# changelog

author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2306.7.0.0208
changelog:
  - sched: Fix null pointer derefrence for sd->span
  - scsi: hisi_sas: Fix Null point exception after call debugfs_remove_recursive()
  - scsi: hisi_sas: Fix normally completed I/O analysed as failed
  - drm/msm/dpu: Add check for pstates
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.3.0.0209
changelog:
  - !1361 fix CVE-2023-1295
  - io_uring: get rid of intermediate IORING_OP_CLOSE stage
  - fs: provide locked helper variant of close_fd_get_file()
  - file: Rename __close_fd_get_file close_fd_get_file
  - Remove DECnet support from kernel
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - net: tcp: fix kabi breakage in struct sock
  - tcp: deny tcp_disconnect() when threads are waiting
  - ping6: Fix send to link-local addresses with VRF.
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - rfs: annotate lockless accesses to RFS sock flow table
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - xfrm: Check if_id in inbound policy/secpath match
  - udp6: Fix race condition in udp6_sendmsg & connect
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - af_packet: do not use READ_ONCE() in packet_bind()
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - net: fix skb leak in __skb_tstamp_tx()
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - net: Catch invalid index in XPS mapping
  - af_unix: Fix data races around sk->sk_shutdown.
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - net: datagram: fix data-races in datagram_poll()
  - tcp: factor out __tcp_close() helper
  - net: annotate sk->sk_err write from do_recvmmsg()
  - netlink: annotate accesses to nlk->cb_running
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - quota: add dqi_dirty_list description to comment of Dquot List Management
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
  - kernel/extable.c: use address-of operator on section symbols
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - x86/mm: Avoid incomplete Global INVLPG flushes
  - sched: Fix KCSAN noinstr violation
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - ACPI: EC: Fix oops when removing custom query handlers
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - ext4: improve error recovery code paths in __ext4_remount()
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - loop: loop_set_status_from_info() check before assignment
  - loop: Check for overflow while configuring loop
  - Revert "loop: Check for overflow while configuring loop"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - block: return -EBUSY when there are open partitions in blkdev_reread_part
  - blk-wbt: make enable_state more accurate
  - block: Limit number of items taken from the I/O scheduler in one go
  - crypto: cryptd - Protect per-CPU resource by disabling BH.
  - random: fix data race on crng_node_pool
  - x86/kprobes: Fix the error judgment for debug exceptions
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - quota: fixup *_write_file_info() to return proper error code
  - ipmi_si: fix a memleak in try_smi_init()
  - net: add vlan_get_protocol_and_depth() helper
  - net: tap: check vlan with eth_type_vlan() method
  - !1317  ext4: Stop trying writing pages if no free blocks generated
  - !1323  jbd2: fix several checkpoint
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - ext4: Stop trying writing pages if no free blocks generated
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.4.0.0210
changelog:
  - !1435 fix CVE-2023-3117
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - !1400 [openEuler-1.0-LTS] block: Try to handle busy underlying device on discard
  - !1416  Fix generic/299 fail
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1404  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - block: Try to handle busy underlying device on discard
  - !1377 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1374  etmem: fix the div 0 problem in swapcache reclaim process
  - !177 net:bonding:support balance-alb interface with vlan to bridge
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - etmem: fix the div 0 problem in swapcache reclaim process
  - bonding: fix reference count leak in balance-alb mode
  - net:bonding:support balance-alb interface with vlan to bridge


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.5.0.0211
changelog:
  - !1534 arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !1529  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1474 [openEuler-1.0-LTS] pmu: remove uncore code for Zhaoxin Platform
  - !1498  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1444 ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1469  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1472  ipv6/addrconf: fix a potential refcount underflow for idev
  - pmu: remove uncore code for Zhaoxin Platform
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
  - ring-buffer: Fix deadloop issue on reading trace_pipe


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.1.0.0212
changelog:
  - !1571 【openEuler-1.0-LTS】net: hns: fix wrong head when modify the tx feature when sending packets
  - !1570 【openEuler-1.0-LTS】net: hns3: bugfixes for hns3 drivers 2023.07.29
  - net: hns: update hns version to 23.7.1
  - net: hns: fix wrong head when modify the tx feature when sending packets
  - net: hns3: update hns3 version to 23.7.1
  - net: hns3: fix tx timeout issue
  - net: hns3: fix incorrect hw rss hash type of rx packet
  - net: hns3: add barrier in vf mailbox reply process
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
  - net: hns3: fix not call nic_call_event() problem when reset failed
  - !1556  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1568  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1549  binder: fix UAF caused by faulty buffer cleanup
  - binder: fix UAF caused by faulty buffer cleanup


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.2.0.0213
changelog:
  - !1699 dm bugfixes backport from mainline
  - !1697  x86/cpu/amd: Add a Zenbleed fix
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - dm thin metadata: check fail_io before using data_sm
  - !1662  media: usb: siano: Fix CVE-2023-4132
  - !1696  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/cpu/amd: Add a Zenbleed fix
  - !1694 linux-4.19.y bugfixes backport
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - sch_netem: acquire qdisc lock in netem_change()
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - !1577  tracing: Fix warning in trace_buffered_event_disable()
  - !1663  tty: fix pid memleak in disassociate_ctty()
  - tty: fix pid memleak in disassociate_ctty()
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - !1629  can: raw: fix receiver memory leak
  - !1655  can: bcm: Fix UAF in bcm_proc_show()
  - can: bcm: Fix UAF in bcm_proc_show()
  - can: raw: fix lockdep issue in raw_release()
  - can: raw: fix receiver memory leak
  - !1625  Fix host zero page refcount overflow caused by kvm
  - !1595  net: nfc: Fix CVE-2023-3863
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - KVM: fix overflow of zero page refcount with ksm running
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: Fix to check for kmemdup failure
  - tracing: Fix warning in trace_buffered_event_disable()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.3.0.0214
changelog:
  - !1762  xen/netback: Fix buffer overrun triggered by unusual packet
  - xen/netback: Fix buffer overrun triggered by unusual packet
  - !1761 fix CVE-2023-4194
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - !1728  fix CVE-2023-4128
  - !1673  sched: disable sched_autogroup by default
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - !1712  xfrm: add NULL check in xfrm_update_ae_params
  - xfrm: add NULL check in xfrm_update_ae_params
  - sched: disable sched_autogroup by default


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.4.0.0215
changelog:
  - !1831  fix NULL pointer dereference in __nf_nat_mangle_tcp_packet
  - netfilter: nat: fix kabi change
  - netfilter: nat: fix udp checksum corruption
  - netfilter: nat: remove csum_recalc hook
  - !1769  workqueue: Make flush_workqueue() also watch flush_work()
  - !1803  net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - !1767  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - workqueue: Assign a color to barrier work items
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier()
  - workqueue: Change arguement of pwq_dec_nr_in_flight()
  - workqueue: Rename "delayed" (delayed by active management) to "inactive"
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.5.0.0216
changelog:
  - !1863  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1638 [openEuler-1.0-LTS] Add support for Hygon model 4h~6h processors
  - !1884  ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - !1882  ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - EDAC/amd64: Add support for Hygon family 18h model 6h
  - x86/amd_nb: Add support for Hygon family 18h model 6h
  - hwmon/k10temp: Add support for Hygon family 18h model 5h
  - EDAC/amd64: Add support for Hygon family 18h model 5h
  - x86/amd_nb: Add support for Hygon family 18h model 5h
  - x86/cpu: Get LLC ID for Hygon family 18h model 5h
  - i2c-piix4: Remove the IMC detecting for Hygon SMBus
  - hwmon/k10temp: Add support for Hygon family 18h model 4h
  - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h
  - EDAC/amd64: Add support for Hygon family 18h model 4h
  - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon
  - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC
  - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h
  - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
  - x86/microcode/hygon: Add microcode loading support for Hygon processors
  - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon
  - x86/MCE/AMD: Use an u64 for bank_map
  - EDAC/mc_sysfs: Increase legacy channel support to 12
  - EDAC/amd64: Add new register offset support and related changes
  - EDAC/amd64: Set memory type per DIMM
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  - EDAC: Add RDDR5 and LRDDR5 memory types
  - hwmon: (k10temp) Remove unused definitions
  - hwmon: (k10temp) Remove residues of current and voltage
  - hwmon: (k10temp) Rework the temperature offset calculation
  - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU
  - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems
  - x86/topology: Make __max_die_per_package available unconditionally
  - x86/cpu/amd: Set __max_die_per_package on AMD
  - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs
  - EDAC: Add DDR5 new memory type
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh
  - hwmon: (k10temp) Add support for Zen3 CPUs
  - x86/mce: Increase maximum number of banks to 64
  - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs
  - hwmon: (k10temp) Create common functions and macros for Zen CPU families
  - i2c: designware: Add device HID for Hygon I2C controller
  - hwmon: (k10temp) make some symbols static
  - hwmon: (k10temp) Reorganize and simplify temperature support detection
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs
  - hwmon: (k10temp) Report temperatures per CPU die
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info
  - hwmon: (k10temp) Use bitops
  - hwmon: Add convience macro to define simple static sensors
  - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
  - x86/umip: Make the UMIP activated message generic
  - x86/umip: Print UMIP line only once
  - x86/microcode/AMD: Clean up per-family patch size checks
  - !1689 [openEuler-1.0-LTS] drm/atomic-helper: Bump vblank timeout to 100 ms
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1807  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1844  net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - !1785  README: Remove out-of-date contribution guide
  - !1849  fs: jfs: fix possible NULL pointer dereference in dbFree()
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - !1836  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - README: Remove out-of-date contribution guide
  - drm/atomic-helper: Bump vblank timeout to 100 ms


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.1.0.0217
changelog:
  - !1964  crypto:padata: Fix return err for PADATA_RESET
  - !1955  fuse: revalidate: don't invalidate if interrupted
  - !1973  sched/smt: fix unbalance sched_smt_present dec/inc
  - sched/smt: fix unbalance sched_smt_present dec/inc
  - !1906  tracing: Fix memleak due to race between current_tracer and trace
  - !1958  block: don't get gendisk if queue has not been registered
  - crypto:padata: Fix return err for PADATA_RESET
  - block: don't get gendisk if queue has not been registered
  - fuse: revalidate: don't invalidate if interrupted
  - !1902  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-4
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


