# changelog

author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2209.3.0.0167
changelog:
  - KVM: x86: do not report a vCPU as preempted outside instruction boundaries
  - KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message
  - ext4: avoid resizing to a partial cluster size
  - locking/atomic: Make test_and_*_bit() ordered on failure
  - geneve: do not use RT_TOS for IPv6 flowlabel
  - SUNRPC: Reinitialise the backchannel request buffers before reuse
  - NFSv4/pnfs: Fix a use-after-free bug in open
  - NFSv4.1: RECLAIM_COMPLETE must handle EACCES
  - tcp: fix over estimation in sk_forced_mem_schedule()
  - ext4: fix extent status tree race in writeback error recovery path
  - ext4: update s_overhead_clusters in the superblock during an on-line resize
  - ext4: make sure ext4_append() always allocates new block
  - kprobes: Forbid probing on trampoline and BPF code areas
  - kfifo: fix kfifo_to_user() return type
  - profiling: fix shift too large makes kernel panic
  - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
  - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
  - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
  - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
  - can: error: specify the values of data[5..7] of CAN error frames
  - fs: check FMODE_LSEEK to control internal pipe splicing
  - tcp: make retransmitted SKB fit into the send window
  - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
  - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
  - x86/pmem: Fix platform-device leak in error path
  - selinux: Add boundary check in put_entry()
  - ACPI: LPSS: Fix missing check in register_device_clock()
  - fs: Add missing umask strip in vfs_tmpfile
  - vfs: Check the truncate maximum size in inode_newsize_ok()
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.
  - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.
  - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
  - tcp: Fix a data-race around sysctl_tcp_autocorking.
  - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
  - tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
  - igmp: Fix data-races around sysctl_igmp_qrv.
  - net: ping6: Fix memleak in ipv6_renew_options().
  - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
  - tcp: Fix a data-race around sysctl_tcp_nometrics_save.
  - tcp: Fix a data-race around sysctl_tcp_frto.
  - tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
  - tcp: Fix a data-race around sysctl_tcp_app_win.
  - tcp: Fix data-races around sysctl_tcp_dsack.
  - mm/mempolicy: fix uninit-value in mpol_rebind_policy()
  - tcp: Fix data-races around sysctl_tcp_max_reordering.
  - tcp: Fix a data-race around sysctl_tcp_rfc1337.
  - tcp: Fix a data-race around sysctl_tcp_stdurg.
  - tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
  - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
  - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
  - tcp: Fix data-races around sysctl_tcp_recovery.
  - tcp: Fix a data-race around sysctl_tcp_early_retrans.
  - tcp: Fix data-races around sysctl_tcp_fastopen.
  - tcp: Fix a data-race around sysctl_tcp_tw_reuse.
  - tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
  - tcp: Fix data-races around some timeout sysctl knobs.
  - tcp: Fix data-races around sysctl_tcp_reordering.
  - igmp: Fix a data-race around sysctl_igmp_max_memberships.
  - igmp: Fix data-races around sysctl_igmp_llm_reports.
  - tcp: Fix a data-race around sysctl_tcp_probe_interval.
  - tcp: Fix a data-race around sysctl_tcp_probe_threshold.
  - tcp: Fix data-races around sysctl_tcp_mtu_probing.
  - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
  - ip: Fix a data-race around sysctl_fwmark_reflect.
  - ip: Fix data-races around sysctl_ip_nonlocal_bind.
  - ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
  - block: fix the problem of io_ticks becoming smaller
  - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
  - block, bfq: save & resume weight on a queue merge/split
  - ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
  - acpi/nfit: improve bounds checking for 'func'
  - ACPICA: Do not increment operation_region reference counts for field units
  - ACPICA: Fix exception code class checks
  - ACPI: configfs: add missing check after configfs_register_default_group()
  - ACPI: custom_method: fix potential use-after-free issue
  - ACPI: custom_method: fix a possible memory leak
  - ACPI: APD: Check for NULL pointer after calling devm_ioremap()
  - ACPI/IORT: Fix PMCG node single ID mapping handling
  - ACPI/IORT: Check node revision for PMCG resources
  - kprobes: don't call disarm_kprobe() for disabled kprobes
  - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
  - usb: gadget: function: printer: fix use-after-free in __lock_acquire
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero
  - lightnvm: disable the subsystem
  - configfs: fix a race in configfs_lookup()
  - configfs: fold configfs_attach_attr into configfs_lookup
  - configfs: make configfs_create() return inode
  - configfs: factor dirent removal into helpers
  - configfs: simplify the configfs_dirent_is_ready
  - configfs: return -ENAMETOOLONG earlier in configfs_lookup


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2209.4.0.0168
changelog:
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2209.6.0.0170
changelog:
  - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog
  - KVM: x86: Adjust counter sample period after a wrmsr
  - KVM: x86: Fix perfctr WRMSR for running counters
  - perf/core: Provide a kernel-internal interface to recalibrate event period
  - media: em28xx: initialize refcount before kref_get
  - mm: avoid potential deadlock tirgged by writing slab-attr-file
  - ext4: fix use-after-free in ext4_ext_shift_extents
  - quota: Add more checking after reading from quota file
  - quota: Replace all block number checking with helper function
  - quota: Check next/prev free block number after reading from quota file
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
  - mm/sharepool: Fix UAF reported by KASAN
  - blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues
  - mm: mem_reliable: Start fallback if no suitable zone found
  - net: hns3: update hns3 version to 22.9.2
  - net: hns3: fix error resume keep alive when remove hclgevf
  - net: hns3: update hns3 version to 22.9.1
  - net: hns3: fix keep alive can not resume problem when system busy


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2210.1.0.0171
changelog:
  - netfilter: nf_conntrack_irc: Fix forged IP logic
  - ext4: fix check for block being out of directory size
  - ext4: check if directory block is within i_size
  - block: Fix UAF in bd_link_disk_holder()
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  - block: add a new config to control dispatching bios asynchronously
  - block: fix kabi broken in request_queue
  - md: enable dispatching bio asynchronously for raid10 by default
  - arm64/topology: getting preferred sibling's cpumask supported by platform
  - block: support to dispatch bio asynchronously
  - block: add new fields in request_queue
  - md/raid10: convert resync_lock to use seqlock
  - md/raid10: prevent unnecessary calls to wake_up() in fast path
  - !122 【kernel-openEuler-1.0-LTS】kernel：fix some issues with 4.19 kernel on openEuler 22.03 system
  - mm: sharepool: fix potential AA deadlock
  - mm: sharepool: check size=0 in mg_sp_make_share_k2u()
  - mm: sharepool: delete redundant check in __sp_remap_get_pfn
  - Revert "cifs: fix double free race when mount fails in cifs_get_root()"
  - scsi: hisi_sas: Release resource directly in hisi_sas_abort_task() when NCQ error
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected
  - scsi: hisi_sas: Modify v3 HW ATA completion process when SATA disk is in error status
  - sched: Fix invalid free for tsk->se.dyn_affi_stats
  - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
  - scsi: target: tcmu: Fix crash on ARM during cmd completion
  - scsi: target: tcmu: Optimize use of flush_dcache_page
  - scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range
  - signal: fix deadlock caused by calling printk() under sighand->siglock
  - mm: fix missing handler for __GFP_NOWARN
  - perf bench futex-wake: Restore thread count default to online CPU count
  - selftests/bpf: Enlarge select() timeout for test_maps
  - xfs: preserve default grace interval during quotacheck
  - i40e: Fix kernel crash during module removal
  - i40e: Fix use-after-free in i40e_client_subtask()
  - EDAC: skx_common: downgrade message importance on missing PCI device
  - x86/entry/64: Don't compile ignore_sysret if 32-bit emulation is enabled
  - x86: Fix early boot crash on gcc-10, third try
  - objtool: Don't fail on missing symbol table


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2210.3.0.0172
changelog:
  - binder: fix UAF of ref->proc caused by race condition
  - arm64: fix oops in concurrently setting insn_emulation sysctls
  - mm/hotplug: silence a lockdep splat with printk()
  - init/Kconfig: Add SMP to the dependencies of QOS_SCHED
  - mm/rmap: Fix kabi broken in anon_vma
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
  - HID: roccat: Fix use-after-free in roccat_read()
  - ext4: fix dir corruption when ext4_dx_add_entry() fails
  - quota: Add more checking after reading from quota file
  - quota: Replace all block number checking with helper function
  - quota: Check next/prev free block number after reading from quota file
  - Revert "quota: Check next/prev free block number after reading from quota file"
  - Revert "quota: Replace all block number checking with helper function"
  - Revert "quota: Add more checking after reading from quota file"
  - tracefs: Only clobber mode/uid/gid on remount if asked
  - netfilter: ebtables: fix memory leak when blob is malformed
  - netfilter: ebtables: reject blobs that don't provide all entry points
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  - SUNRPC: use _bh spinlocking on ->transport_lock
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
  - netfilter: br_netfilter: Drop dst references before setting.
  - debugfs: add debugfs_lookup_and_remove()
  - tcp: annotate data-race around challenge_timestamp
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
  - neigh: fix possible DoS due to net iface start/stop loop
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking
  - asm-generic: sections: refactor memory_intersects
  - loop: Check for overflow while configuring loop
  - net: Fix a data-race around sysctl_somaxconn.
  - net: Fix a data-race around netdev_budget_usecs.
  - net: Fix a data-race around netdev_budget.
  - net: Fix a data-race around sysctl_net_busy_read.
  - net: Fix a data-race around sysctl_net_busy_poll.
  - net: Fix a data-race around sysctl_tstamp_allow_data.
  - ratelimit: Fix data-races in ___ratelimit().
  - net: Fix data-races around netdev_tstamp_prequeue.
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs
  - bonding: 802.3ad: fix no transmission of LACPDUs
  - xfrm: fix refcount leak in __xfrm_policy_check()
  - audit: fix potential double free on error path from fsnotify_add_inode_mark
  - dm: return early from dm_pr_call() if DM device is suspended
  - NFSv4: Fix races in the legacy idmapper upcall


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2210.4.0.0173
changelog:
  - nfp: fix use-after-free in area_cache_get()
  - mISDN: fix use-after-free bugs in l1oip timer handlers
  - tcp: Fix data races around icsk->icsk_af_ops.
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
  - !134 scsi: megaraid_sas: Add support for MegaRAID Aero controllers
  - !138 vfio-pci: Mask cap zero
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop()
  - r8152: Rate limit overflow messages
  - scsi: megaraid_sas: Add support for MegaRAID Aero controllers
  - vfio-pci: Mask cap zero
  - tcp/udp: Fix memory leak in ipv6_renew_options().
  - net: mvpp2: fix mvpp2 debugfs leak
  - !159 PCI: Add ACS quirk for Broadcom NICs
  - !137 net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode
  - kcm: avoid potential race in kcm_tx_work
  - net: bonding: Add support for IPV6 ns/na to balance-alb/balance-tlb mode
  - !139 nvme: Assign subsys instance from first ctrl
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open()
  - nvme: fix controller instance leak
  - nvme: Assign subsys instance from first ctrl
  - PCI: Add ACS quirk for Broadcom BCM5750x NICs
  - PCI: Add ACS quirk for Broadcom BCM57414 NIC


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2210.5.0.0174
changelog:
  - sch_sfb: Also store skb len before calling child enqueue
  - sch_sfb: Don't assume the skb is still around after enqueueing to child
  - ipv6: Fix data races around sk->sk_prot.
  - ipv6: annotate some data-races around sk->sk_prot
  - ipv6: provide and use ipv6 specific version for {recv, send}msg
  - inet: factor out inet_send_prepare()
  - nilfs2: fix use-after-free bug of struct nilfs_root


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.1.0.0175
changelog:
  - uacce: add the reference counter protection
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
  - usb: mon: make mmapped memory read only
  - !185 [openEuler-1.0-LTS] Add support sata lpm for Zhaoxin CPUs
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
  - ext4: add helper to check quota inums
  - ext4: fix bug_on in __es_tree_search caused by bad quota inode
  - atm: idt77252: fix use-after-free bugs caused by tst_timer
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate
  - !94 [openEuler-1.0-LTS] rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs
  - !88 [openEuler-1.0-LTS] XHCI:Fix some device identify fail when enable xHCI runtime suspend
  - !92 [openEuler-1.0-LTS] x86/tsc: Make cur->adjusted values in package#1 to be the same
  - !93 [openEuler-1.0-LTS] Driver for Zhaoxin CPU core temperature monitoring
  - !89 [openEuler-1.0-LTS] EHCI: Clear wakeup signal locked in S0  state when device plug in
  - scsi: stex: Properly zero out the passthrough command structure
  - !192 x86/apic/vector: Fix ordering in vector assignment
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure
  - vsock: Fix memory leak in vsock_connect()
  - x86/apic/vector: Fix ordering in vector assignment
  - Add support for PxSCT.LPM set based on actual LPM circumstances
  - Add support for disabling PhyRdy Change Interrupt based on actual LPM capability
  - Driver for Zhaoxin CPU core temperature monitoring
  - rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs
  - x86/tsc: Make cur->adjusted values in package#1 to be the same
  - EHCI: Clear wakeup signal locked in S0 state when device plug in
  - XHCI:Fix some device identify fail when enable xHCI runtime suspend


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.2.0.0176
changelog:
  - net: tun: fix bugs for oversize packet when napi frags enabled
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - ext4: fix bad checksum after online resize
  - blktrace: remove unnessary stop block trace in 'blk_trace_shutdown'
  - blktrace: fix possible memleak in '__blk_trace_remove'
  - blktrace: introduce 'blk_trace_{start,stop}' helper
  - kabi: net: fix kabi broken in sk_buff
  - io_uring/af_unix: defer registered files gc to io_uring release
  - nbd: refactor size updates
  - nbd: move the task_recv check into nbd_size_update
  - nbd: remove the call to set_blocksize
  - wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker'
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy
  - dm: Fix UAF in run_timer_softirq()
  - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
  - ext4: record error information when insert extent failed in 'ext4_split_extent_at'
  - livepatch/core: Fix livepatch/state leak on error path
  - !130 [openEuler-1.0-LTS] update pmu for Zhaoxin CPUs
  - update pmu for Zhaoxin CPUs


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29464 CVE-2021-29463 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29464,CVE-2021-29463,CVE-2021-29473


author: fuanan <fuanan3@h-partners.com> - 2.9.10-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: fuanan <fuanan3@h-partners.com> - 2.9.10-28
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: yixiangzhike <zhangxingliang3@huawei.com> - 1.0-43
changelog:
  - Revert "Turn off the audit service by default"
  - Revert "Change the terminal output loglevel to 4"


