# changelog

author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-10
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: hanchao<hanchao47@huawei.com> - 1.15.7-14
changelog:
  - fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
    CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
    CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2206.3.0.0155
changelog:
  - arm64: fix out-of-range error when adapting for ARM64_SPECTRE_BHB
  - xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata
  - xfs: namecheck directory entry names before listing them
  - xfs: namecheck attribute names before listing them
  - xfs: check attribute leaf block structure
  - xfs: check attribute name validity
  - xfs: check directory name validity
  - xfs: scrub should flag dir/attr offsets that aren't mappable with xfs_dablk_t
  - xfs: abort xattr scrub if fatal signals are pending
  - tcp: increase source port perturb table to 2^16
  - tcp: change source port randomizarion at connect() time
  - arm64: fix extra cpucaps setup problem
  - Revert "sched: Fix sched_fork() access an invalid sched_task_group"
  - Revert "sched: Fix yet more sched_fork() races"
  - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  - sctp: use call_rcu to free endpoint
  - ext4: convert from atomic_t to refcount_t on ext4_io_end->count
  - ext4: correct the judgment of BUG in ext4_mb_normalize_request
  - ext4: fix bug_on ext4_mb_use_inode_pa
  - HID: holtek: fix mouse probing
  - HID: check for valid USB device for many HID drivers
  - HID: wacom: fix problems when device is not a valid USB device
  - HID: add USB_HID dependancy on some USB HID drivers
  - HID: add USB_HID dependancy to hid-chicony
  - HID: add USB_HID dependancy to hid-prodikeys
  - HID: add hid_is_usb() function to make it simpler for USB detection
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier
  - NFSv4: fix open failure with O_ACCMODE flag
  - Revert "NFSv4: Handle the special Linux file open access mode"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2206.4.0.0156
changelog:
  - mm/memcontrol: fix wrong vmstats for dying memcg
  - ext4: recover csum seed of tmp_inode after migrating to extents
  - xfs: show the proper user quota options
  - drivers core: node: Use a more typical macro definition style for ACCESS_ATTR
  - drivers core: Use sysfs_emit for shared_cpu_map_show and shared_cpu_list_show
  - mm: and drivers core: Convert hugetlb_report_node_meminfo to sysfs_emit
  - drivers core: Miscellaneous changes for sysfs_emit
  - drivers core: Remove strcat uses around sysfs_emit and neaten
  - drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.1.0.0157
changelog:
  - ext4: correct the misjudgment in ext4_iget_extra_inode
  - ext4: correct max_inline_xattr_value_size computing
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
  - tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
  - swiotlb: skip swiotlb_bounce when orig_addr is zero
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
  - mm/sharepool: Fix using uninitialized sp_flag
  - mm/sharepool: Add a task_struct parameter for sp_get_local_group()
  - mm/sharepool: Don't check the DVPP address space range before merging
  - mm/sharepool: Configure the DVPP range for process
  - mm/sharepool: Introduce SPG_NON_DVPP flag for sp_group_add_task
  - mm/sharepool: Update sp_mapping structure
  - mm/sharepool: Clear the initialization of sp-associated structure for a process
  - mm/sharepool: Unify the memory allocation process
  - mm/sharepool: Use vm_private_data to store the spa
  - mm/sharepool: Share pool statistics adaption
  - mm/sharepool: Release the sp addr based on the id
  - mm/sharepool: Add an interface to obtain an id
  - mm/sharepool: Address space management for sp_group
  - mm/sharepool: Create global normal and dvpp mapping
  - mm/sharepool: Delete single-group mode
  - io_uring: io_close: Set owner as current->files if req->work.files uninitialized


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.2.0.0158
changelog:
  - x86: Fix return value of __setup handlers
  - x86/delay: Fix the wrong asm constraint in delay_loop()
  - ACPI: sysfs: Fix BERT error region memory mapping
  - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
  - nbd: fix io hung while disconnecting device
  - nbd: fix race between nbd_alloc_config() and module removal
  - nbd: call genl_unregister_family() first in nbd_cleanup()
  - ip_gre: test csum_start instead of transport header
  - net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
  - af_unix: Fix a data-race in unix_dgram_peer_wake_me().
  - NFSv4: Don't hold the layoutget locks across multiple RPC calls
  - tcp: tcp_rtx_synack() can be called from process context
  - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
  - md: fix an incorrect NULL check in md_reload_sb
  - md: fix an incorrect NULL check in does_sb_need_changing
  - ext4: avoid cycles in directory h-tree
  - ext4: verify dir block before splitting it
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net
  - drivers/base/node.c: fix compaction sysfs file leak
  - fsnotify: fix wrong lockdep annotations
  - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
  - fat: add ratelimit to fat*_ent_bread()
  - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
  - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
  - dm stats: add cond_resched when looping over entries
  - zsmalloc: fix races between asynchronous zspage free and page migration
  - netfilter: conntrack: re-fetch conntrack after insertion
  - assoc_array: Fix BUG_ON during garbage collect
  - net: af_key: check encryption module availability consistency
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  - block:Fix kabi broken
  - block: Fix warning in bd_link_disk_holder()
  - block: move the NEED_PART_SCAN flag to struct gendisk
  - block: rename bd_invalidated
  - scsi: hisi_sas: Modify v3 HW I/O processing when SATA_DISK_ERR bit is set and NCQ Error occurs
  - scsi: hisi_sas: enable use_clustering
  - scsi: hisi_sas: Change DMA setup lock timeout to 2.5s
  - x86/speculation/mmio: Print SMT warning
  - KVM: x86/speculation: Disable Fill buffer clear within guests
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  - x86/speculation/srbds: Update SRBDS mitigation selection
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  - x86/speculation: Add a common function for MD_CLEAR mitigation update
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  - Documentation: Add documentation for Processor MMIO Stale Data
  - x86/cpu: Add another Alder Lake CPU to the Intel family
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
  - x86/cpu: Add Jasper Lake to Intel family
  - cpu/speculation: Add prototype for cpu_show_srbds()
  - x86/cpu: Add Elkhart Lake to Intel family
  - block: open accurate iostat account by default
  - block: use "precise_iostat" to switch accurate iostat account
  - block/diskstats: more accurate approximation of io_ticks for slow disks
  - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.3.0.0159
changelog:
  - block: fix that part scan is disabled in device_add_disk()
  - Revert "block: rename bd_invalidated"
  - Revert "block: move the NEED_PART_SCAN flag to struct gendisk"
  - Revert "block:Fix kabi broken"
  - rcu/tree: Mark functions as notrace
  - netfilter: nf_tables: stricter validation of element data
  - net: rose: fix UAF bugs caused by timer handler
  - xen/arm: Fix race in RB-tree based P2M accounting
  - vt: drop old FONT ioctls
  - dm thin: Fix crash in dm_sm_register_threshold_callback()
  - xen/blkfront: force data bouncing when backend is untrusted
  - xen/netfront: force data bouncing when backend is untrusted
  - xen-netfront: fix potential deadlock in xennet_remove()
  - xen/netfront: fix leaking data in shared pages
  - xen/blkfront: fix leaking data in shared pages
  - xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
  - tmpfs: fix the issue that the mount and remount results are inconsistent.
  - tmpfs: fix undefined-behaviour in shmem_reconfigure()
  - mm/sharepool: Check sp_is_enabled() before show spa_stat


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2207.4.0.0160
changelog:
  - inotify: show inotify mask flags in proc fdinfo
  - io_uring: always grab file table for deferred statx
  - bpf: Don't redirect packets with invalid pkt_len
  - config: enable CONFIG_QOS_SCHED_DYNAMIC_AFFINITY by default
  - sched: Add statistics for scheduler dynamic affinity
  - sched: Adjust cpu range in load balance dynamicly
  - sched: Adjust wakeup cpu range according CPU util dynamicly
  - cpuset: Introduce new interface for scheduler dynamic affinity
  - sched: Introduce dynamic affinity for cfs scheduler
  - crypto: hisilicon/sec - don't sleep when in softirq
  - video: fbdev: sm712fb: Fix crash in smtcfb_write()
  - video: fbdev: sm712fb: Fix crash in smtcfb_read()
  - scsi: ses: fix slab-out-of-bounds in ses_enclosure_data_process
  - block: don't delete queue kobject before its children
  - etmem:fix kernel stack overflow in do_swapcache_reclaim
  - etmem:fix kasan slab-out-of-bounds in do_swapcache_reclaim
  - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
  - blk-throttle: fix io hung due to configuration updates
  - block: fix NULL pointer dereference in disk_release()
  - block, bfq: make bfq_has_work() more accurate
  - blk-mq: fix panic during blk_mq_run_work_fn()
  - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release()
  - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
  - ext4: fix race condition between ext4_ioctl_setflags and ext4_fiemap


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.1.0.0161
changelog:
  - fbcon: Prevent that screen size is smaller than font size
  - fbcon: Disallow setting font bigger than screen size
  - fbmem: Check virtual screen sizes in fb_set_var()
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  - scsi: core: Fix race between handling STS_RESOURCE and completion
  - block: prevent lockdep false positive warning about 'bd_mutex'
  - dm verity: allow only one error handling mode
  - dm verity: Fix compilation warning
  - dm verity: add root hash pkcs#7 signature verification
  - jbd2: Fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
  - dm btree spine: show warning if node_check failed in node_prep_for_write()
  - dm btree spine: remove paranoid node_check call in node_prep_for_write()
  - ext4: Fix race when reusing xattr blocks
  - ext4: Unindent codeblock in ext4_xattr_block_set()
  - ext4: Remove EA inode entry from mbcache on inode eviction
  - mbcache: Add functions to delete entry if unused
  - mbcache: Don't reclaim used entries
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.2.0.0162
changelog:
  - netfilter: nf_queue: do not allow packet truncation below transport header offset
  - openvswitch: fix OOB access in reserve_sfa_size()
  - dm thin: use refcount_t for thin_c reference counting
  - exec: Force single empty string when argv is empty
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
  - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
  - serial: 8250: fix return error code in serial8250_request_std_resource()
  - ipv4: Fix data-races around sysctl_ip_dynaddr.
  - icmp: Fix a data-race around sysctl_icmp_ratemask.
  - icmp: Fix a data-race around sysctl_icmp_ratelimit.
  - icmp: Fix data-races around sysctl.
  - net: Fix data-races around sysctl_mem.
  - inetpeer: Fix data-races around sysctl.
  - usbnet: fix memory leak in error case
  - esp: limit skb_page_frag_refill use to a single page
  - net: tun: avoid disabling NAPI twice
  - net: bonding: fix use-after-free after 802.3ad slave unbind
  - net: bonding: fix possible NULL deref in rlb code
  - usbnet: fix memory allocation in helpers
  - net: tun: stop NAPI when detaching queues
  - net: tun: unlink NAPI from device on destruction
  - virtio-net: fix race between ndo_open() and virtio_device_ready()
  - SUNRPC: Fix READ_PLUS crasher
  - virtio_net: fix xdp_rxq_info bug after suspend/resume
  - erspan: do not assume transport header is always set
  - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
  - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
  - ext4: make variable "count" signed
  - serial: 8250: Store to lsr_save_flags after lsr read
  - irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
  - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
  - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
  - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
  - io_uring: add missing item types for various requests
  - net/sched: cls_u32: fix possible leak in u32_init_knode()
  - fq_codel: reject silly quantum parameters
  - net: sched: sch_teql: fix null-pointer dereference
  - rcu: Set a maximum limit for back-to-back callback invocation
  - mm: Fix page counter mismatch in shmem_mfill_atomic_pte
  - scsi: mpt3sas: Fix unlock imbalance
  - io-wq: Switch io_wqe_worker's fs before releasing request
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
  - Revert "iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()"


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.4.0.0163
changelog:
  - Revert "x86/unwind/orc: Change REG_SP_INDIRECT"
  - Phytium/S2500: kdump: Avoid vmcore saving failure across multi-socket
  - PCI: Add config control for phytium ACS quirks
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
  - sched: Fix null-ptr-deref in free_fair_sched_group
  - RDMA/ib_srp: Fix a deadlock
  - mm/slub: add missing TID updates on slab deactivation
  - block: fix regression for dm
  - blk-mq: handle bio after queue is initialized
  - x86: Clear .brk area at early boot
  - signal/seccomp: Dump core when there is only one live thread
  - x86/unwind/orc: Recheck address range after stack info was updated
  - x86/unwind/orc: Silence warnings caused by missing ORC data
  - x86/unwind/orc: Change REG_SP_INDIRECT


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2208.5.0.0164
changelog:
  - x86/speculation: Add LFENCE to RSB fill sequence
  - x86/speculation: Add RSB VM Exit protections
  - Revert "blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite"
  - blk-mq: fix null pointer dereference in blk_mq_queue_tag_busy_ite
  - arm64: Avoid premature usercopy failure for __arch_copy_to_user_generic_read
  - net_sched: cls_route: remove from list when handle is 0


author: Cui XuCui <cuixucui1@huawei.com> - 1.0.0-8
changelog:
  * Thu Jul 15 2021 zhangzikang <zhangzikang@kylinos.cn> - 1.0.0-7
  - Fix cdrom and cpufreq test failed


author: meitingli <bubble_mt@outlook.com> - 1.1.0-0
changelog:
  - 1. Add support os version: openEuler 22.03LTS
  - 2. Add FC/RAID/keycard/GPU/infiniband testcases
  - 3. Bugfix


author: cuixucui <cuixucui1@h-partners.com> - 1.1.1-0
changelog:
  -1. Reconstruct the log module and rectify the log printing
  -2. Add kabi testcase
  -3. Add driver, driver version, chip and module display to the console
  -4. Add configuration file for testsuite to improve automation rate
  -5. Add oech and oech-server version display
  -6. Add driver information display in hardware test logs


author: cuixucui <cuixucui1@h-partners> - 1.1.1-3
changelog:
  - Fix the problem that the client fails to send messages after the server port is modified
  - Fix the problem that the system test item failed to check the integrity of the software package


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-42
changelog:
  - Type:CVE
  - ID:CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345
  - SUG:NA
  - DESC:fix CVE-2022-2000 CVE-2022-2042 CVE-2022-2284 CVE-2022-2285 CVE-2022-2304 CVE-2022-2344 CVE-2022-2345


author: shixuantong <shixuantong@h-partners.com> - 2:8.2-43
changelog:
  - Type:CVE
  - ID:CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287
  - SUG:NA
  - DESC:fix CVE-2022-2264 CVE-2022-2257 CVE-2022-2286 CVE-2022-2287


author: dongyuzhen <dongyuzhen@h-partners.com> - 2:8.2-47
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the error of backport-cannot-list-options-one-per-line.patch


