EID-UPI Table Configuration
  - ub:ubus: Support for UB Character Device Driver
  - ub:ubus: Support UBUS RAS capability
  - ub:ubus: Creating and deleting ub decoder page table mappings
  - ub:ubus: Adding a ue Creation Destruction Mechanism
  - ub:ubus: Enable the ub decoder device support
  - ub:ubus: Add UBUS RAS framework
  - ub:ubus: Support configuration of device information interface
  - ub:ubus: Support for enabling and disabling ue
  - ub:ubus: Add MSI capability for UBUS driver
  - ub:ubus: Add UBUS MSI basic functions
  - ub:ubus: Support UBUS Interrupt framework
  - ub:ubus: Add UBUS capability interfaces
  - ub:ubus: Support device level and port level reset
  - ub:ubus: Support for multiple mue enablement
  - ub:ubus: Support UB device enabling basic interface
  - ub:ubus: Supports device enumeration.
  - ub:ubus: Support for UB Bus Controller Enumeration
  - ub:ubus: Support for shortest path routing configuration
  - ub:ubus: Supports network address configuration and querying
  - ub:ubus: Support enumeration topology query commands
  - ub:ubus: Add UBUS resource space basic functions
  - ub:ubus: Add UBUS resource space framework
  - ub:ubus: Support for UB bus enumeration message initialization
  - ub:ubus: Support for UB routing table configuration function
  - ub:ubus: Add CNA allocate and free interfaces by kernel
  - ub:ubus: Add EID allocate and free interfaces by kernel
  - ub:ubus: Support cc configuration and query
  - ub:ubus: Supporting the UB Shared Port Function
  - ub:ubus: Support for UB port sysfs attribute files
  - ub:ubus: Support Ubus read/write configuration functions
  - ub:ubus: Support for UB Bus Port Management Framework
  - ub:ubus: Add Ubus setting configuration space function
  - ub:ubus: Support for UB Bus DMA Configuration Function
  - ub:ubfi: ubfi driver create ubc device
  - ub:ubus: Support for ubus messaging communication framework
  - ub:ubus: add ubus controller framework
  - ub:ubfi: ubfi driver parse ubc information from ubrt
  - ub:ubus: Support UB Bus Attribute Group
  - ub:ubfi: Support ub firmware interface basic functions
  - ub:ubus: Support for ub bus driver framework
  - net: ubl: add depend to ARM64 and remove config in x86
  - net: ubl: modify the description in Kconfig of UB
  - ACPI: pfr_update: Fix the driver update version check
  - net: txgbe: fix invoke hot reset multi times unexpectedly
  - net: txgbe: fix race condition when recover or close/suspend
  - net: txgbe: fix fec mode issues
  - net: txgbe: set pf promisc and vlan cannot receive packets
  - net: txgbe: fix 25G link issues
  - net: txgbe: change default tx queue depth
  - net: txgbe: fix i2c issues
  - net: txgbe: fix can't read rx_pb_n_pxoff
  - ext4: disambiguate the return value of ext4_dio_write_end_io()
  - net: lwtunnel: disable BHs when required
  - netfilter: nft_counter: Use u64_stats_t for statistic.
  - wifi: iwlwifi: mvm: ensure offloading TID queue exists
  - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
  - mptcp: Fix data stream corruption in the address announcement
  - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
  - drm/amd/display: should support dmub hw lock on Replay
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
  - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
  - drm/sched: Fix fence reference count leak
  - batman-adv: Ignore own maximum aggregation size during RX
  - efi/libstub: Avoid physical address 0x0 when doing random allocation
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment
  - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
  - mmc: atmel-mci: Add missing clk_disable_unprepare()
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
  - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
  - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
  - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
  - accel/qaic: Fix integer overflow in qaic_validate_req()
  - regulator: dummy: force synchronous probing
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
  - drm/v3d: Don't run jobs that have errors flagged in its fence
  - can: flexcan: disable transceiver during system PM
  - can: flexcan: only change CAN state when link up in system PM
  - can: ucan: fix out of bound read in strscpy() source
  - can: rcar_canfd: Fix page entries in the AFL list
  - i2c: omap: fix IRQ storms
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
  - net: lwtunnel: fix recursion loops
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
  - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
  - accel/qaic: Fix possible data corruption in BOs > 2G
  - Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured
  - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
  - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
  - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
  - soc: imx8m: Use devm_* to simplify probe failure handling
  - soc: imx8m: Remove global soc_uid
  - xfrm_output: Force software GSO only in tunnel mode
  - xfrm: fix tunnel mode TX datapath in packet offload mode
  - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
  - firmware: imx-scu: fix OF node leak in .probe()
  - net: txgbe: fix bond port rate is unknown when linkup
  - net: txgbe: fix VF multicast address removal not taking effect
  - net: txgbe: fix missing PFC mask configuration on AML
  - net: txgbe: fix pktgen cannot stop
  - sched/fair: remove qos_reweight logic under non-SMP scenario
  - comedi: pcl726: Prevent invalid irq number
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - ppp: fix memory leak in pad_compress_skb
  - Bluetooth: hci_event: Fix not using key encryption size when its known
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level
  - Bluetooth: l2cap: Check encryption key size on incoming connection
  - libceph: fix invalid accesses to ceph_connection_v1_info
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  - net/mlx5: Fix lockdep assertion on sync reset unload event
  - net/mlx5: Add support for sync reset using hot reset
  - net/mlx5: Add device cap for supporting hot reset in sync reset flow
  - net/mlx5: Reload auxiliary drivers on fw_activate
  - net: txgbe: fix DAC cable link down
  - net: txgbe: fix display of supports Wake-on in the ethtool
  - net: atm: add lec_mutex


author: Li Nan <linan122@huawei.com> - 6.6.0-117.0.0.109
changelog:
  - !17926 spufs: fix a leak on spufs_new_file() failure
  - !18393 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - !18389 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - !18381 f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - !18370 dmaengine: ti: Add NULL check in udma_probe()
  - !18674 jfs: fix array-index-out-of-bounds read in add_missing_indices
  - !18438 jfs: Fix null-ptr-deref in jfs_ioc_trim
  - !18435 ksmbd: fix null pointer dereference in destroy_previous_session
  - !18434 tty: serial: uartlite: register uart driver in init
  - !18404 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter-&gt;memcg_path on write
  - !18799 [OLK-6.6] Fix CVE-2025-38336
  - !18798 [OLK-6.6] Fix CVE-2025-38335
  - !18793 [OLK-6.6] Fix CVE-2025-38275
  - !18789 [OLK-6.6] Fix CVE-2025-38274
  - !18786 [OLK-6.6] Fix CVE-2025-38300
  - !18781 [OLK-6.6] Fix CVE-2025-38295
  - !18778 [OLK-6.6] Fix CVE-2025-38293
  - !18777 [OLK-6.6] Fix CVE-2025-38292
  - !18849 urma: introduce ubcore main module.
  - !18842 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.85-6.6.86 LTS Patches
  - !18484 btf: Avoid weak external references
  - !18921  blk-ioinf: introduce inflight-based IO QoS controller
  - blk-rq-qos: fix kabi broken in struct rq_qos
  - blk-mq: fix kabi broken in struct request
  - openeuler_defconfig: Enable CONFIG_BLK_CGROUP_IOINFLIGHT
  - blk-io-hierarchy: support new bio based stage ioinf
  - blk-ioinf: support percentile latency QoS for oneline workloads
  - blk-ioinf: dynamically adjust inflight limit to balance workloads
  - blk-ioinf: add rqos/inflight/stat debufs interface
  - blk-ioinf: introduce inflight-based IO QoS controller
  - !18863 drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - !18885 ub: ubase: Fix some compile warnings&fix pages free problem
  - !18910  um: virtio_uml: Fix use-after-free after put_device in probe
  - !18902  i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - urma: introduce ubcore main module.
  - um: virtio_uml: Fix use-after-free after put_device in probe
  - ub: ubase: Fix some compile warnings
  - !18894  some bugfixes for NUMA.remote
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present
  - !18723 GMEM: General Memory Management
  - !18852 vfio:ubus: Support Virtual Function I/O  of UBUS
  - !18788 ub: Support new features for UBUS
  - !18701 ubios_uvb: support uvb driver
  - mm/numa_remote: check if memory block is preonlined when undoing fake-online
  - mm/numa_remote: fix restoring to preonline when failing to offline from preonline
  - mm/numa_remote: fix memory leak of struct memory_block
  - !18840 v2  Backport some memory policy feature and bugfix from mainline
  - ub: ubase: Fix the problem that free pages when ubase driver destroy TA context
  - ubios_uvb: support CIS framework receive function
  - ubios_uvb: support CIS framework send function
  - ubios_uvb: support parse ubios information by dtb
  - ubios_uvb: support UBIOS object description specification parse
  - vfio:ubus: support obtaining and configuring function entity information in user mode
  - vfio:ubus: Support configuration for function entity interrupt
  - vfio:ubus: Support access to function entity resource space
  - vfio:ubus: Init vfio ub config space 1 perm and port perm bits during module init
  - vfio:ubus: Init vfio ub config space 0 perm bits during module init
  - vfio:ubus: Init vfio ub configuration space
  - vfio:ubus: Support ub vfio config read and write
  - vfio:ubus: Support for vfio ubus driver framework
  - ub:ubus: Support UBUS driver host probe and remove
  - ub:ubus: Add configuration and resource sysfs interfaces
  - ub:ubus: Add basic System Filesystem attributes
  - ub:ubus: Support processing protocol link messages
  - ub:ubus: Support hotplug processing main workflow
  - ub:ubus: Support for device enumeration during the hotplug phase
  - ub:ubus: Support for slot register configuration
  - ub:ubus: Support hotplug service driver
  - ub:ubus: Add generic ub component driver
  - ub:ubus: Add ub service driver framework
  - ub:ubus: Add new UBUS pool device interfaces
  - ub:ubus: Support UBUS pool devices register
  - ub:ubfi: register ubc usi domain
  - ub:ubus: Support for ub device resource space registration
  - ub:ubus: Add UBUS receive message framework
  - ub:ubus: Support device binding and unbinding bus instance
  - ub:ubus: Support for static cluster bus instance
  - ub:ubus: Support for dynamic bus instance
  - ub:ubus: Support for bus instance framework
  - ub:ubus: Support handle device link up and link down
  - ub:ubus: Support enumerate port and route set/clear for port
  - ub:ubus: Support route modify/delete function
  - !18750 iommu/ummu: Add ummu driver basic capabilities.
  - iommu/ummu: Add UMMU cache flush interfaces
  - iommu/ummu: Support UMMU event handling
  - iommu/ummu: Support UMMU global error handling
  - iommu/ummu: Support UMMU command queue
  - iommu/ummu: Support UMMU device
  - !18748 ub: ubfi: Support ummu node in ubfi
  - !18804 drivers/perf: hisi: Support UMMU pmu
  - !18855  mm: do not install PMD mappings when handling a COW fault
  - !18848 net:nebula-matrix:fix compile err
  - drivers/perf: hisi: Add support for HiSilicon MN PMU driver
  - drivers/perf: hisi: Add support for HiSilicon NoC PMU
  - Revert "drivers/perf: hisi: Add support for HiSilicon NoC PMU"
  - Revert "drivers/perf: hisi: Add support for HiSilicon MN PMU driver"
  - ub: ubfi: Parsing ummu node in the ubrt table
  - net:nebula-matrix:fix compile err
  - mm: do not install PMD mappings when handling a COW fault
  - urma: implement workqueue management for ubcore module.
  - urma: implement topology information management for ubcore module.
  - urma: implement hash table utilities for ubcore module.
  - !18810 ub: ubase: support for advanced functions
  - urma: implement log module for ubcore subsystem.
  - gmem: open CONFIG_GMEM for arm64 and x86
  - mm: implement hmemcpy API
  - mm: implement hmadvise API
  - mm: support mmap/unmap peer-shared memory area
  - gmem: add gmem stat
  - gmem: support pin/unpin device memory
  - gmem: support swapping heterogeneous memory
  - gmem: implement page faulting for peer-shared vma
  - gmem: implement allocating/deallocating peer-shared vma.
  - gmem: introduce hnode for free peer-shared free page management
  - gmem: introduce vm_object for managing hetergoneous memory mapping
  - gmem: prepare config, boot parameter, vma flag and basic GMEM related structs
  - !18758  nbd: restrict sockets to TCP and UDP
  - !18407 net:Add a new protocol family definition AF_UB to support UB Memory based Socket(UMS)
  - !18839  rseq: Protect event mask against membarrier IPI
  - wifi: ath12k: fix invalid access to memory
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
  - net: usb: usbnet: restore usb%d name exception for local mac addresses
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
  - tty: serial: 8250: Add Brainboxes XC devices
  - tty: serial: 8250: Add some more device IDs
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe
  - counter: stm32-lptimer-cnt: fix error handling when enabling
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
  - mm/page_alloc: fix memory accept before watermarks gets initialized
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT
  - drm/dp_mst: Add a helper to queue a topology probe
  - drm/dp_mst: Factor out function to queue a topology probe work
  - ARM: Remove address checking for MMUless devices
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
  - mm/mempolicy: count MPOL_WEIGHTED_INTERLEAVE to "interleave_hit"
  - mm/mempolicy: fix memory leaks in weighted interleave sysfs
  - mempolicy: clean up minor dead code in queue_pages_test_walk()
  - mm/mempolicy: protect task interleave functions with tsk->mems_allowed_seq
  - mm/mempolicy: introduce MPOL_WEIGHTED_INTERLEAVE for weighted interleaving
  - mm/mempolicy: refactor a read-once mechanism into a function for re-use
  - mm/mempolicy: implement the sysfs-based weighted_interleave interface
  - mempolicy: migration attempt to match interleave nodes
  - mempolicy: mmap_lock is not needed while migrating folios
  - mempolicy: alloc_pages_mpol() for NUMA policy without vma
  - kernfs: drop shared NUMA mempolicy hooks
  - mempolicy: remove confusing MPOL_MF_LAZY dead code
  - mempolicy: mpol_shared_policy_init() without pseudo-vma
  - mempolicy trivia: use pgoff_t in shared mempolicy tree
  - mempolicy trivia: slightly more consistent naming
  - mempolicy trivia: delete those ancient pr_debug()s
  - mempolicy: fix migrate_pages(2) syscall return nr_failed
  - Revert "mm/mempolicy.c: fix the out-of-bounds access issue in mpol_parse_str"
  - ub: ubase: support for activate/deactivate dev interface
  - ub: ubase: pf supports debugfs query port/vl current.
  - ub: ubase: adds the function to get ub port stats for unic and other aux driver
  - ub: ubase: support pre-alloc 2M pages.
  - ub: ubase: support ras function
  - ub: ubase: Support to port reset
  - ub: ubase: Added QoS and traffic management debugging features
  - ub: ubase: Support reset count information statistics.
  - ub: ubase: Support for ELR and entity reset.
  - ub: ubase: Provide an entity_list query interface.
  - ub: ubase: support create and delete UM TP/TPG
  - ub: ubase: Support to config and query the sl scheduling mode and weight in ETS and TM modes.
  - ub: ubase: support querying sl information in initialization phase
  - ub: ubase: Supports for ctrl queue management.
  - rseq: Protect event mask against membarrier IPI
  - !18820 [OLK-6.6] backport important bugfix for lpfc driver from upstream linux-6.6.y
  - !18817 [OLK-6.6] backport important bugfix for mpt3sas driver from upstream linux-6.6.y
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  - !18800 net: hibmcge: support pagepool for rx
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
  - !18745  *** Mainline PATCH backport ***
  - !18807  smb: client: fix wrong index reference in smb2_compound_op()
  - !18711  Bluetooth: hci_conn: Use disable_delayed_work_sync
  - !17268  LoongArch: fix nvme/megaraid/stmmac/uprobe/rtc/kdump problems
  - !18500 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.82-6.6.83 LTS Conflicts Patches
  - ub: ubase: adds the function that query oor caps
  - ub: ubase: Support for virtual register and unregister.
  - ub: ubase: Add trace events to aeqe and ceqe.
  - ub: ubase: Add the cmdq trace event print at the ubase layer.
  - ub: ubase: Support for timer/ext_dtb buffer management.
  - !18784  padata: Reset next CPU when reorder sequence wraps around
  - !18806 perf: fix ddrc redundant value set
  - !18802  KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - !18739  fs: udf: fix OOB read in lengthAllocDescs handling
  - !18710 ub: ubase: Add support of base driver for ub network
  - smb: client: fix wrong index reference in smb2_compound_op()
  - ub: ubase: Support for public Context memory allocation and release.
  - ub: ubase: support for cdma auxiliary device
  - ub: ubase: support for complete event process
  - ub: ubase: support for async event process
  - ub: ubase: add interrupt management framework and misc handler
  - ub: ubase: add function to query device resource
  - ub: ubase: add the function that query ueid
  - ub: ubase: support debugfs public interface.
  - ub: ubase: support for command process
  - ub: ubase: add support of ubase driver for ub network
  - perf: fix ddrc redundant value set
  - drivers/perf: hisi: Add the sysfs interface to configure pmu mpam
  - drivers/perf: hisi: Implement ummu-pmu driver.
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  - net: hibmcge: support pagepool for rx
  - net: hibmcge: reduce packet drop under stress testing
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
  - padata: Reset next CPU when reorder sequence wraps around
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
  - wifi: ath11k: fix node corruption in ar->arvifs list
  - nbd: restrict sockets to TCP and UDP
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
  - x86/umip: Check that the instruction opcode is at least two bytes
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed
  - fs: udf: fix OOB read in lengthAllocDescs handling
  - net: Add a new protocol family AF_UB
  - Bluetooth: hci_conn: Use disable_delayed_work_sync
  - jfs: fix array-index-out-of-bounds read in add_missing_indices
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
  - regulator: max20086: fix invalid memory access
  - dmaengine: ti: Add NULL check in udma_probe()
  - selftests: net: test for lwtunnel dst ref loops
  - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou
  - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
  - net: ipv6: fix dst ref loop in ila lwtunnel
  - net: ipv6: fix missing dst ref drop in ila lwtunnel
  - arm64: dts: rockchip: add rs485 support on uart5 of px30-ringneck-haikou
  - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
  - btf: Avoid weak external references
  - vmlinux: Avoid weak reference to notes section
  - kallsyms: Avoid weak references for kallsyms symbols
  - jfs: Fix null-ptr-deref in jfs_ioc_trim
  - ksmbd: fix null pointer dereference in destroy_previous_session
  - tty: serial: uartlite: register uart driver in init
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  - spufs: fix a leak on spufs_new_file() failure
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
  - LoongArch: Support mem=<size> kernel parameter
  - LoongArch: Reserve the EFI memory map region
  - LoongArch: Add debugfs entries to switch SFB/TSO state
  - LoongArch: uprobes: Remove redundant code about resume_era
  - LoongArch: uprobes: Remove user_{en,dis}able_single_step()
  - LoongArch: fix access mode of 7A2000 acpi gpio.
  - LoongArch: configs: enable zstd compressed firmware support
  - Loongarch: configs: Make EFI RTC built-in for correct vmcore timestamps
  - megaraid: Add udelay to avoid data error caused by dma sequence
  - nvme: Add udelay to avoid data error caused by dma sequence


author: Li Nan <linan122@huawei.com> - 6.6.0-119.0.0.110
changelog:
  - !19043  EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18348 Intel: Backport PMU support for Intel Clearwater Forest platform
  - !18703 ub: udma: Support loading and unloading driver.
  - !19031 v6  fuse:io_uring: support fuse over io_uring
  - !19033 ub:ubus: Add ummu_map attribute in sysfs
  - !18980  misc: uacce - fix a null pointer access issue when poweroff
  - !18519 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - !18518 iio: imu: bno055: fix OOB access of hw_xlate array
  - !18515 s390/ism: fix concurrency management in ism_cmd()
  - !18493 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - !18506 Fix CVE-2025-39781
  - !18505 Fix CVE-2025-38696
  - !18504 Fix CVE-2025-38640
  - !18503 Fix CVE-2025-39716
  - !18502 Fix CVE-2025-39767
  - !18501 Fix CVE-2025-39693
  - !18494 Fix CVE-2025-39909
  - !18497 Fix CVE-2025-39952
  - !18492 Fix CVE-2025-39916
  - !18957 [OLK-6.6] Fix CVE-2025-39846
  - !18956 [OLK-6.6] Fix CVE-2025-39842
  - !18955 [OLK-6.6] Fix CVE-2025-39861
  - !18954 [OLK-6.6] Fix CVE-2025-39794
  - !18953 [OLK-6.6] Fix CVE-2025-39863
  - !18633 [OLK-6.6] Fix CVE-2025-38715
  - !18631 [OLK-6.6]Fix CVE-2025-38698
  - !18215 [OLK-6.6] Fix CVE-2025-38576
  - !18398 btrfs: avoid NULL pointer dereference if no valid csum tree
  - !18876 Fix CVE-2025-38011
  - !18388 fs/ntfs3: handle hdr_first_de() return value
  - !18369 usb: renesas_usbhs: Reorder clock handling and power management in probe
  - !18367 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - !18321 wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - !18310 net: usb: aqc111: debug info before sanitation
  - !18309 coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - !18949 [OLK-6.6] Fix CVE-2025-38107
  - !18947 [OLK-6.6] Fix CVE-2025-38126
  - !18946 [OLK-6.6] Fix CVE-2025-38218
  - !18945 [OLK-6.6] Fix CVE-2025-38217
  - !18944 [OLK-6.6] Fix CVE-2025-38230
  - !18814 [OLK-6.6] Fix CVE-2025-38225
  - !18813 [OLK-6.6] Fix CVE-2025-38185
  - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  - !18812 [OLK-6.6] Fix CVE-2025-38206
  - !18675 wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - !18432 [OLK-6.6] Fix CVE-2025-38259
  - !18244 eventpoll: don't decrement ep refcount while still holding the ep mutex
  - !18245 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - !18243 f2fs: fix to do sanity check on ino and xnid
  - !18242 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - !18246 aoe: clean device rq_list in aoedev_downdev()
  - ub: udma: Support init and uninit dfx function.
  - ub: udma: Support register and unregister segment function.
  - ub: udma: Support set eid function.
  - ub: udma: Support register and unregister ctrlq event.
  - ub: udma: Support register and unregister ce and crq event.
  - ub: udma: Support register and unregister ae event.
  - ub: udma: Register and unregister debugfs.
  - ub: udma: Create and destroy u-context.
  - ub:ubus: Add ummu_map attribute in sysfs
  - openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default
  - fuse: remove unneeded atomic set in uring creation
  - fuse: removed unused function fuse_uring_create() from header
  - fuse: {io-uring} Fix a possible req cancellation race
  - fuse: fix possible deadlock if rings are never initialized
  - fuse: fix uring race condition for null dereference of fc
  - fuse: prevent disabling io-uring on active connections
  - fuse: enable fuse-over-io-uring
  - fuse: block request allocation until io-uring init is complete
  - fuse: {io-uring} Prevent mount point hang on fuse-server termination
  - fuse: Allow to queue bg requests through io-uring
  - fuse: Allow to queue fg requests through io-uring
  - fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static
  - fuse: {io-uring} Handle teardown of ring entries
  - fuse: Add io-uring sqe commit and fetch support
  - fuse: {io-uring} Make hash-list req unique finding functions non-static
  - fuse: Add fuse-io-uring handling into fuse_copy
  - fuse: Make fuse_copy non static
  - fuse: {io-uring} Handle SQEs - register commands
  - fuse: make args->in_args[0] to be always the header
  - fuse: Add fuse-io-uring design documentation
  - fuse: Move request bits
  - fuse: Move fuse_get_dev to header file
  - fuse: rename to fuse_dev_end_requests and make non-static
  - io_uring: fix kabi broken for header file changed
  - io_uring: fix kabi broken in struct io_submit_state
  - io_uring: fix kabi broken in struct io_ring_ctx
  - io_uring: fix kabi broken in struct io_tw_state
  - io_uring: kill dead code in io_req_complete_post
  - io_uring: remove dead struct io_submit_state member
  - io_uring/cmd: let cmds to know about dying task
  - io_uring: clean up io_lockdep_assert_cq_locked
  - io_uring: refactor io_req_complete_post()
  - io_uring: remove current check from complete_post
  - io_uring: get rid of intermediate aux cqe caches
  - io_uring: refactor io_fill_cqe_req_aux
  - io_uring: remove struct io_tw_state::locked
  - io_uring: force tw ctx locking
  - io_uring/cmd: document some uring_cmd related helpers
  - io_uring/cmd: fix tw <-> issue_flags conversion
  - io_uring/cmd: kill one issue_flags to tw conversion
  - io_uring/cmd: move io_uring_try_cancel_uring_cmd()
  - io_uring/cmd: give inline space in request to cmds
  - io_uring/cmd: expose iowq to cmds
  - io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
  - io_uring: split out cmd api into a separate header
  - io_uring: cancelable uring_cmd
  - io_uring: retain top 8bits of uring_cmd flags for kernel internal use
  - !19006 ub:ubus: Bugfix of ubus and ubfi
  - !18969  arm64/mpam: Add quirk to shrink MATA PMG range
  - ub:ubus: Bugfix of ubus and ubfi
  - ub: udma: Support loading and unloading driver.
  - !18859 KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19009 v2  mm: Fix shmem build and numa fault counting errors
  - !19019  media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - KVM: arm64: Deactivate the spurious vtimer interrupt
  - !19026  accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - !19024  sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !19027 v11  Add xcall 2.0 support
  - xcall2.0: Introduce xcall epollwait prefetch feature
  - openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default
  - xcall2.0: Add a basic testcase
  - xcall: Add debug mode to force fast syscall for all threads
  - xcall: Rework the early exception vector of XCALL and SYNC
  - xcall2.0: Support xcall1.0 for hardware xcall
  - xcall2.0: Hajack syscall with dynamic instruciton replace
  - xcall2.0: Add xcall_area
  - xcall2.0: Add xcall module register interface
  - xcall2.0: Add userspace proc interface
  - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
  - !18988  zcopy: A zero-copy data transfer mechanism
  - media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
  - mm: fix nr_pages counting for folio in task_numa_fault
  - mm: fix shmem build errors with CONFIG_SWAP disable
  - !18970 net: unic: Support advanced functions of unic driver
  - !18964 ub: add cdma driver code
  - !18874  mm: introduce memalloc_flags_{save,restore}
  - !18428 Add ccp-mdev feature into hygon ccp driver
  - !18440 [OLK-6.6] pinctrl: Zhaoxin: Add KH-50000 support
  - !18992  blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18482 [OLK-6.6] ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - !18478 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KH-50000
  - !18477 [OLK-6.6] perf/zhaoxin/core: Tailor FMS for KH-50000
  - !18467 [OLK-6.6] Enhance SM3 SM4 drivers with optimizations and compatibility fixes
  - !18450 [OLK-6.6] i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - !18449 [OLK-6.6] Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - !18447 RDMA/bnxt_re: Fix error recovery sequence
  - !18448 bnxt_en: Fix ethtool -d byte order for 32-bit values
  - !18452 bnxt_en: Fix DCB ETS validation
  - !18961  mm: add huge pfnmap support for remap_pfn_range()
  - blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
  - !18950 urma: implement netlink and memory management features.
  - !18930 ubcore: implement device registration and jetty management
  - zcopy: enable ZCOPY module
  - zcopy: Add ZCOPY documentation
  - zcopy: Add debug inerface dump_pagetable
  - zcopy: Add tracepoint for PageAttach
  - zcopy: Extend PMD trans hugepage mapping ability
  - zcopy: Introduce the pageattach interface
  - zcopy: Initialize zcopy module
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - !18960  KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - misc: uacce - fix a null pointer access issue when poweroff
  - !18966  wakeup kswapd during node_reclaim
  - !18857 Backport PLR (Power Limit Reasons) TPMI driver for 6.6
  - !17988 [OLK-6.6] Fix CVE-2025-38734
  - !18005 [OLK-6.6] Fix CVE-2025-38718
  - !18977 mm: migrate: Fix the compilation error caused by redundant semicolons
  - mm: migrate: Fix the compilation error caused by redundant semicolons
  - !18943 smb: client: validate change notify buffer before copy
  - !18942 rtc: rx8025: fix incorrect register reference
  - !18051 [OLK-6.6] [Bugfix] Bug fix for min_free_kbytes warning storms
  - !18040 [OLK-6.6] Fix CVE-2025-39808
  - ub: cdma: support for cdma kernelspace north-south compatibility requirements
  - ub: cdma: support reset function
  - ub: cdma: support RX stop flow function
  - ub: cdma: support debugfs interface
  - ub: cdma: support dma faa semantic
  - ub: cdma: support dma cas semantic
  - ub: cdma: support dma read semantic
  - ub: cdma: support dma write with notify semantic
  - ub: cdma: support dma write semantic delivery
  - ub: cdma: support dma write semantic configuration
  - ub: cdma: support kernel resource reclamation
  - !18892 CCA: Fix soft lockup bug while destroy realm
  - ubcore: implement support for UVS commands
  - ubcore: implement device registration and jetty management
  - !18968 kvm: supports hugepages POD when migrate vm
  - ubcore: add device management for character device and class operations
  - kvm: supports hugepages POD when migrate vm
  - net: unic: Debugfs supports querying IP specifications and IP entries.
  - net: unic: support subscribes to the RX stream stop and recovery interface.
  - net: unic: support config/query traffic class parameters
  - net: unic: support config/query ets parameters
  - net: unic: Add debugfs support for QoS configuration and query.
  - net: unic: support config/query the mapping between dscp and tc
  - net: unic: Support RAS
  - net: unic: Drive supports ub entity reset.
  - net: unic: Support to query and clear historical NIC link status information
  - net: unic: support querying and configuring coalesce parameters.
  - net: unic: Add debugfs for JFS/JFR/JFC context.
  - net: unic: Support driver dump register.
  - arm64/mpam: Merge redundant local static variables 'cpus'
  - arm64/mpam: Add quirk to shrink MATA PMG range
  - !18963 kvm: supports hugepages reclaime notify
  - mm: node_reclaim: add wakeup kswapd mode
  - mm: vmscan: wakeup kswapd during node_reclaim
  - arch_numa: Make node reclaim distance adjustment always available
  - kvm: supports hugepages reclaime notify
  - !18940 [OLK-6.6][linux-6.6.y sync] Backport 6.6.86-6.6.87 LTS Patches
  - arm64/x86: configs: Enable huge pfnmap support in openeuler defconfig
  - mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping
  - pgtable: add pte_clrhuge() implementation for arm64
  - arm64: mm: Drop dead code for pud special bit handling
  - mm/huge_memory: check pmd_special() only after pmd_present()
  - mm/arm64: support large pfn mappings
  - mm/x86: support large pfn mappings
  - mm: always define pxx_pgprot()
  - mm/fork: accept huge pfnmap entries
  - mm/pagewalk: check pfnmap for folio_walk_start()
  - mm/gup: detect huge pfnmap entries in gup-fast
  - mm: allow THP orders for PFNMAPs
  - mm: mark special bits for huge pfn mappings when inject
  - mm: drop is_huge_zero_pud()
  - mm: introduce ARCH_SUPPORTS_HUGE_PFNMAP and special bits to pmd/pud
  - !18841 mm: add auxillary functions for folios and hugetlb
  - !18896 kvm: add struct kvm if only CONFIG_KVM enabled
  - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  - mm: hugetlb: add putback_hugetlb_folio()
  - mm: hugetlb: add get_hugetlb_folio_nodemask() mm: hugetlb: add filter function to dequeue hugetlb functions
  - mm: migrate: add isolate_and_migrate_folios()
  - kvm: add struct kvm if only CONFIG_KVM enabled
  - !18908 [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - !18376 net: wangxun: ngbe: add support for wangxun 1G
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
  - ocfs2: prevent release journal inode after journal shutdown
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
  - ARM: tegra: Use I/O memcpy to write to IRAM
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
  - !18887 urma: implement ubcore sysfs interface and device management
  - !18685 ub: add cdma driver code
  - !18684 ub: ub_fwctl:Add the ub_fwctl driver
  - net_sched: ets: fix a race in ets_qdisc_change()
  - [Backport] mm/hugetlb: declare hugetlbfs_pagecache_present() non-static
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
  - !18928 gmem: fix some warnings
  - !18938 dma-mapping: benchmark: add support for UB devices
  - f2fs: fix to do sanity check on sit_bitmap_size
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
  - jfs: validate AG parameters in dbMount() to prevent crashes
  - fs/jfs: consolidate sanity checking in dbMount
  - jfs: add sanity check for agwidth in dbMount
  - perf: Fix dangling cgroup pointer in cpuctx
  - nfsd: decrease sc_count directly if fail to queue dl_recall
  - tracing: Do not add length to print format in synthetic events
  - ksmbd: fix memory leak in parse_lease_state()
  - ipv6: Align behavior across nexthops during path selection
  - gre: Fix IPv6 multicast route creation.
  - gre: Fix again IPv6 link-local address generation.
  - Revert "drm/amd: Keep display off while going into S4"
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices"
  - Revert "PCI: Avoid reset when disabled via sysfs"
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
  - tracing: Do not use PERF enums when perf is not defined
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
  - nfsd: put dl_stid if fail to queue dl_recall
  - exec: fix the racy usage of fs_struct->in_exec
  - jfs: add index corruption check to DT_GETPAGE()
  - ext4: fix OOB read when checking dotdot dir
  - ext4: don't over-report free space or inodes in statvfs
  - arm64: Don't call NULL in do_compat_alignment_fixup()
  - tracing: Fix synth event printk format for str fields
  - tracing: Ensure module defining synth event cannot be unloaded while tracing
  - ksmbd: add bounds check for create lease context
  - ksmbd: add bounds check for durable handle context
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
  - mmc: omap: Fix memory leak in mmc_omap_new_slot
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
  - kunit/overflow: Fix UB in overflow_allocation_test
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
  - platform/x86: ISST: Correct command storage data length
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
  - x86/hyperv: Fix check of return value from snp_set_vmsa()
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
  - media: imx-jpeg: Cleanup after an allocation error
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
  - smb: client: validate change notify buffer before copy
  - ub: cdma: support register segment
  - ub: cdma: support unregister segment
  - ub: cdma: support reporting completed events
  - ub: cdma: support reporting asynchronous events
  - ub: cdma: support the creation of jfs
  - ub: cdma: support the deletion of jfs
  - ub: cdma: support the creation of ctp
  - ub: cdma: support the deletion of ctp
  - ub: cdma: support the creation of jfc
  - ub: cdma: support the deletion of jfc
  - ub: cdma: support for releasing queue
  - ub: cdma: support for allocating queue
  - ub: cdma: support for getting device by eid
  - ub: cdma: support for getting device list
  - ub: cdma: support querying sl information and updating eu
  - ub: cdma: support the probe and remove processes
  - !18906 v2  Add MFS Support
  - rtc: rx8025: fix incorrect register reference
  - !18920 perf: Fix tt_core mismatch over PG CPU
  - !18934  mm/thp: Add a new sysfs knob for zero COW
  - !18845  fs/resctrl: Fix the L3 CMAX conversion mechanism
  - !18858 ub: ubase: Support debugs functions
  - !18853 net: unic: add support of unic driver for ub network
  - !18901 ub:hisi-ubus: Support HISI-UBUS driver framework
  - !18927  mm: add nr_free_highatomic in show_free_areas
  - !18929 v2:mm/swap: get the swap device offset directly
  - perf/core: Fix child_total_time_enabled accounting bug at task exit
  - drm/amdgpu/gfx11: fix num_mec
  - ipv6: Do not consider link down nexthops in path selection
  - ipv6: Start path selection from the first nexthop
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
  - vsock: avoid timeout during connect() if the socket is closing
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
  - e1000e: change k1 configuration on MTP and later platforms
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
  - RISC-V: errata: Use medany for relocatable builds
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
  - ntb: intel: Fix using link status DB's
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
  - spufs: fix a leak in spufs_create_context()
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
  - memory: omap-gpmc: drop no compatible check
  - can: statistics: use atomic access in hot path
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
  - drm/amd: Keep display off while going into S4
  - nvme-pci: fix stuck reset on concurrent DPC and HP
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
  - x86/hyperv: Fix output argument to hypercall that changes page visibility
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
  - sched/deadline: Use online cpus for validating runtime
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
  - HID: i2c-hid: improve i2c_hid_get_report error message
  - platform/x86/intel/vsec: Add Diamond Rapids support
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
  - cifs: fix incorrect validation for num_aces field of smb_acl
  - perf/core: Fix perf_pmu_register() vs. perf_init_event()
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio
  - affs: don't write overlarge OFS data block size fields
  - affs: generate OFS sequence numbers starting at 1
  - wifi: brcmfmac: keep power during suspend if board requires it
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
  - nvme-pci: clean up CMBMSC when registering CMB fails
  - wifi: iwlwifi: mvm: use the right version of the rate API
  - wifi: iwlwifi: fw: allocate chained SG tables for dump
  - rcu-tasks: Always inline rcu_irq_work_resched()
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
  - sched/smt: Always inline sched_smt_active()
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
  - objtool: Fix segfault in ignore_unreachable_insn()
  - ring-buffer: Fix bytes_dropped calculation issue
  - net/mlx5e: SHAMPO, Make reserved size independent of page size
  - ksmbd: fix multichannel connection failure
  - ksmbd: use aead_request_free to match aead_request_alloc
  - rndis_host: Flag RNDIS modems as WWAN devices
  - exfat: fix the infinite loop in exfat_find_last_cluster()
  - NFS: Shut down the nfs_client only after all the superblocks
  - perf tools: annotate asm_pure_loop.S
  - fs/procfs: fix the comment above proc_pid_wchan()
  - tty: n_tty: use uint for space returned by tty_write_room()
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
  - perf python: Check if there is space to copy all the event
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space
  - perf python: Decrement the refcount of just created event on failure
  - perf python: Fixup description of sample.id event member
  - i3c: master: svc: Fix missing the IBI rules
  - um: hostfs: avoid issues on inode number reuse by host
  - um: remove copy_from_kernel_nofault_allowed
  - selftests/mm/cow: fix the incorrect error handling
  - fuse: fix dax truncate/punch_hole fault path
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
  - kexec: initialize ELF lowest address to ULONG_MAX
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
  - perf units: Fix insufficient array space
  - perf evlist: Add success path to evlist__create_syswide_maps
  - iio: adc: ad7124: Fix comparison of channel configs
  - iio: adc: ad4130: Fix comparison of channel setups
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
  - fs/ntfs3: Prevent integer overflow in hdr_first_de()
  - usb: xhci: correct debug message page size calculation
  - perf bench: Fix perf bench syscall loop count
  - perf arm-spe: Fix load-store operation checking
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
  - ucsi_ccg: Don't show failed to get FW build information error
  - perf pmu: Don't double count common sysfs and json events
  - coresight-etm4x: add isb() before reading the TRCSTATR
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  - coresight: catu: Fix number of pages while using 64k pages
  - soundwire: slave: fix an OF node reference leak in soundwire slave device
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
  - perf stat: Fix find_stat for mixed legacy/non-legacy events
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
  - leds: Fix LED_OFF brightness race
  - mfd: sm501: Switch to BIT() to mitigate integer overflows
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
  - crypto: nx - Fix uninitialised hv_nxc on error
  - power: supply: max77693: Fix wrong conversion of charge input threshold value
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
  - clk: amlogic: g12a: fix mmc A peripheral clock
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
  - selftests/bpf: Select NUMA_NO_NODE to create map
  - clk: amlogic: gxbb: drop non existing 32k clock parent
  - clk: amlogic: g12b: fix cluster A parent data
  - pinctrl: tegra: Set SFIO mode to Mux Register
  - IB/mad: Check available slots before posting receive WRs
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  - RDMA/mlx5: Fix calculation of total invalidated pages
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
  - pinctrl: renesas: rza2: Fix missing of_node_put() call
  - lib: 842: Improve error handling in sw842_compress()
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
  - RDMA/mana_ib: Ensure variable err is initialized
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
  - clk: samsung: Fix UBSAN panic in samsung_clk_init()
  - selftests/bpf: Fix string read in strncmp benchmark
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
  - remoteproc: core: Clear table_sz when rproc_shutdown
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock
  - fbdev: sm501fb: Add some geometry checks.
  - mdacon: rework dependency list
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode
  - PCI: histb: Fix an error handling path in histb_pcie_probe()
  - drm/amd/display: avoid NPD when ASIC does not support DMUB
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
  - PCI: Remove stray put_device() in pci_register_host_bridge()
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
  - PCI: Avoid reset when disabled via sysfs
  - PCI/portdrv: Only disable pciehp interrupts early when needed
  - PCI: brcmstb: Fix potential premature regulator disabling
  - PCI: brcmstb: Use internal register to change link capability
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing
  - drm/msm/dpu: don't use active in atomic_check()
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
  - PCI: Use downstream bridges for distributing resources
  - drm: xlnx: zynqmp: Fix max dma segment size
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly
  - drm/dp_mst: Fix drm RAD print
  - drm/bridge: ti-sn65dsi86: Fix multiple instances
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
  - ALSA: hda/realtek: Always honor no_shutup_pins
  - dt-bindings: vendor-prefixes: add GOcontroll
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
  - ASoC: cs35l41: check the return value from spi_setup()
  - platform/x86: dell-ddv: Fix temperature calculation
  - media: platform: allgro-dvt: unregister v4l2_device on the error path
  - media: verisilicon: HEVC: Initialize start_bit field
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
  - x86/traps: Make exc_double_fault() consistently noreturn
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
  - PM: sleep: Fix handling devices with direct_complete set on errors
  - EDAC/ie31200: Fix the error path order of ie31200_init()
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
  - selinux: Chain up tool resolving errors in install_policy.sh
  - RISC-V: KVM: Disable the kernel perf counter during configure
  - PM: sleep: Adjust check before setting power.must_resume
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
  - x86/platform: Only allow CONFIG_EISA for 32-bit
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
  - x86/fpu: Fix guest FPU state buffer allocation size
  - smack: dont compile ipv6 code unless ipv6 is configured
  - cpufreq: scpi: compare kHz instead of Hz
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
  - watch_queue: fix pipe accounting mismatch
  - ub: ub_fwctl: support ummu data processing
  - ub: ub_fwctl: query the MSG queue information and entry details within UB.
  - ub: ub_fwctl: support querying SCC and io_die related information.
  - ub: ub_fwctl: support querying UB link trace information.
  - ub: ub_fwctl: Support Dump register.
  - ub: ub_fwctl: supports querying and configuring some scattered registers.
  - ub: ub_fwctl: supports querying TP, BA related register information
  - dma-mapping: benchmark: add support for UB devices
  - ub: ub_fwctl: supports querying NL, TA, DL related register information
  - ub: ub_fwctl: Add some simple common framework functions
  - ub: ub_fwctl: Add the ub_fwctl driver and its basic features.
  - mm/thp: Add a new sysfs knob for zero COW
  - !18803  arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - net: unic: support querying and configuring queue parameters.
  - net: unic: support querying and configuring the number of queues.
  - net: unic: support querying and configuring simple RSS.
  - net: unic: support querying and configuring promisc.
  - net: unic: support querying and configuring MTU.
  - net: unic: support querying and configuring FEC parameters.
  - net: unic: add fec statistic support
  - net: unic: add rack ip for unic
  - net: unic: add io basic Rx/Tx functionality for unic
  - net: unic: add support of unic driver for ub network
  - !18914  misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - !18915  scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - !18916  software node: Correct a OOB check in software_node_get_reference_args()
  - !18917  KVM: x86: use array_index_nospec with indices that come from guest
  - !18877 iommu/ummu: Implement IOMMU ops and advanced capabilities.
  - mm/swap: get the swap device offset directly
  - mm: add nr_free_highatomic in show_free_areas
  - ub:ubus: reserve space for ub subsystem related structure
  - ub:hisi-ubus: Support UBUS configure EID-UPI table
  - ub:hisi-ubus: Support UBUS vdm entity enable message
  - ub:hisi-ubus: Support for MSGQ's debugging functionality
  - urma: implement ubcore sysfs interface and device management
  - mm: migrate: add isolate_folio_to_list()
  - urma: implement ubcore basic connection and bonding support
  - urma: add network framework facilities for ubcore.
  - urma: add tp table support and related cmd header for ubcore.
  - CCA: unmap state2 range can block to fix soft lockup while destroy realm
  - config: enable config for PLR
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID
  - perf: Fix tt_core mismatch over PG CPU
  - iommu/ummu: Add UMMU trace log
  - iommu/ummu: Support UMMU identity mapping
  - iommu/ummu: Add UB Memory support
  - iommu/ummu: Support UMMU iopf capability
  - iommu/ummu: Support UMMU nested mode
  - iommu/ummu: Add SVA API support to UMMU driver
  - iommu/ummu: Implement iommu_ops and iommu_domain_ops for UMMU driver
  - iommu/ummu: Implement domain and core ops in logic UMMU framework
  - iommu/ummu: Implement MPAM for QoS
  - iommu/ummu: Support UMMU attribute show and store operations
  - iommu/ummu: Implement IOMMU ops forwarding in logic UMMU framework
  - iommu/ummu: Support UMMU page table management
  - iommu/ummu: Introduce logic UMMU framework
  - iommu/ummu: Add UMMU permission queue
  - iommu/ummu: Add grant and ungrant operations for permission table
  - iommu/ummu: Add UMMU permission table memory management
  - iommu/ummu: Add UMMU private implementation
  - iommu/ummu: Add manager for UMMU permission table
  - iommu/ummu: Add tct/tect ops for configuration table
  - iommu/ummu: Support UMMU configuration table management
  - ub: ubase: Support querying dev caps.
  - ub: ubase: Supports the query of UBCL config.
  - ub: ubase: add function that query aeq/ceq/tp/tpg context
  - KVM: x86: use array_index_nospec with indices that come from guest
  - software node: Correct a OOB check in software_node_get_reference_args()
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
  - mfs: tool: Add mfs user space tool demo
  - mfs: Optimize mfs syncer process and metadata ops
  - mfs: enable MFS
  - MAINTAINERS: Add maintainer for mfs
  - mfs: Add MFS documentation
  - mfs: Add tracepoint for MFS
  - mfs: Add user command for handling events
  - mfs: Add communication devie and event acquisition operations
  - mfs: Add basic events framework
  - mfs: Add basic cache framework: check method and control structure
  - mfs: Add basic data operation for MFS
  - mfs: Add basic metadata operation for MFS
  - mfs: implement the mount procedure
  - mfs: Initialize mfs module
  - platform/x86/intel: power-domains: Add Clearwater Forest support
  - platform/x86/intel/tpmi/plr: Fix output in plr_print_bits()
  - platform/x86/intel/tpmi/plr: Add support for the plr mailbox
  - platform/x86/intel/tpmi: Add new auxiliary driver for performance limits
  - platform/x86/intel: TPMI domain id and CPU mapping
  - platform/x86/intel/tpmi: Add API to get debugfs root
  - platform/x86/intel/tpmi: Add support for performance limit reasons
  - batman-adv: Switch to linux/array_size.h
  - ub:hisi-ubus: Support MSGQ queue exception handling
  - ub:hisi-ubus: Support for processing CQ request messages
  - ub:hisi-ubus: Provide callback functions for message devices
  - ub:hisi-ubus: Support for MSGQ channel processing in SQ and CQ
  - ub:hisi-ubus: Support for hisi MSGQ framework
  - ub:hisi-ubus: Support UBUS local RAS interfaces
  - ub:hisi-ubus: Support UBUS vdm pue/ue register and release
  - ub:hisi-ubus: Support UBUS vendor defined message framework
  - ub:hisi-ubus: Add HiSilicon ubus driver framework
  - drm/amdgpu: csa unmap use uninterruptible lock
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies
  - ASoC: codec: wcd9335: Convert to GPIO descriptors
  - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
  - mm: introduce memalloc_flags_{save,restore}
  - ub: ubase: Added debug information query function for FST/FVT/RQMT entries
  - ub: ubase: support debugfs for active dev stats.
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  - bpf: Disable migration in nf_hook_run_bpf().
  - gmem: fix some warnings
  - parisc: Revise __get_user() to probe user read access
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting
  - drm/amd/display: Avoid a NULL pointer dereference
  - wifi: wilc1000: avoid buffer overflow in WID string configuration
  - eventpoll: don't decrement ep refcount while still holding the ep mutex
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  - f2fs: fix to do sanity check on ino and xnid
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  - aoe: clean device rq_list in aoedev_downdev()
  - arm64/mpam: Add quirk for L3 CPBM validity check
  - fs/resctrl: Fix the L3 CMAX conversion mechanism
  - kernel.h: Move ARRAY_SIZE() to a separate header
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  - exfat: fix double free in delayed_free
  - arm64/mpam: Add quirk to retrigger L3 CSU monitor
  - configs: Add Zhaoxin GPIO pinctrl for kh-50000 in openeuler_config
  - pinctrl: Zhaoxin: Add KH-50000 support
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
  - iio: imu: bno055: fix OOB access of hw_xlate array
  - s390/ism: fix concurrency management in ism_cmd()
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  - btrfs: avoid NULL pointer dereference if no valid csum tree
  - fs/ntfs3: handle hdr_first_de() return value
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  - net: usb: aqc111: debug info before sanitation
  - net: usb: aqc111: fix error handling of usbnet read calls
  - coresight: fix indentation error in cscfg_remove_owned_csdev_configs()
  - coresight: holding cscfg_csdev_lock while removing cscfg from csdev
  - coresight: change coresight_device lock type to raw_spinlock_t
  - hfs: fix slab-out-of-bounds in hfs_bnode_read()
  - jfs: Regular file corruption check
  - net: wangxun: ngbe: add support for wangxun 1G
  - RDMA/bnxt_re: Fix error recovery sequence
  - bnxt_en: Fix ethtool -d byte order for 32-bit values
  - bnxt_en: Fix DCB ETS validation
  - Fix kabi for CWF PMU support
  - crypto: sm4 - Refactor mode handling and optimize performance
  - i2c: zhaoxin: Enhancements and Modifications to SMBus Driver
  - ACPI: processor: idle: Set timer broadcast state on C3 for KH-50000
  - hwmon: zhaoxin-cputemp: Update for KH-50000
  - perf/zhaoxin/core: Tailor FMS for KH-50000
  - crypto: sm3 - Refactor code and harden security
  - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
  - perf/x86: Print PMU counters bitmap in x86_pmu_show_pmu_cap()
  - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
  - KVM: x86/pmu: Manipulate FIXED_CTR_CTRL MSR with macros
  - KVM: x86/pmu: Change ambiguous _mask suffix to _rsvd in kvm_pmu
  - KVM: x86/pmu: Add common define to capture fixed counters offset
  - perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - tools/include: Sync x86 headers with the kernel sources
  - perf/x86/intel: Fix incorrect MSR index calculations in intel_pmu_config_acr()
  - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
  - perf/x86/intel: Fix event constraints for LNC
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  - perf vendor events: Add Clearwaterforest events
  - perf/x86/intel/uncore: Support customized MMIO map size
  - perf/x86/intel/uncore: Support MSR portal for discovery tables
  - perf/x86/intel/uncore: Add Clearwater Forest support
  - perf/uapi: Clean up <uapi/linux/perf_event.h> a bit
  - tools headers: Update the uapi/linux/perf_event.h copy with the kernel sources
  - tools/include: Sync uapi/linux/perf.h with the kernel sources
  - perf/x86: Optimize the is_x86_event
  - perf/x86/intel: Check the X86 leader for ACR group
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group
  - perf/x86/intel: Parse CPUID archPerfmonExt leaves for non-hybrid CPUs
  - perf/x86/intel: Add PMU support for Clearwater Forest
  - perf/x86/intel: Don't clear perf metrics overflow bit unconditionally
  - perf/x86/intel: Support auto counter reload
  - perf/x86/intel: Add CPUID enumeration for the auto counter reload
  - perf: Extend the bit width of the arch-specific flag
  - perf/x86/intel: Track the num of events needs late setup
  - perf/x86: Add dynamic constraint
  - perf: Extend per event callchain limit to branch stack
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
  - perf/x86/intel: Support PEBS counters snapshotting
  - Optimize Zhaoxin CPU Temp Monitoring During Suspend/Resume
  - Optimize VIA CPU Temp Monitoring During Suspend/Resume
  - perf/x86/intel: Support RDPMC metrics clear mode
  - perf/x86/intel/ds: Add PEBS format 6
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS
  - perf/x86/intel/ds: Factor out functions for PEBS records processing
  - perf/x86/intel/ds: Clarify adaptive PEBS processing
  - perf/x86/intel: Support Perfmon MSRs aliasing
  - perf/x86/intel: Support PERFEVTSEL extension
  - perf/x86: Add config_mask to represent EVENTSEL bitmask
  - perf/x86/intel: Support new data source for Lunar Lake
  - perf/x86/intel: Rename model-specific pebs_latency_data functions
  - perf/x86: Add Lunar Lake and Arrow Lake support
  - perf/x86: Support counter mask
  - crypto: ccp: add ccp-mdev functionality to the ccp module.
  - usb: renesas_usbhs: Reorder clock handling and power management in probe
  - perf/x86/intel: Support the PEBS event mask
  - tools headers UAPI: Sync include/uapi/linux/perf_event.h header with the kernel
  - perf/x86/intel/uncore: Support more units on Granite Rapids
  - perf/x86/intel/uncore: Clean up func_id
  - powerpc/eeh: Make EEH driver device hotplug safe
  - mm: Use pr_warn_once() for min_free_kbytes warning
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
  - sctp: linearize cloned gso packets in sctp_rcv
  - net/smc: fix UAF on smcsk after smc_listen_out()


author: Li Nan <linan122@huawei.com> - 6.6.0-121.0.0.111
changelog:
  - !19291  usbnet: Fix using smp_processor_id() in preemptible code warnings
  - !19191  Fix CVE-2025-40200
  - !19303  pid: Add a judgment for ns null in pid_nr_ns
  - !19282  fix cves
  - !19211  ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - !19175 [OLK-6.6] Fix CVE-2025-38666
  - !18496 [OLK-6.6] Fix CVE-2025-22107
  - !18029 [OLK-6.6] Fix CVE-2025-37892
  - !19151 [OLK-6.6] Fix CVE-2025-40055
  - !19131 [OLK-6.6] Fix CVE-2025-40012
  - !19125 [OLK-6.6] Fix CVE-2025-39692
  - !19124 [OLK-6.6] Fix CVE-2025-39694
  - !19133 [OLK-6.6] Fix CVE-2025-40082
  - !19118 [OLK-6.6] Fix CVE-2025-39703
  - !19113 [OLK-6.6] Fix CVE-2025-39938
  - !19111 [OLK-6.6] Fix CVE-2025-40043
  - !19100 obmm: Ownership Based Memory Management framework
  - pid: Add a judgment for ns null in pid_nr_ns
  - !19285  xsched: XCU Partition
  - !19293  sched/rt: Fix race in push_rt_task
  - !19294  dm-stripe: fix a possible integer overflow
  - !19278 ub: ubase: Improve performance and fix some bug
  - dm-stripe: fix a possible integer overflow
  - sched/rt: Fix race in push_rt_task
  - usbnet: Fix using smp_processor_id() in preemptible code warnings
  - xsched: move stream_lock into xsched_vsm_add_tail() to avoid sleeping in atomic context
  - xsched: rename vstream->id to vstream->sq_id
  - xsched: add null check for sched in xsched_xse_set_class
  - xsched: modify the logic for inc and dec the count value
  - xsched: replace hard-coded numeric values
  - xsched: unify root detection logic for cgroups
  - xsched: remove parent->lock and rely on cgroup_mutex for shares update
  - xsched: avoid sleeping while holding spinlock in xcu_move_task()
  - xsched: add missing spin_unlock() in xcu_move_task() error path
  - xsched: enforce valid xsched scheduler config dependencies
  - xsched: unify log prefix format and remove duplicated prefix macros
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
  - mm: zswap: move allocations during CPU init outside the lock
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug
  - mm/zswap: change per-cpu mutex and buffer to per-acomp_ctx
  - mm/hugetlb: unshare page tables during VMA split, not before
  - !19194  ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - !19195  iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - !19273  net/ip6_tunnel: Prevent perpetual tunnel growth
  - !19272  tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19274  netfilter: nft_objref: validate objref and objrefmap expressions
  - !19052  arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - !19182  ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19179  x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - !19178  fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - !19177  ACPICA: fix acpi parse and parseext cache leaks
  - !19176  crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - ub: ubase: change cmdq/mbx timeout val & fix spell error
  - ub: ubase: adapt to response message structure change for ctrlq sl query
  - net: unic: Fix UE deactivate message cleaning
  - net: unic: Use copy instead of ummu map in tx
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - net/ip6_tunnel: Prevent perpetual tunnel growth
  - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  - !19257  init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - obmm: Add resource management support for imported memory
  - obmm: Add sysfs interface for configuration and monitoring
  - obmm: Add low memory management support
  - obmm: Add ownership management and transfer mechanisms
  - obmm: Add mmap support for shared memory regions
  - obmm: Add shared memory device interface
  - obmm: Add pre-import support for performance optimization
  - obmm: Add memory region import functionality
  - obmm: Add address validation and checking
  - obmm: Add user address export support
  - obmm: Add memory region export functionality
  - obmm: Implement memory pool allocator
  - obmm: Add continuous memory allocator for OBMM framework
  - obmm: Add cache maintenance helpers for inter-node consistency
  - obmm: Add region definitions and core data structures
  - obmm: Add Ownership Based Memory Management framework
  - ub:hisi-ubus: Support for ub memory decoder ras handle
  - ub:hisi-ubus: Support for UB Memory Decoder Initialization
  - ub:ubus: Support for UB Memory Decoder general layer implementation
  - !19227  bpf: Avoid RCU context warning when unpinning htab with internal structs
  - !18830  mm: swap: check for stable address space before operating on the VMA
  - init/Kconfig: Move ARCH_SUPPORTS_SCHED_SOFT_QUOTA to drop CGROUPS dependency
  - !19165 Documentation: Add opensource document for ubase&unic&ubl
  - !19243 Revert "net: hns3: add support for queue bonding mode of flow director"
  - !19115  nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - !19222  sctp: Fix MAC comparison to be constant-time
  - !19223  net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - !19224  bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - !19226  sunrpc: fix null pointer dereference on zero-length checksum
  - Revert "net: hns3: add support for queue bonding mode of flow director"
  - Revert "net: hns3: add queue bonding mode support for VF"
  - Revert "net: hns3: refactor the debugfs for dumping FD tcam"
  - Revert "net: hns3: correct the logic of hclge_sync_vf_qb_mode()"
  - Revert "net: hns3: allocate fd counter for queue bonding"
  - !19166 [OLK-6.6][linux-6.6.y sync] Backport 6.6.89-6.6.90 LTS Patches
  - !19116 Fix SPI registration failure logging level
  - !19216  net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - Fix SPI registration failure logging level
  - !19072 [OLK-6.6] Fix CVE-2025-39827
  - !18647 [OLK-6.6] Fix CVE-2025-38729
  - !19117 [OLK-6.6] Fix CVE-2025-40088
  - !19114 [OLK-6.6] Fix CVE-2025-40084
  - !19048 [OLK-6.6] Fix CVE-2025-39839
  - !18615 [OLK-6.6] Fix CVE-2025-39737
  - !18791 【OLK-6.6】fix CVE-2025-39736
  - !18644 [OLK-6.6] Fix CVE-2025-38717
  - !18653 [OLK-6.6] Fix CVE-2025-38705
  - !18780 【OLK-6.6】fix  CVE-2025-38712
  - !18613 [OLK-6.6] Fix CVE-2025-38713
  - !18632 [OLK-6.6] Fix CVE-2025-38714
  - !18861 [OLK-6.6] Fix CVE-2025-38697
  - !18345 [OLK-6.6] Fix CVE-2025-38663
  - !18948 [OLK-6.6] Fix CVE-2025-38105
  - !18661 [OLK-6.6] Fix CVE-2025-39790
  - !18867 [OLK-6.6] Fix CVE-2025-39766
  - !18636 [OLK-6.6]Fix CVE-2025-39751
  - !19110  CVE-2025-40198
  - !19212  CVE-2025-40179
  - !19057  blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - !19213  Fix CVE-2025-39964
  - !19189  KVM: arm64: ipiv: change declaration argument
  - bpf: Avoid RCU context warning when unpinning htab with internal structs
  - sunrpc: fix null pointer dereference on zero-length checksum
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
  - sctp: Fix MAC comparison to be constant-time
  - !19214 ub: udma: recent bugfix for udma.
  - !19209  Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - !19193  crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - !19206  net: dlink: handle copy_thresh allocation failure
  - !19207  net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
  - ub: ubase: Introduces the functions and data structures exposed by the ubase driver
  - ub: ubase: Add ubase opensource document
  - net: unic: Add a doc for unic driver
  - ub: udma: Resolve issues related to stream logout and interrupt lock.
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
  - ext4: align max orphan file size with e2fsprogs limit
  - ext4: free orphan info with kvfree
  - ext4: verify orphan file size is not too big
  - ext4: use kmalloc_array() for array space allocation
  - ub: udma: reset and segment permission issues are resolved.
  - !19203  Fix CVE-2025-40202
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
  - net: dlink: handle copy_thresh allocation failure
  - spi: tegra114: Use value to check for invalid delays
  - platform/x86/amd: pmc: Clear metrics table at start of cycle
  - dm: fix copying after src array boundaries
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
  - drivers: base: handle module_kobject creation
  - kernel: globalize lookup_or_create_module_kobject()
  - kernel: param: rename locate_module_kobject
  - xhci: split free interrupter into separate remove and free parts
  - xhci: Clean up stale comment on ERST_SIZE macro
  - xhci: Use more than one Event Ring segment
  - xhci: Set DESI bits in ERDP register correctly
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
  - ARM: dts: opos6ul: add ksz8081 phy properties
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
  - firmware: arm_scmi: Balance device refcount when destroying devices
  - sch_htb: make htb_qlen_notify() idempotent
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
  - ASoC: Use of_property_read_bool()
  - net: vertexcom: mse102x: Fix RX error handling
  - net: vertexcom: mse102x: Add range check for CMD_RTS
  - net: vertexcom: mse102x: Fix LEN_MASK
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
  - net: fec: ERR007885 Workaround for conventional TX
  - net: ipv6: fix UDPv6 GSO segmentation with NAT
  - net: dsa: felix: fix broken taprio gate states after clock jump
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
  - net: dlink: Correct endianness handling of led_mode
  - nvme-pci: fix queue unquiesce check on slot_reset
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - pds_core: make pdsc_auxbus_dev_del() void
  - pds_core: delete VF dev on reset
  - pds_core: check health in devcmd wait
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
  - !19190  Revert "ipmi: fix msg stack when IPMI is disconnected"
  - !19167  drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - ipmi: Fix handling of messages with provided receive message pointer
  - ipmi: Rework user message limit handling
  - !19134  Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - !19119  dm: fix NULL pointer dereference in __dm_suspend()
  - !19137  ext4: guard against EA inode refcount underflow in xattr update
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  - net/mlx5: E-switch, Fix error handling for enabling roce
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID
  - powerpc/boot: Fix dash warning
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
  - powerpc/boot: Check for ld-option support
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
  - Squashfs: reject negative file sizes in squashfs_read_inode()
  - Squashfs: add additional inode sanity checking
  - Revert "ipmi: fix msg stack when IPMI is disconnected"
  - KVM: arm64: ipiv: change declaration argument
  - !19030  cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  - !19045 net: fix the compile problem introduced by AF_UB
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  - ACPICA: fix acpi parse and parseext cache leaks
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: appletalk: Fix use-after-free in AARP proxy probe
  - net: ubl: Add a doc for ubl module
  - !19161 uburma: add tp_type in urma ioctl operation.
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
  - Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
  - selftests/bpf: validate that tail call invalidates packet pointers
  - selftests/bpf: freplace tests for tracking of changes_packet_data
  - cpufreq: Fix setting policy limits when frequency tables are used
  - cpufreq: Avoid using inconsistent policy->min and policy->max
  - smb: client: fix zero length for mkdir POSIX create context
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  - dm: always update the array size in realloc_argv on success
  - dm-integrity: fix a warning on invalid table line
  - dm-bufio: don't schedule in atomic context
  - tracing: Do not take trace_event_sem in print_event_fields()
  - spi: tegra114: Don't fail set_cs_timing when delays are zero
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
  - mm/memblock: repeat setting reserved region nid if array is doubled
  - mm/memblock: pass size instead of end to memblock_set_node()
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
  - i2c: imx-lpi2c: Fix clock count when probe defers
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
  - EDAC/altera: Test the correct error reg offset
  - drm/fdinfo: Protect against driver unbind
  - btrfs: fix COW handling in run_delalloc_nocow()
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
  - !19143 [OLK-6.6][linux-6.6.y sync] Backport 6.6.88-6.6.89 LTS Patches
  - uburma: add tp_type in urma ioctl operation.
  - !19132  IPIV: fix bug in live migration
  - ocfs2: fix double free in user_cluster_connect()
  - !17056 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.68-6.6.69 LTS Conflicts Patches
  - !18479 [OLK-6.6] xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - !19007  uio_hv_generic: Let userspace take care of interrupt mask
  - ACPI: PPTT: Fix processor subtable walk
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
  - ata: libata-scsi: Fix CDL control
  - net: fix the compile problem introduced by AF_UB
  - objtool: Silence more KCOV warnings, part 2
  - objtool: Ignore end-of-section jumps for KCOV/GCOV
  - nvme: fixup scan failure for non-ANA multipath controllers
  - MIPS: cm: Fix warning if MIPS_CM is disabled
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
  - comedi: jr3_pci: Fix synchronous deletion of timer
  - driver core: introduce device_set_driver() helper
  - x86/pvh: Call C code via the kernel virtual mapping
  - md/raid1: Add check for missing source disk in process_checks()
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
  - ubsan: Fix panic from test_ubsan_out_of_bounds
  - spi: tegra210-quad: add rate limiting and simplify timeout error message
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
  - loop: aio inherit the ioprio of original request
  - riscv: Provide all alternative macros all the time
  - iomap: skip unnecessary ifs_block_is_uptodate check
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
  - scsi: pm80xx: Set phy_attached to zero when device is gone
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
  - ext4: make block validity check resistent to sb bh corruption
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
  - timekeeping: Add a lockdep override in tick_freeze()
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
  - nvmet-fc: put ref when assoc->del_work is already scheduled
  - nvmet-fc: take tgtport reference only once
  - x86/bugs: Don't fill RSB on context switch with eIBRS
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
  - x86/bugs: Use SBPB in write_ibpb() if applicable
  - selftests/mincore: Allow read-ahead pages to reach the end of the file
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
  - objtool: Stop UNRET validation on UD2
  - nvme: multipath: fix return value of nvme_available_path
  - nvme: re-read ANA log page after ns scan completes
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
  - nvme: requeue namespace scan on missed AENs
  - xen: Change xen-acpi-processor dom0 dependency
  - selftests: ublk: fix test_stripe_04
  - udmabuf: fix a buf size overflow issue during udmabuf creation
  - KVM: s390: Don't use %pK through debug printing
  - KVM: s390: Don't use %pK through tracepoints
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
  - io_uring: always do atomic put from iowq
  - rtc: pcf85063: do a SW reset if POR failed
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU
  - ntb: reduce stack usage in idt_scan_mws
  - objtool, lkdtm: Obfuscate the do_nothing() pointer
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
  - objtool, panic: Disable SMAP in __stack_chk_fail()
  - objtool: Silence more KCOV warnings
  - thunderbolt: Scan retimers after device router has been enumerated
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
  - usb: host: max3421-hcd: Add missing spi_device_id table
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage
  - bpf: bpftool: Setting error code in do_loader()
  - s390/tty: Fix a potential memory leak bug
  - s390/sclp: Add check for get_zeroed_page()
  - parisc: PDT: Fix missing prototype warning
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
  - crypto: ccp - Add support for PCI device 0x1134
  - MIPS: cm: Detect CM quirks from device tree
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
  - USB: wdm: add annotation
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  - USB: wdm: handle IO errors in wdm_wwan_port_start
  - USB: VLI disk crashes if LPM is used
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
  - usb: dwc3: xilinx: Prevent spike in reset signal
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
  - usb: cdns3: Fix deadlock when using NCM gadget
  - USB: serial: simple: add OWON HDS200 series oscilloscope support
  - USB: serial: option: add Sierra Wireless EM9291
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
  - serial: sifive: lock port in startup()/shutdown() callbacks
  - serial: msm: Configure correct working mode before starting earlycon
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
  - char: misc: register chrdev region with all possible minors
  - KVM: x86: Explicitly treat routing entry type changes as changes
  - mei: me: add panther lake H DID
  - scsi: Improve CDL control
  - USB: storage: quirk for ADATA Portable HDD CH94
  - ata: libata-scsi: Fix ata_msense_control_ata_feature()
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
  - ata: libata-scsi: Improve CDL control
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
  - KVM: SVM: Allocate IR data using atomic allocation
  - io_uring: fix 'sync' handling of io_fallback_tw()
  - LoongArch: Remove a bogus reference to ZONE_DMA
  - drm/amd/display: Force full update in gpu reset
  - drm/amd/display: Fix gpu reset in multidisplay config
  - net: phy: microchip: force IRQ polling mode for lan88xx
  - net: selftests: initialize TCP header and skb payload with zero
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible
  - virtio_console: fix missing byte order handling for cols and rows
  - LoongArch: Make do_xyz() exception handlers more robust
  - LoongArch: Make regs_irqs_disabled() more clear
  - LoongArch: Select ARCH_USE_MEMTEST
  - splice: remove duplicate noinline from pipe_clear_nowait
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
  - scsi: core: Clear flags for scsi_cmnd that did not complete
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  - dma/contiguous: avoid warning about unused size_bytes
  - ceph: Fix incorrect flush end position calculation
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
  - of: resolver: Simplify of_resolve_phandles() using __free()
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
  - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux
  - clk: renesas: rzg2l: Refactor SD mux driver
  - clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header
  - clk: renesas: rzg2l: Add struct clk_hw_data
  - clk: renesas: rzg2l: Use u32 for flag and mux_flags
  - arm64: tegra: Remove the Orin NX/Nano suspend key
  - iio: adc: ad7768-1: Fix conversion result sign
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  - ASoC: qcom: Fix trivial code style issues
  - ASoC: qcom: lpass: Make asoc_qcom_lpass_cpu_platform_remove() return void
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c
  - auxdisplay: hd44780: Convert to platform remove callback returning void
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
  - soc: qcom: ice: introduce devm_of_qcom_ice_get
  - module: sign with sha512 instead of sha1 by default
  - !18797 [OLK-6.6] Fix CVE-2025-38331
  - !18978 [OLK-6.6][linux-6.6.y sync] Backport 6.6.87-6.6.88 LTS Patches
  - !19141  crash: fix crashkernel resource shrink
  - !19136  ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !18976 ubagg: implement ubagg module with ioctl interface and topology management
  - crash: fix crashkernel resource shrink
  - !19139 ub: ubase: Fix CTRLQ init process
  - !18998 uburma: implement jetty linking features.
  - ub: ubase: Fix CTRLQ init process
  - ext4: guard against EA inode refcount underflow in xattr update
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  - !19123 ub: udma: Support udma basic transaction operations and advanced features.
  - !19122  crypto: rng - Ensure set_ent is always present
  - !19121 ub: ubase: Do some bugfix about cmdq/ctrlq message and debugfs
  - net: rose: fix a typo in rose_clear_routes()
  - urma: add ubagg ioctl interface and topology management
  - ub: udma: jetty and rct support the hugepage buffer.
  - ub: udma: Support 2M hugepage function.
  - ub: udma: Support query ub memory info.
  - ub: udma: Support query resource ratio.
  - ub: udma: Support query entity information.
  - ub: udma: Support create and destroy stars jfc.
  - ub: udma: Support create and destroy stars jfs.
  - ub: udma: Support tp context inquiry.
  - ub: udma: Support entity index inquiry.
  - ub: udma: Support device status inquiry.
  - ub: udma: Support flush jfs and jetty.
  - ub: udma: Support destroy jfs and jetty batch.
  - ub: udma: Support bind and unbind jetty.
  - ub: udma: Support dump ce aux info.
  - ub: udma: Support dump ae aux info.
  - ub: udma: Support query NPU info.
  - ub: udma: Support deactivate tp.
  - ub: udma: Support active tp.
  - ub: udma: Support get tp list.
  - ub: udma: Support rearm jfc and clean jfc.
  - ub: udma: Support poll jfc.
  - ub: udma: Support post jetty work request.
  - ub: udma: Support post jfr work request.
  - ub: udma: Support post jfs work request.
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free
  - net: nfc: nci: Add parameter validation for packet data
  - !19103  Fix CVE-2025-40123
  - !19082 ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - KVM: arm64: ipiv: fix bug in live migration
  - KVM: arm64: ipiv: Change parameter from vcpu to kvm
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uburma: implement comprehensive jetty linking and transport features
  - uburma: implement jetty resource control and command structures
  - uburma: add uburma command and user object framework headers
  - uburma: introduce uburma basic types and helper functions
  - !19120  KVM: arm64: Fix access_actlr() build warning
  - !18952 ubcore: implement memory and netlink features.
  - ub: ubase: Fix the lose of HIMAC reset.
  - ub: ubase: flush the work queue.
  - net: unic: Fix lose vport_ctx and vport_buf information query in debugfs
  - !19091 ub: ub_fwctl: Release rpc_out when kernel state return error
  - net/smc: fix warning in smc_rx_splice() when calling get_page()
  - ub: ubase: Fix link status timestamp information
  - net: unic: Fix configure coal parameters without deactivate
  - ub: ubase: Fix CTRLQ white list
  - ub: ubase: Optimization of ubase_ctrlq_send_msg interface parameters
  - ub: ubase: Fix verification to ctrlq message seq
  - net: unic: Fix the ethtool stats and basic capability information query interface
  - ub: ubase: add CMDQ&CTRLQ compatibility code
  - ub: ubase: Fix priqos infomaton interface functions to query and check sl_bitmap
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
  - s390/sclp: Fix SCCB present check
  - net: rose: include node references in rose_neigh refcount
  - net: rose: convert 'use' field to refcount_t
  - !19058 ub: udma: udma driver TA layer resource control operation.
  - net: rose: split remove and free operations in rose_remove_neigh()
  - crypto: rng - Ensure set_ent is always present
  - KVM: arm64: Fix access_actlr() build warning
  - dm: fix NULL pointer dereference in __dm_suspend()
  - net, hsr: reject HSR frame if skb can't hold tag
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
  - ksmbd: transport_ipc: validate payload size before reading handle
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
  - ext4: fix string copying in parse_apply_sb_mount_options()
  - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  - !19081 ub:ubus: Fix X86 build error
  - ub: ub_fwctl: Release rpc_out when kernel state return error
  - fwctl:Change the CONFIG_FWCTL in the config options to m
  - selftests/bpf: Add test case for different expected_attach_type
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - ubagg: implement ubagg basic infrastructure components
  - !19093  some minor bugfix about zcopy
  - !19087 v2  Fix bugs
  - !19064 iommu/ummu:  Bugfix of ummu
  - zcopy: Remove the dump_pagetable interface
  - zcopy: Fix the incorrect mapping size passed in attach_pte_range
  - ub: udma: Add and remove jetty to jetty group.
  - ub: udma: Support import and unimport jfr and jetty.
  - iommu/ummu: Fix builds under different kconfigs
  - xcall2.0: Fix stack-out-of-bounds bug in xcall_write()
  - xcall2.0: Fix the semantic changes in xcall_enable
  - xcall2.0: Fix module unload issue by fixing refcount
  - !19071 net:nebula-matrix:fix compile err
  - !19080  KVM: arm64: ipiv: Fix compilation warning
  - !19070  xsched: XCU Partition
  - !18995  CVE-2025-40169
  - !19028 mm/slab: make __free(kfree) accept error pointers
  - ub:ubus: call ub_host_probe inside register_ub_manage_subsystem_ops
  - ub:ubus: Fix X86 build error
  - KVM: arm64: ipiv: Fix compilation warning
  - !19069  mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - !19066  arch_numa: make node_reclaim_distance_setup static
  - !19053  blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - net:nebula-matrix:fix compile err
  - xsched: Add support for CFS quota for cgroups
  - xsched: Add XCU control group implementation and its backend in xsched CFS
  - xsched: Add xsched CFS class
  - xsched: Add xsched RT class
  - xsched: Add basic scheduler core support
  - xsched: Introduce vstream management
  - xcu: Add base NPU driver support
  - xsched: Add base vstream support
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area
  - ubcore: add ubcore_umem and ubcore_tp implementations
  - ubcore: implement ubcore connection management and messaging feature.
  - ubcore: add segment management support to ubcore module.
  - ubcore: add genl, netlink and vtp support to ubcore module.
  - arch_numa: make node_reclaim_distance_setup static
  - ub: udma: Support modify jfc.
  - ub: udma: Support modify jfr.
  - ub: udma: Support modify jetty.
  - ub: udma: Support modify jfs.
  - ub: udma: Support destroy jetty group.
  - ub: udma: Support create jetty group.
  - ub: udma: Support destroy jetty.
  - ub: udma: Support create jetty.
  - ub: udma: Support destroy jfc.
  - ub: udma: Support create jfc.
  - ub: udma: Support destroy jfr.
  - ub: udma: Support create jfr.
  - ub: udma: Support destroy jfs.
  - ub: udma: Support create jfs.
  - ub: udma: Support query table item from hw.
  - ub: udma: Support query jfr context from hw.
  - ub: udma: Support query jfs and jetty context from hw.
  - iommu/ummu: Fix 2P virtualization error
  - iommu/ummu: Fix ubmem unmap return value error
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
  - blk-ioinf: fix default weight being reset to 0 for non-root cgroups
  - arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
  - batman-adv: fix OOB read/write in network-coding decode
  - mm/slab: make __free(kfree) accept error pointers
  - Revert "mm/slab: make __free(kfree) accept error pointers"
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
  - md/md-bitmap: fix GPF in bitmap_get_stats()
  - igc: fix lock order in igc_ptp_reset
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - xen/x86: fix initial memory balloon target
  - pwm: mediatek: Ensure to disable clocks in error path
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
  - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
  - btrfs: fix the length of reserved qgroup to free
  - MIPS: ds1287: Match ds1287_set_base_clock() function types
  - MIPS: cevt-ds1287: Add missing ds1287.h include
  - MIPS: dec: Declare which_prom() as static
  - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
  - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
  - sign-file,extract-cert: move common SSL helper functions to a header
  - nvmet-fc: Remove unused functions
  - landlock: Add the errata interface
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
  - wifi: rtw89: pci: add pre_deinit to be called after probe complete
  - LoongArch: Eliminate superfluous get_numa_distances_cnt()
  - x86/split_lock: Fix the delayed detection logic
  - x86/xen: fix memblock_reserve() usage on PVH
  - x86/xen: move xen_reserve_extra_memory()
  - Fix mmu notifiers for range-based invalidates
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  - kbuild: Add '-fno-builtin-wcslen'
  - cpufreq: Reference count policy in cpufreq_update_limits()
  - io_uring/net: fix accept multishot handling
  - drm/i915/gvt: fix unterminated-string-initialization warning
  - drm/sti: remove duplicate object names
  - drm/amdgpu/dma_buf: fix page_link check
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  - drm/amd/pm/smu11: Prevent division by zero
  - drm/amd/pm/powerplay: Prevent division by zero
  - drm/amd/pm: Prevent division by zero
  - drm/amd: Handle being compiled without SI or CIK support better
  - drm/msm/a6xx: Fix stale rpmh votes from GPU
  - drm/repaper: fix integer overflows in repeat functions
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
  - perf/x86/intel: Allow to update user space GPRs from PEBS records
  - scsi: ufs: exynos: Ensure consistent phy reference counts
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
  - x86/cpu/amd: Fix workaround for erratum 1054
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches
  - string: Add load_unaligned_zeropad() code path to sized_strscpy()
  - smb3 client: fix open hardlink on deferred close file error
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem
  - riscv: Avoid fortify warning in syscall_get_arguments()
  - ksmbd: fix the warning from __kernel_write_iter
  - ksmbd: Prevent integer overflow in calculation of deadtime
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock()
  - ovl: don't allow datadir only
  - mm: fix apply_to_existing_page_range()
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
  - loop: LOOP_SET_FD: send uevents for partitions
  - loop: properly send KOBJ_CHANGED uevent for disk device
  - crypto: caam/qi - Fix drv_ctx refcount bug
  - btrfs: correctly escape subvol in btrfs_show_options()
  - Bluetooth: vhci: Avoid needless snprintf() calls
  - Bluetooth: l2cap: Process valid commands in too long frame
  - ftrace: fix incorrect hash size in register_ftrace_direct()
  - i2c: atr: Fix wrong include
  - nfs: add missing selections of CONFIG_CRC32
  - asus-laptop: Fix an uninitialized variable
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
  - writeback: fix false warning in inode_to_wb()
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
  - kunit: qemu_configs: SH: Respect kunit cmdline
  - riscv: Properly export reserved regions in /proc/iomem
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
  - net: bridge: switchdev: do not notify new brentries as changed
  - net: b53: enable BPDU reception for management port
  - netlink: specs: rt-link: adjust mctp attribute naming
  - netlink: specs: rt-link: add an attr layer around alt-ifname
  - ata: libata-sata: Save all fields from sense data descriptor
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting
  - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
  - test suite: use %zu to print size_t
  - igc: add lock preventing multiple simultaneous PTM transactions
  - igc: cleanup PTP module if probe fails
  - igc: handle the IGC_PTP_ENABLED flag correctly
  - igc: move ktime snapshot into PTM retry loop
  - igc: increase wait time before retrying PTM
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
  - ASoC: cs42l43: Reset clamp override on jack removal
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
  - ovl: remove unused forward declaration
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  - ASoC: dwc: always enable/disable i2s irqs
  - md/md-bitmap: fix stats collection for external bitmaps
  - md/raid10: fix missing discard IO accounting
  - scsi: iscsi: Fix missing scsi_host_put() in error path
  - wifi: wl1251: fix memory leak in wl1251_tx_work
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
  - Bluetooth: hci_uart: Fix another race during initialization
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
  - selftests: mptcp: fix incorrect fd checks in main_loop
  - selftests: mptcp: close fd_in before returning in main_loop
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  - PCI: Fix reference leak in pci_alloc_child_bus()
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  - of/irq: Fix device node refcount leakages in of_irq_init()
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  - of/irq: Fix device node refcount leakages in of_irq_count()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  - ntb: use 64-bit arithmetic for the MSI doorbell mask
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  - gve: handle overflow when reporting TX consumed descriptors
  - gpio: zynq: Fix wakeup source leaks on device unbind
  - gpio: tegra186: fix resource handling in ACPI probe path
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  - dm-verity: fix prefetch-vs-suspend race
  - dm-integrity: set ti->error on memory allocation failure
  - dm-ebs: fix prefetch-vs-suspend race
  - crypto: ccp - Fix check for the primary ASP device
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  - clk: qcom: gdsc: Release pm subdomains in reverse add order
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  - cifs: fix integer overflow in match_server()
  - cifs: avoid NULL pointer dereference in dbg call
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry
  - x86/xen: fix balloon target initialization for PVH dom0
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  - mm/userfaultfd: fix release hang over concurrent GUP
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - uio_hv_generic: Let userspace take care of interrupt mask
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0
  - mm: fix lazy mmu docs and usage
  - mm: make page_mapped_in_vma() hugetlb walk aware
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  - sparc/mm: disable preemption in lazy mmu mode
  - iommufd: Fix uninitialized rc in iommufd_access_rw()
  - btrfs: zoned: fix zone finishing with missing devices
  - btrfs: zoned: fix zone activation with missing devices
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  - arm64: mm: Correct the update of max_pfn
  - mtd: rawnand: Add status chack in r852_ready()
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  - jbd2: remove wrong sb->s_sequence check
  - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  - i3c: master: svc: Use readsb helper for reading MDB
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions
  - udf: Fix inode_getblk() return value
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit
  - f2fs: fix to avoid atomicity corruption of atomic file
  - ext4: fix off-by-one error in do_split
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  - ASoC: q6apm: add q6apm_get_hw_pointer helper
  - io_uring/kbuf: reject zero sized provided buffers
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  - wifi: mt76: Add check for devm_kstrdup()
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  - mtd: Replace kcalloc() with devm_kcalloc()
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  - mtd: Add check for devm_kcalloc()
  - mptcp: sockopt: fix getting IPV6_V6ONLY
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove
  - media: venus: hfi_parser: add check to avoid out of bound access
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  - media: i2c: ov7251: Set enable GPIO low in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  - media: platform: stm32: Add check for clk_enable()
  - media: visl: Fix ERANGE error when setting enum controls
  - media: streamzap: prevent processing IR data on URB failure
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  - spi: cadence-qspi: Fix probe on AM62A LP SK
  - xenfs/xensyms: respect hypervisor's "next" indication
  - media: siano: Fix error handling in smsdvb_module_init()
  - media: vim2m: print device name after registering device
  - media: venus: hfi: add check to handle incorrect queue size
  - media: venus: hfi: add a check to handle OOB in sfr region
  - media: i2c: adv748x: Fix test pattern selection mask
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0
  - pwm: rcar: Improve register calculation
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  - drm/amdgpu: grab an additional reference on the gang fence v2
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  - drm/amdkfd: debugfs hang_hws skip GPU with MES
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  - drm/amdkfd: clamp queue size to minimum
  - drivers: base: devres: Allow to release group on device release
  - drm/bridge: panel: forbid initializing a panel with unknown connector type
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  - drm: panel-orientation-quirks: Add support for AYANEO 2S
  - drm/amd/display: add workaround flag to link to force FFE preset
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always
  - drm: allow encoder mode_set even when connectors change for crtc
  - Bluetooth: qca: simplify WCN399x NVM loading
  - Bluetooth: hci_uart: fix race during initialization
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
  - net: vlan: don't propagate flags on open
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  - Revert "f2fs: rebuild nat_bits during umount"
  - ext4: protect ext4_release_dquot against freezing
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  - net: sfp: add quirk for 2.5G OEM BX SFP
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  - jfs: add sanity check for agwidth in dbMount
  - fs/jfs: cast inactags to s64 to prevent potential overflow
  - net: usb: asix_devices: add FiberGecko DeviceID
  - scsi: target: spc: Fix RSOC parameter data header size
  - f2fs: don't retry IO for corrupted data scenario
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  - ASoC: amd: yc: update quirk data for new Lenovo model
  - ASoC: amd: Add DMI quirk for ACP6X mic support
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  - media: uvcvideo: Add quirk for Actions UVC05
  - ASoC: fsl_audmix: register card device depends on 'dais' property
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  - ALSA: hda: intel: Fix Optimus when GPU has no sound
  - selftests/bpf: Add tests for rejection of ALU ops with negative offsets
  - bpf: Reject negative offsets for ALU ops
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  - HID: pidff: Add PERMISSIVE_CONTROL quirk
  - HID: pidff: Add MISSING_PBO quirk and its detection
  - HID: pidff: Add MISSING_DELAY quirk and its detection
  - HID: pidff: Do not send effect envelope if it's empty
  - HID: pidff: Convert infinite length from Linux API to PID standard
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault
  - xen/mcelog: Add __nonstring annotations for unterminated strings
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
  - x86/ia32: Leave NULL selector values 0~3 unchanged
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  - umount: Allow superblock owners to force umount
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  - nvmet-fcloop: swap list_add_tail arguments
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  - drm/tests: probe-helper: Fix drm_display_mode memory leak
  - drm/tests: modes: Fix drm_display_mode memory leak
  - drm/tests: cmdline: Fix drm_display_mode memory leak
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  - drm/tests: helpers: Fix compiler warning
  - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
  - drm/tests: Add helper to create mock crtc
  - drm/tests: Add helper to create mock plane
  - drm/tests: helpers: Add atomic helpers
  - drm/tests: modeset: Fix drm_display_mode memory leak
  - net: ethtool: Don't call .cleanup_data when prepare_data fails
  - tc: Ensure we have enough buffer space when sending filter netlink notifications
  - net/sched: cls_api: conditional notification of events
  - rtnl: add helper to check if a notification is needed
  - rtnl: add helper to check if rtnl group has listeners
  - octeontx2-pf: qos: fix VF root node parent queue index
  - net: tls: explicitly disallow disconnect
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  - drm/i915: Disable RPG during live selftest
  - drm/i915/dg2: wait for HuC load completion before running selftests
  - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
  - drm/i915/mocs: use to_gt() instead of direct &i915->gt
  - selftests/futex: futex_waitv wouldblock test should fail
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  - jfs: upper bound check of tree index in dbAllocAG
  - mm: swap: check for stable address space before operating on the VMA
  - net: ethernet: cortina: Use TOE/TSO on all TCP
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  - bus: mhi: host: Detect events pointing to unexpected TREs
  - drm/amd/pm: fix null pointer access
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  - net: kcm: Fix race condition in kcm_unattach()
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first
  - usb: xhci: Fix slot_id resource race conflict
  - net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
  - nilfs2: reject invalid file types when reading inodes
  - mtd: inftlcore: Add error check for inftl_read_oob()
  - freezer, sched: Report frozen tasks as 'D' instead of 'R'
  - io_uring/sqpoll: fix sqpoll error handling races
  - i2c: microchip-core: actually use repeated sends
  - PCI/MSI: Handle lack of irqdomain gracefully
  - i2c: imx: add imx7d compatible string for applying erratum ERR007805
  - i2c: microchip-core: fix "ghost" detections


author: Li Nan <linan122@huawei.com> - 6.6.0-125.0.0.112
changelog:
  - !17888 [OLK-6.6] Fix CVE-2025-37777
  - !19371  RDMA/rxe: Fix race in do_task() when draining
  - !19393  usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19377 [OLK-6.6] Fix CVE-2025-23133
  - !18704 [OLK-6.6] Fix CVE-2024-58095
  - !19401  smb: client: fix crypto buffers in non-linear memory
  - !19323  nfsd: don't ignore the return code of svc_proc_register()
  - !19386  x86/mm: Check return value from memblock_phys_alloc_range()
  - !19433 urma: bugfix ubagg drivers refent error
  - urma: bugfix ubagg drivers refent error
  - !19391 urma: fixing ubcore hash table initialization failure.
  - !19263 [OLK-6.6]Fix CVE-2025-37861
  - !19253 [OLK-6.6] Fix CVE-2025-37973
  - !19252 [OLK-6.6] Fix CVE-2025-37972
  - !19251 [OLK-6.6] Fix CVE-2025-37956
  - !19374 [OLK-6.6] Fix CVE-2025-37899
  - !19402  sched: Fix incorrect cluster mask
  - !19414  xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19398 v2  bugfix for xcall2.0
  - !19412  sunrpc: fix handling of server side tls alerts
  - !19409  smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19405 [OLK-6.6]:update patches for sw64 architecture
  - xsched: fix compile error when CONFIG_XCU_SCHEDULER is disabled
  - !19266  __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - !19358  Fix CVE-2025-40016
  - sunrpc: fix handling of server side tls alerts
  - urma: fixing ubcore hash table initialization failure.
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
  - !19365  net/mlx5e: Harden uplink netdev access against device unbind
  - sw64: config: add initial openeuler_defconfig for sw64
  - sw64: fix compile error of pte_pgprot()
  - sw64: add missing definition of MAP_PEER_SHARED
  - sched: Fix incorrect cluster mask
  - smb: client: fix crypto buffers in non-linear memory
  - !19392  Fixes and cleanup of page cache limit
  - !18760  CVE-2025-38501
  - !19390 v3  xsched: add xsched_{set,get}attr syscall
  - xcall2.0: fix panic while detaching xcall found in DT case
  - xcall2.0: prefetch: fix access NULL ptr in __do_sys_epoll_pwait()
  - xcall2.0: prefetch: get prefetch_mm_data once in get_pfi()
  - !19311  nbd: fix uaf in nbd_genl_connect() error path
  - !19310  fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19256  efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - !19237  nfsd: provide locking for v4_end_grace
  - !19247  dmaengine: ti: k3-udma: Add missing locking
  - !19220  NFSv4: Fix deadlock during the running of state manager
  - !19248  nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - usb: typec: ucsi: displayport: Fix NULL pointer access
  - !19378 net: hibmcge: add support for pagepool on rx
  - mm: Add page cache limit check before queueing shrink worker
  - mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()
  - mm: Replace deferrable timer with delay timer for shrink worker
  - !19388 [sync] PR-19363:  Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - !19368  net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - !19367  net/sched: sch_qfq: Fix CVE-2025-38477
  - !19366  i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - !19364  ixgbevf: Fix CVE-2025-40104
  - xsched: add xsched_{set,get}attr syscall
  - Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
  - x86/mm: Check return value from memblock_phys_alloc_range()
  - net: hibmcge: add support for pagepool on rx
  - net: hibmcge: reduce packet drop under stress testing
  - net: hibmcge: add support for tracepoint to dump some fields of rx_desc
  - Revert "net: hibmcge: reduce packet drop under stress testing"
  - Revert "net: hibmcge: support pagepool for rx"
  - wifi: ath11k: update channel list in reg notifier instead reg worker
  - !18451 RDMA/bnxt_re: Fix budget handling of notification queue
  - ksmbd: fix use-after-free in session logoff
  - !18837  CVE-2025-37997
  - !19361  media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - RDMA/rxe: Fix race in do_task() when draining
  - !19353 ubcore: fix query route list by eid pair.
  - ubcore: fix query route list by eid pair.
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  - net/mlx5e: Harden uplink netdev access against device unbind
  - ixgbevf: fix mailbox API compatibility by negotiating supported features
  - ixgbevf: fix getting link speed data for E610 devices
  - ixgbevf: Add support for Intel(R) E610 device
  - PCI: Add PCI_VDEVICE_SUB helper macro
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
  - !19152  Fix CVE-2025-39810 fix CVE-2025-39810
  - !19359 ub: hisi-ubus: Fix ub memory decoder create
  - !19346  sched: Fix race between yield_to() and try_to_wake_up()
  - ub: hisi-ubus: Fix ub memory decoder create
  - media: uvcvideo: Use heuristic to find stream entity
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  - !19341 v7  bugfix for xcall2.0
  - sched: Fix race between yield_to() and try_to_wake_up()
  - !17661 kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of …
  - !19334  bpf: Sync pending IRQ work before freeing ring buffer
  - xcall2.0: prefetch: introduce struct prefetch_mm_data
  - xcall2.0: Fix mem leak in proc_xcall_command
  - xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall
  - xcall2.0: prefetch: keep prefetch module name same with file name
  - xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait
  - !19339  zcopy: Fix context switch within RCU read-side
  - !19300  Add Support for Disabling Hugetlb in soft_offline_page
  - !19327 ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - !19338 iommu/ummu: Fix UMMU documentation error
  - !19287 net: unic: Add support for uboe and ethernet related tools
  - !19337 ub: udma: Support retrieving the migr field.
  - zcopy: Fix context switch within RCU read-side error
  - ub: ub_fwctl: add ub_fwctl driver-api documentation description
  - iommu/ummu: Fix UMMU documentation error
  - !19332 ub: udma: add requirement about document and tp attr.
  - !19330 iommu/ummu: Add UMMU documentation description
  - bpf: Sync pending IRQ work before freeing ring buffer
  - ub: udma: Support retrieving the migr field.
  - !18794 【OLK-6.6】fix CVE-2025-39801
  - ub: udma: Support eid and guid updates.
  - ub: udma: bugfix for set and get tp attr.
  - !18453 [OLK-6.6] ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - !18483 [OLK-6.6] x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - iommu/ummu: Add UMMU-PMU devicetree file
  - iommu/ummu: Add UMMU devicetree file
  - iommu/ummu: Add UMMU documentation description
  - ub: udma: mask jetty context addr info.
  - ub: udma: add udma driver module doc.
  - ub: ubase: Remove non-cluster mode code
  - net: unic: Add support for uboe reset
  - net: unic: Add support for MAC statistics
  - net: unic: Add pause frame support.
  - net: unic: Add Priority Flow Control (PFC) support
  - net: unic: Add debugfs support for dumping MAC tables.
  - net: unic: Supports MAC filter, and allows users to add and delete MAC
  - net: unic: Add debugfs support for dumping vlan table
  - net: unic: Integrate valn filtering features with network device operations.
  - net: unic: Add valn filtering support.
  - net: unic: Add support for querying link diagnosis status
  - net: unic: Extend loopback test support to include external loopback modes
  - net: unic: Extend loopback test support to include serdes loopback modes.
  - net: unic: Add loopback test support.
  - net: unic: Add debugfs support for dumping hardware MAC tables.
  - net: unic: Add support for setting link speed, duplex, and autonegotiation via ethtool.
  - !19328 ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - !19264 ub: cdma: add CDMA userspace-api documentation description
  - ub:hisi-ubus: Adding compatibility Interfaces for ub memory
  - kvm: Only enable shadow mode for ioeventfd and Align the lifecycle of KVM shadow with KVM
  - ub: cdma: add CDMA userspace-api documentation description
  - ub: cdma: add CDMA kernel driver design document specification
  - ub: cdma: add CDMA driver-api documentation description
  - !19305 ub:ubus: Add ubus and ubfi opensource document
  - !19320 urma: added functions for getting and setting TP attribute fields.
  - nfsd: don't ignore the return code of svc_proc_register()
  - ub:ubus: Add ubus devicetree file
  - urma: added functions for getting and setting TP attribute fields.
  - ub:ubus: Add ubus and ubfi opensource document
  - !19317 ub: ubase: Remove useless character '+'
  - ub: ubase: Remove useless character '+'
  - !18870 add sentry kmod
  - drivers/ub/sentry: add sentry_remote_reporter module
  - drivers/ub/sentry: add sentry_uvb_comm module
  - drivers/ub/sentry: add sentry_urma_comm module
  - drivers/ub/sentry: add sentry_reporter and sentry_msg_help
  - !19306  net: Netdev use RCU protection
  - !19290 urma: bugfix the issue of urma stream generation failure
  - nbd: fix uaf in nbd_genl_connect() error path
  - fs: writeback: fix use-after-free in __mark_inode_dirty()
  - !19292  blk-ioinf: accumulate total latency properly across sampling periods
  - !19230  drm/vmwgfx: Fix Use-after-free in validation
  - net: use dst_dev_rcu() in sk_setup_caps()
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
  - ipv6: use RCU in ip6_output()
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  - net: dst: Fix kabi-breakage for struct dst_entry
  - ipv6: use RCU in ip6_xmit()
  - ipv4: start using dst_dev_rcu()
  - tcp_metrics: use dst_dev_net_rcu()
  - net: dst: introduce dst->dev_rcu
  - net: Add locking to protect skb->dev access in ip_output
  - net: dst: add four helpers to annotate data-races around dst->dev
  - urma: bugfix the issue of urma stream generation failure
  - acpi: provides acpi power notifier chain
  - mm/memory-failure: support disabling soft offline for HugeTLB pages
  - mm/memory-failure: userspace controls soft-offlining pages
  - blk-ioinf: accumulate total latency properly across sampling periods
  - RDMA/bnxt_re: Remove unusable nq variable
  - RDMA/bnxt_re: Fix budget handling of notification queue
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
  - Input: mtk-pmic-keys - fix possible null pointer dereference
  - ksmbd: prevent rename with empty string
  - ksmbd: move leading slash check to smb2_get_name()
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  - dmaengine: ti: k3-udma: Add missing locking
  - nfsd: provide locking for v4_end_grace
  - drm/vmwgfx: Fix Use-after-free in validation
  - NFSv4: Fix deadlock during the running of state manager
  - bnxt_en: Fix memory corruption when FW resources change during ifdown
  - bnxt_en: Fix possible crash after creating sw mqprio TCs
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region
  - netfilter: ipset: fix region locking in hash types
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  - ksmbd: add max ip connections parameter
  - ksmbd: extend the connection limiting mechanism to support IPv6
  - ksmbd: limit repeated connections from clients with the same IP
  - jfs: add check read-only before txBeginAnon() call
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support
  - x86/hpet: Set dynamic IRQ feature for HPET for KH-50000
  - ALSA: HDA: Roll back the old version for consistency with the mainline
  - ksmbd: add free_transport ops in ksmbd connection
  - ksmbd: fix use-after-free in __smb2_lease_break_noti()


author: Li Nan <linan122@huawei.com> - 6.6.0-127.0.0.113
changelog:
  - !19620 iommufd: Prevent ALIGN() overflow
  - !19608 ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - !18634 [OLK-6.6]Fix CVE-2025-38706
  - iommufd: Prevent ALIGN() overflow
  - !19400  smb: client: fix mid_q_entry memleak leak with per-mid locking
  - !19601  net/packet: fix a race in packet_set_ring() and packet_notifier()
  - !19598  ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - !19597  ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19354 [OLK-6.6] Fix CVE-2025-37822
  - !19355 [OLK-6.6] Fix CVE-2025-38361
  - !19563 ub: cdma: fix the timing issue during flow-based deregistration.
  - !19585 crypto: hisilicon/trng - Fix the issue where TRNG cannot be used by multiple threads.
  - !19610 perf: Fix lastup for multi-CPU PG
  - !19609 urma: fixed process exiting uburma driver's private memory UAF
  - !19592  Fix incorrect use of cpuhp_remove_multi_state parameter
  - perf: Fix lastup for multi-CPU PG
  - urma: fixed process exiting uburma driver's private memory UAF
  - !19607 Revert "RDMA/hns: Fix mismatch exception rollback"
  - ub: cdma: modify the compatibility field according to the Linux KABI specification
  - ub: cdma: fix the timing issue during flow-based deregistration.
  - ub: cdma: fix kasan cdma jfae uaf
  - ub: cdma: modify log level about en information
  - ub: ub_fwctl: Modify TP/TA/SCC register query process.
  - Revert "RDMA/hns: Fix mismatch exception rollback"
  - !18664 [OLK-6.6] Fix CVE-2025-22039
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  - ipv6: prevent infinite loop in rt6_nlmsg_size()
  - !19558 obmm: sync obmm default params value to sysfs.
  - !19560 obmm: set MAX Numa Distance to 255
  - !19589 ub:ubus: add active_mutex in ub_entity
  - soc cache: Add compilation config for hisi_soc_l3c
  - soc cache: Don't poll before removing all locks
  - soc cache: Drop redundant vm_pgoff
  - soc cache: fix walk page parameter and drop incorrect check
  - soc cache: Check address while walking pages
  - soc_cache: Fix component removal order to avoid race condition
  - soc cache: cleanup: Remove the redundant check of vm_pgoff
  - soc cache: cleanup: Change type of mnt_type
  - soc cache: cleanup: avoid tag addr from interfering range validation
  - soc cache: cleanup: move judgement of soc cache dev into lock protection
  - soc cache: cleanup: fix memory leakage on error path
  - soc_cache: Fix error code returning from hisi_soc_l3c_do_lock
  - soc_cache: Fix incorrect use of cpuhp_remove_multi_state parameter
  - soc cache: cleanup: replace dynamically allocated param with local variable
  - ub:ubus: add active_mutex in ub_entity
  - !19576  Bugfix for two issues
  - crypto: hisilicon/trng - support tfms sharing the device
  - crypto: hisilicon/trng - use DEFINE_MUTEX() and LIST_HEAD()
  - Revert "crypto: hisilicon/trng - support to obtain random numbers from soft algorithm"
  - Revert "crypto: hisilicon/trng - use DEFINE_MUTEX() for mutex lock"
  - !19557  Fix UAF issue for mfs
  - !19555 ub: bugfix of port, decoder and vfio
  - !19561 obmm: fix granu checking in mmap
  - zcopy: Fix softlockup while attach PUD-SIZE page
  - zcopy: Fix NULL pointer dereference while attach conflict with free
  - ub:unic Adaptation of the port reset interface
  - !19521 uvb: change dir name
  - !19532 net: hns3: add VLAN id validation before using
  - !19271  Squashfs: fix uninit-value in squashfs_get_parent
  - !19269  media: venus: Add a check for packet size after reading from shared memory
  - !19268  eventpoll: Fix semi-unbounded recursion
  - !19267  kernfs: Relax constraint in draining guard
  - !19552  KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19551 add check ack_dono flag for reboot event
  - obmm: sync obmm default params value to module sysfs.
  - obmm: set MAX Numa Distance to 255
  - obmm: fix granu checking in mmap
  - ub:ubus adapt port local ras
  - vfio:ubus vfio-ub support ub entity enable
  - mfs: Fix UAF problem on event object when enable tracepoint
  - ub:ubus: fix bug of msg workqueue null
  - ub:hisi-ubus ub:hisi-ubus: Move the decoder's page table operations to hisi-ubus
  - add check ack_dono flag for reboot event
  - !19517 gmem: fix several issues
  - !19519  arm64/mpam: Reset mbwu_state while creating new monitor group
  - KVM: arm64: Check the untrusted offset in FF-A memory share
  - !19530  Fix unexpected behavior in resctrl mounting
  - !19520 ub: udma: bugfix related to init xa flags.
  - !19205 [OLK-6.6] Fix CVE-2025-39732
  - !19156 [OLK-6.6] Fix CVE-2025-39684
  - !19157 [OLK-6.6] Fix CVE-2025-39675
  - net: hns3: add VLAN id validation before using
  - !19526  mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - fs/resctrl: Prevent mounting with unsupported options
  - fs/resctrl: Fix resctrl mount options display in mount list
  - ub: udma: bugfix related to init xa flags.
  - ub: udma: bugfix for rx close.
  - mm/numa_remote: fix wild-memory-access in numa_remote_hugetlb_nowatermark
  - uvb: change dir name
  - !19507  Fix some memory policy bugfix
  - arm64/mpam: Need to reset MPAM component when umounting resctrl
  - arm64/mpam: Remove the redundant prev_val member variable
  - arm64/mpam: Reset mbwu_state while creating new monitor group
  - !19508 ub: ub_fwctl: Modify the problem of incorret data when querying entry
  - !19513  zcopy: fix two issues
  - zcopy: Fix Bad rss-counter state while non-mapping pages attach
  - zcopy: Fix null pointer dereference while attach transhugepage twice to same addr
  - ub: ub_fwctl: Modify the problem of incorret data when querying entry information
  - !19357 ubios_uvb: add msleep in poll thread
  - ubios_uvb: add check for uvb window buffer size
  - !19494  crypto: hisilicon - add reference counting to queues for tfm kernel reuse
  - !19475  task_work: Fix NMI race condition
  - mempolicy: restrict smart grid scheduling to vma_alloc_folio path
  - mempolicy: fix missing mmap_read_unlock() in error path
  - ubios_uvb: add check for cis message and senderid
  - !19486 [OLK-6.6] fix possible crash caused by null pointer when hct get page.
  - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
  - crypto: hisilicon/hpre - support the hpre algorithm fallback
  - crypto: hisilicon/zip - support fallback for zip
  - crypto: hisilicon/qm - optimize device selection priority based on queue ref count and NUMA distance
  - crypto: hisilicon/qm - add reference counting to queues for tfm kernel reuse
  - crypto: hisilicon - consolidate qp creation and start in hisi_qm_alloc_qps_node
  - crypto: hisilicon/qm - centralize the sending locks of each module into qm
  - crypto: hisilicon/qm - enhance the configuration of req_type in queue attributes
  - Revert "crypto: hisilicon/hpre - support the hpre algorithm fallback"
  - crypto: hisilicon/hpre: extend tag field to 64 bits for better performance
  - crypto: hisilicon/sec - move backlog management to qp and store sqe in qp for callback
  - crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
  - ubios_uvb: add msleep in poll thread
  - ccp/hct: fix possible crash caused by null pointer when hct get page.
  - task_work: Fix NMI race condition
  - !19468 urma: Bugfix for ubcore_get_route_list implement
  - urma: Bugfix for ubcore_get_route_list implement
  - !19329 hisi_acc_vfio_pci: adapt to new migration configuration
  - !19435 crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - !19383 [OLK-6.6] backport important bugfix for Broadcom NIC driver from upstream linux-6.6.y
  - !19460  xsched: XCU Partition
  - !19316  Fix cves CVE-2025-40040 & CVE-2025-40058
  - !19447 net: hns3: remove VF multi-TC compat bit
  - xsched: add throttling statistics for xsched groups
  - xsched: fix task stall when quota is disabled
  - xsched: suppress excessive error logs during cgroup file retry
  - xsched: fix shares misaccounting when multiple tasks run in one cgroup
  - xsched: switch xcu cgroup subsystem from domain mode to thread mode
  - !19439 obmm: remove redundant code and fix log issues
  - !18481 [OLK-6.6] Add platform-specific quirks for ZX-200 device
  - !19085 scsi: mpi3mr: Add support for status reply descriptor
  - !19078 scsi: mpi3mr: Split off bus_reset function from host_reset
  - !19416  kernfs: Fix UAF in polling when open file is released
  - !19415  smb: client: fix race with concurrent opens in rename(2)
  - !19446  net/mlx5: Fix ECVF vports unload on shutdown flow
  - obmm: remove redundant code and fix log issues
  - !19441  rv: Use strings in da monitors tracepoints
  - !19411  CVE-2025-39697
  - !19442  CVE-2025-22022
  - net: hns3: remove VF multi-TC compat bit
  - net/mlx5: Fix ECVF vports unload on shutdown flow
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  - usb: xhci: move link chain bit quirk checks into one helper function.
  - !19429  net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - rv: Use strings in da monitors tracepoints
  - !19438  drm/scheduler: signal scheduled fence when kill job
  - !19410  Fix CVE-2025-39994
  - drm/scheduler: signal scheduled fence when kill job
  - obmm: set up default mem allocator granule
  - crypto: hisilicon/qm - fix incorrect judgment in qm_get_complete_eqe_num()
  - crypto: hisilicon/qm - add missing default in switch in qm_vft_data_cfg
  - crypto: hisilicon/sgl - remove unnecessary checks for curr_hw_sgl error
  - crypto: hisilicon/qm - add concurrency protection for variable err_threshold
  - crypto: hisilicon/qm - add the save operation of eqe and aeqe
  - crypto: hisilicon/qm - restore original qos values
  - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - kernfs: Fix UAF in polling when open file is released
  - smb: client: fix race with concurrent opens in rename(2)
  - NFS: Fix a race when updating an existing write
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  - media: tuner: xc5000: Fix use-after-free in xc5000_release
  - media: tunner: xc5000: Refactor firmware load
  - smb: client: fix mid_q_entry memleak leak with per-mid locking
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
  - drm/amd/display: Check dce_hwseq before dereferencing it
  - riscv: uprobes: Add missing fence.i after building the XOL buffer
  - hisi_acc_vfio_pci: adapt to new migration configuration
  - crypto: hisilicon - qm updates BAR configuration
  - hisi_acc_vfio_pci: Fix reference leak in hisi_acc_vfio_debug_init
  - Revert "migration: update BAR space size"
  - Revert "migration: qm updates BAR configuration"
  - Revert "migration: adapt to new migration configuration"
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  - mm/ksm: fix flag-dropping behavior in ksm_madvise
  - Squashfs: fix uninit-value in squashfs_get_parent
  - media: venus: Add a check for packet size after reading from shared memory
  - eventpoll: Fix semi-unbounded recursion
  - kernfs: Relax constraint in draining guard
  - ksmbd: fix overflow in dacloffset bounds check
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
  - comedi: Fix initialization of data for instructions that write to subdevice
  - scsi: mpi3mr: Add support for status reply descriptor
  - scsi: mpi3mr: Split off bus_reset function from host_reset
  - gmem: remove reduntant interfaces and use proper mmap flag
  - gmem: gmem_reserve_vma should use vma_flag_clear to remove flag
  - gmem: remove inpropre BUG_ON in do_peer_shared_anonymous_page
  - gmem: hmemcpy should use dma for phy addr
  - Add platform-specific quirks for ZX-200 device
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()


author: Li Nan <linan122@huawei.com> - 6.6.0-129.0.0.114
changelog:
  - !19657 xsched: simplify logging macros by removing redundant pr_fmt usage
  - !19702  XSched: List Corruption
  - !19617  Handling Kunpeng Chip ARM Spectre-BHB (CVE-2022-23960) Issue
  - xsched/cgroup: move list_del from css_free to css_offline to prevent corruption
  - xsched: protect group member list with xcu_lock to prevent corruption
  - !19696  i40e: remove read access to debugfs files
  - i40e: remove read access to debugfs files
  - !19674 obmm: bugfixes of log and race condition
  - !19644 obmm: suppport unaligned PMD mapping
  - !19683  xsched: prevent linked list corruption in RT priority updates
  - xsched: prevent linked list corruption in RT priority updates
  - obmm: Remove log pringts of physical address and kernelspace virtual address
  - obmm: Fix race condition between unexport and addr_query_by_pa
  - !19659 ubcore: fix route_list when no full match.
  - !19661 Packet throughput decreases with multiple jetty streams
  - xsched: simplify logging macros by removing redundant pr_fmt usage
  - xsched: Fix compilation by adding xsched_attr to syscalls.h
  - !19562 [OLK-6.6] virtcca: fix incorrect use of the percpu declare
  - ubcore: fix route_list when no full match.
  - obmm: display mmaped region's Pagesize
  - obmm: fix for PMD mapping
  - Packet throughput decreases with multiple jetty streams
  - virtcca: Add missing includes for DECLARE_PER_CPU
  - arm64: Add missing includes for mem_encrypt
  - !19647  fbdev: bitblit: bound-check glyph index in bit_putcs*
  - fbdev: bitblit: bound-check glyph index in bit_putcs*
  - !19097 scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - !19095 scsi: mpi3mr: Set MPI request flags appropriately
  - !19092 scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - !19086 scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor
  - !19636  Some bugfixes for interference
  - !19639 ub: ubase: Fix spell error of month
  - ub: ubase: Fix spell error of month
  - !19637 ub: udma: bugfix related to print location.
  - !19637 ub: udma: bugfix related to print location.
  - !19638 ub:ubus: bugfix port reset in cluster mode
  - !19623 iommu/ummu: Fix the issue of uninitialized resources in logic_ummu_viommu
  - ub:ubus: bugfix port reset in cluster mode
  - ub:ubus: add hotplug capability check
  - ub:ubus: bugfix calltrace of killing qemu when rmmod hisi_ubus
  - ub: udma: bugfix related to print location.
  - iommu/ummu: Remove redundant CONFIG_UB_UBRT_PLAT_DEV and code
  - interference: Add version compatibility check between subsystem and cgroup
  - interference: Fix missing interference.stat file in v1 hierarchy
  - interference: Add fallback to sched_clock when TSC is unavailable
  - interference: Add dependency on CONFIG_SCHED_INFO to avoid build error
  - interference: Resolve arm32 build error by restricting IFS to x86/arm64
  - interference: Avoid null pointer dereference in cgroup_ifs_add_files
  - iommu/ummu-core: Duplicate EID are not allowed
  - iommu/ummu: Move tid_type attr to logic ummu
  - iommu/ummu: Fixing the issue of uninitialized resources in logic_ummu_viommu
  - !19634 crypto: hisilicon - some bugfix
  - !19628 ub:ubfi: Fix UBFI memory leak issue
  - !19616 ub: ubase&unic: Fix some bug finding in running the driver
  - !19553 perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - crypto: hisilicon - lower priority for hisilicon crypto implementations
  - crypto: hisilicon/zip - remove redundant callback validation and invocation in crypto_wait_req
  - crypto: hisilicon/zip - add algorithm check before soft tfm allocation
  - crypto: hisilicon/zip - fix a callback problem
  - crypto: hisilicon/qm - place the interrupt status interface after the PM usage counter
  - crypto: hisilicon/qm - increment PM usage counter when handling the aeq interrupt
  - crypto: hisilicon/sgl - fix inconsistent map/unmap direction issue
  - crypto: hisilicon/hpre - support curve25519 fallback for hardware queue unavailable
  - crypto: hisilicon - mask all error type when uninit
  - net: unic: Fixed the call trace issue triggered internally by the completion event interrupt
  - !19624  xsched: XCU Partition
  - !19621 ubagg: fix mismatched spin unlock.
  - iommu/ummu: Optimize chip generational compatibility feature
  - iommu/ummu: Fix VM multi-instance problem
  - ubagg: fix mismatched spin unlock.
  - net: unic: Restore tx and rx stats when setting coalesce parameters
  - ub: ubase: obtain rc_max_cnt from MAMI
  - ub: ubase: fix a issue of udma device's eid deleted when stop rx stream and reset concurrently
  - ub: ubase: add opcode to query ub port_bitmap.
  - net: unic: Restore default queue count per tc when tc number changes.
  - ub: ubase: Fix the issue of mismatch between the ubase aeqe structure and the protocol.
  - ub: ubase: add ip_over_urma API for udma.
  - ub: ubase: optimize print format of fw_ver in debugfs.
  - ub: ubase: Fix the issue of deadlock by quantities of log in the ctrlq crq task.
  - ub: ubase: Remove non-cluster mode code.
  - net: unic: Resolve the bandwidth jitter problem
  - ub:ubfi: Fix UBFI memory leak issue
  - ub:ubus: Matt and MMIO judgments are not performed in cluster
  - ub:ubus: Delete ubc cfg0 config during cluster mode
  - ub:hisi-ubus: Fix ue reg/unreg without lock bug
  - xsched: fix infinite loop caused by invalid CFS group vruntime update
  - xsched: prevent race between enqueue_ctx and xsched_task_free
  - xsched: DEBUG log cleanup
  - xsched: fix divide-by-zero caused by u64 overflow in CFS shares weight calculation
  - xsched: prevent NULL deref by refcounting css and tracking offline state
  - xsched: fix hung_task caused by cgroup_file_show and xcg_mutex deadlock
  - xsched: fix concurrent modification NULL pointer dereference in xcu.sched_class
  - xsched: fix NULL pointer risk on attach entry allocation
  - xsched: refactor CFS per-XCU rq init/deinit paths
  - iommu/ummu: NO plbi for grant, config permq need dma_wmb
  - iommu/ummu: Fix compilation option configuration about CONFIG_ACPI
  - iommu/ummu: UMMU doesn't send tect sync after delete eid
  - iommu/ummu: Delete unnecessary commands
  - config: Disable unprivileged BPF syscall by default
  - arm64: Add support for TSV110 Spectre-BHB mitigation
  - perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12
  - perf arm-spe: Backport perf_cpu_map__new_online_cpus()
  - perf arm-spe: Save per CPU information in metadata
  - perf arm-spe: Calculate meta data size
  - perf arm-spe: Define metadata header version 2
  - perf arm-spe: Prepare for adding data source packet implementations for other cores
  - perf arm-spe: Use old behavior when opening old SPE files
  - perf arm-spe: Set sample.addr to target address for instruction sample
  - perf color: Add printf format checking and resolve issues
  - perf arm-spe: Add Cortex CPUs to common data source encoding list
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list
  - perf arm-spe: Remove the unused 'midr' field
  - perf arm-spe: Use metadata to decide the data source feature
  - perf arm-spe: Introduce arm_spe__is_homogeneous()
  - perf arm-spe: Dump metadata with version 2
  - perf arm-spe: Support metadata version 2
  - perf arm-spe: Rename the common data source encoding
  - perf arm-spe: Rename arm_spe__synth_data_source_generic()
  - Revert "perf arm-spe: Add support for SPE Data Source packet on HiSilicon HIP12"
  - scsi: mpi3mr: Clear ioctl blocking flag for an unresponsive controller
  - scsi: mpi3mr: Set MPI request flags appropriately
  - scsi: mpi3mr: Replace deprecated strncpy() with assignments
  - scsi: mpi3mr: Fetch correct device dev handle for status reply descriptor


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: caixiaomeng <caixiaomeng2@huawei.com> - 1:0.9.9-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove .export_symbol section newly added in 6.6 kernel to avoid compile error


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: wangjiang <wangjiang37@h-partners.com> - 1:2020.0.0-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix backport-Fix-hist_nearend.patch
         backport-functions-with-not-loaded-autoloaded-functions.patch
         backport-Fix-interactive-restricted-shell-behavior.patch


author: wangyuhang <wangyuhang27@huawei.com> - 2:1.0.8-1
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:due to the upstream community no longer maintaining the previous version,
         we have rolled back to the stable branch and switched to an active code repository.
         new upstream release and update version to 1.0.8


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:File growth can be calculated only if it is strictly greater than
         fix the error of retransmission


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yanglongkang <yanglongkang@h-partners.com> - 2.69-3
changelog:
  - backport upstream patches:
    getpcaps: fix program name in help message
    Stop using _pam_overwrite() in pam_cap.c


author: yezengruan <yezengruan@huawei.com> 1.0.0-12
changelog:
  - kpatch_process: fix possible double free.
  - ptrace: fix NULL pointer access problem
  - fix patched process crashing when acccess the global var
  - fix probably restore cc symbol link fail when kill patch building uncourteous
  - optimize: Remove unnecessary comparison code


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-3
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-correct-realpath-test-failure.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-Werror-format-security.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenhaixing <chenhaixing@huawei.com> - 0.70.2-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: liujing <liujing144@huawei.com> - 1.0.0-30
changelog:
  - update patches from https://code.foxkit.us/adelie/aports-old/blob/50de7d785d5500a14ed00fa12e483e8ceaf4f06a/main/libdv


author: doupengda <doupengda@loongson.cn> 1.0.1-7
changelog:
  - update config.guess and config.sub
  - fix SOURCE1 file autoconf.h '__loongarch64__' to '__loongarch64'


author: yuanchao <1050706328@qq.com> - 2.1.12-13
changelog:
  - Fix function undeclared,incompatible pointer and parameter lack in 'add-testcases-for-event.c-apis.patch',support clang build


author: andy <liuyang01@kylinos.cn> - 2.1.12-14
changelog:
  - Fix leak in evbuffer_add_file() on empty files
  - evthread: fix NULL dereference in evthread_setup_global_lock_()
  - Fix potential null dereference in http-server


author: shixuantong <shixuantong1@h-partners.com> - 2.1.12-15
changelog:
  - fix: arc4_getword integer overflow, detected by -fsanitize=undefined
  - Fix divide-by-zero in ev_token_bucket_get_tick_
  - fixed missing check for null after strdup in evutil_inet_pton_scope
  - Fix integer-overflow in ev_token_bucket_cfg_new
  - Fix integer overflow in HTTP version
  - Fix potential Null pointer dereference in bufferevent_openssl.c
  - Fix potential Null pointer dereference in dns-example.c
  - Fix potential Null pointer dereference in event-read-fifo.c
  - Fix unlikely (for libevent) UB in HT_GROW()


author: shixuantong <shixuantong1@huawei.com> - 3.4.4-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix x86/ffi64 calls with 6 gp and some sse registers
         Robustify floating point comparison in test
         Fix floating point compare


author: Wenhua Huang <huangwenhua@kylinos.cn> - 0.14.2-2
changelog:
  - Rebuild for gimp-3.0.2
    exiv2 fix cve and abi change(https://gitee.com/src-openeuler/exiv2/pulls/95)


author: Wenlong Ding <wenlong.ding@turbolinux.com.cn> - 2.6.4-22
changelog:
  - Remove /usr/lib64/libglade-2.0.so.* from libglade2-devel package which already exists in libglade2 package.


author: Yang Yanchao <yangyanchao6@huawei.com> - 0.1-3
changelog:
  - Check the return ptr of the malloc[#I7YV2X]
    add hnid in gmemPrefetch [#I7XQMW]
    free userData in stream to avoid async operations accessing illeagal address[#I7Z2RF]


author: Kai Liu <kai.liu@windriver.com> - 1:1.49.5-5
changelog:
  - Replace patch support_OPENEULER_to_configure.patch by backport-support-openEuler.patch
    which is backported from upstream, fix issue of detecting openEuler.
  - Add provide-openEuler-appliance-package-list.patch after correctly detected openEuler.
    It was using REDHAT list before.


author: yanglu <yanglu72@h-partners.com> - 3.0.17-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:avoid crashing in icalcomponent_normalize
         fix a memleak in icalcomponent_normalize


author: liuchao <liuchao173@huawei.com> - 2.1-1
changelog:
  - Upgrade to 2.1:
    - a new tool 'ptseg' for finding the PSB segment for a given offset.
    - a new layer 'evt' representing the trace as a list of events.
    - event tracing (cfe and evd packets).
    - C11 threads, if available.
    - Bug fixes and support for latest processors.


author: yixiangzhike <yixiangzhike007@163.com> - 1.4.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:refix the failure of building with cppcheck>=2.11 by using upstream patch


author: yixiangzhike <yixiangzhike007@163.com> - 1.6.4-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch to fix possible uninitialized variable


author: wuguanghao <wuguanghao3@huawei.com> - 5.0.2-1
changelog:
  - upgrade to 5.0.2:
    - fix double free in nfs3_pread_mcb()
    - Multithread support for Linux and Windows
    - fix NFS4 behavior of chmod/chown/utimes
    - Add nfs_umount() to NFSv3
    - Add nfs_statvfs64()
    - NFSv4 fix for directory handling
    - NFSv4 support
    - lockf() support(NFSv4 only)
    - fcntl() support (FNSv4 only)
    - Added nfs-fh: a simple utility to print the filehandle for a nfs file


author: chengyechun <chengyechun1@huawei.com> - 3.7.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent segfault in af_request_type
         fix bridge info parsing


author: Weifeng Su <suweifeng1@huawe.com> - 1.8-1
changelog:
  - Upgrade to version 1.8
    -Support added for Flexible Data Placement(TP4146)
    -Add support for Persistent Discovery Controllers
    -Replaced the libsystemd dependency with libdbus
    -A parser for the NBFT table
    -Ignoring fabric connect attempts if the execution context doesn't match
    -support for TP8018
    -use sysfs only for topology scan
    -auto cleanup for resources
    -buf fixed and clean code


