# changelog

author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.5.0.0220
changelog:
  - !2274  cec-api: prevent leaking memory through hole in structure
  - !2281  sdei_watchdog: Avoid exception during sdei handler
  - sdei_watchdog: Avoid exception during sdei handler
  - cec-api: prevent leaking memory through hole in structure
  - !2262  crypto: hisilicon - reset before init the device
  - crypto: hisilicon - reset before init the device
  - !2212 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.2.0.0221
changelog:
  - !2322  net/sched: Retire rsvp classifier
  - !2346  RDMA/irdma: Prevent zero-length STAG registration
  - !2349  net: ipv4: fix one memleak in __inet_del_ifa()
  - !2329  ipv4: fix null-deref in ipv4_link_failure
  - !2342 linux-4.19.y inclusion
  - !2345  Backport lts bugfix patch for macvlan
  - !2344  PCI: acpiphp: linux-4.19.y bugfixes backport
  - !2341  quota: fix warning in dqgrab()
  - net: ipv4: fix one memleak in __inet_del_ifa()
  - !1706  cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - netfilter: nf_queue: fix socket leak
  - net/sched: fix a qdisc modification with ambiguous command request
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
  - sock: annotate data-races around prot->memory_pressure
  - !2337  mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()
  - RDMA/irdma: Prevent zero-length STAG registration
  - bonding: fix macvlan over alb bond support
  - net: remove bond_slave_has_mac_rcu()
  - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
  - PCI: acpiphp: Reassign resources on bridge if necessary
  - sock: Fix misuse of sk_under_memory_pressure()
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - ip_vti: fix potential slab-use-after-free in decode_session6
  - net: af_key: fix sadb_x_filter validation
  - net: xfrm: Fix xfrm_address_filter OOB read
  - serial: 8250: Fix oops for port->pm on uart_change_pm()
  - quota: Properly disable quotas when add_dquot_ref() fails
  - quota: fix warning in dqgrab()
  - !2335  x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - mm: memory-failure: use rcu lock instead of tasklist_lock when collect_procs()
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - ipv4: fix null-deref in ipv4_link_failure
  - net/sched: Retire rsvp classifier
  - !2301  xfrm6: fix inet6_dev refcount underflow problem
  - !2303  cifs: Release folio lock on fscache read hit.
  - cifs: Release folio lock on fscache read hit.
  - !2294  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - xfrm6: fix inet6_dev refcount underflow problem
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !2276  cpuidle: Fix kobject memory leaks in error paths
  - cpuidle: Fix kobject memory leaks in error paths
  - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.3.0.0222
changelog:
  - !2466  x86/microcode/AMD: Make stub function static inline
  - !2461  perf/core: Fix reentry problem in perf_output_read_group()
  - x86/microcode/AMD: Make stub function static inline
  - perf/core: Fix reentry problem in perf_output_read_group()
  - !2409  netfilter: nfnetlink_osf: avoid OOB read
  - !2330 Add a check of uvhub_mask in init_per_cpu()
  - x86/platform/uv: Fix missing checks of kcalloc() return values
  - x86/platform/UV: Replace kmalloc() and memset() with k[cz]alloc() calls
  - !2412  netfilter: xt_sctp: validate the flag_info count
  - !2419  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - netfilter: xt_sctp: validate the flag_info count
  - netfilter: nfnetlink_osf: avoid OOB read
  - !2360  scsi: hisi_sas: Handle the NCQ error returned by D2H frame
  - scsi: hisi_sas: Handle the NCQ error returned by D2H frame


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2310.4.0.0223
changelog:
  - !2334 ktask: add memory leak handling for ktask_works in ktask_init()
  - !2333 ktask: add null-pointer checks for ktask_works in ktask_init()
  - !2453  igb: set max size RX buffer when store bad packet is enabled
  - ktask: add memory leak handling for ktask_works in ktask_init()
  - ktask: add null-pointer checks for ktask_works in ktask_init()
  - !2441  netfilter: xt_u32: validate user space input
  - !2435  USB: ene_usb6250: Allocate enough memory for full object
  - igb: set max size RX buffer when store bad packet is enabled
  - netfilter: xt_u32: validate user space input
  - USB: ene_usb6250: Allocate enough memory for full object


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.1.0.0224
changelog:
  - !2609  Fix CVE-2023-5717
  - !2588 [openEuler-1.0-LTS] Add Phytium Display Engine support.
  - !2627  ubi: Refuse attaching if mtd's erasesize is 0
  - !2473  Revert irq reentrant warm log
  - !1860 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !2551  Avoid spin or livelock during panic
  - !2314  can: raw: add missing refcount for memory leak fix
  - !2396  efi: use 32-bit alignment for efi_guid_t literals
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2446  audit: fix possible soft lockup in __audit_inode_child()
  - !2614  CVE-2022-44033
  - DRM: Phytium display DRM document
  - DRM: Phytium display DRM driver
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !1974 CAN driver for phytium CPUs
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2577  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - can: can controller driver for phytium CPUs
  - !2550  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2557  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - printk: Drop console_sem during panic
  - printk: Avoid livelock with heavy printk during panic
  - printk: disable optimistic spin during panic
  - printk: Add panic_in_progress helper
  - xen/events: replace evtchn_rwlock with RCU
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gic-v3-its: Make is_v4 use a TYPER copy
  - Revert "genirq: Introduce warn log when irq be reentrant"
  - Revert "genirq: add printk safe in irq context"
  - audit: fix possible soft lockup in __audit_inode_child()
  - can: add phytium can driver document
  - efi: use 32-bit alignment for efi_guid_t literals
  - can: raw: add missing refcount for memory leak fix


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.2.0.0225
changelog:
  - !2793  handle uninitialized numa nodes gracefully.
  - !2789 linux-4.19.y inclusion
  - arch/x86/mm/numa: Do not initialize nodes twice
  - mm: handle uninitialized numa nodes gracefully
  - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG
  - !2713  Fix netfilter conntrack
  - !2651  sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - tcp: fix delayed ACKs for MSS boundary condition
  - tcp: fix quick-ack counting to count actual ACKs of new data
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
  - team: fix null-ptr-deref when team device type is changed
  - af_unix: Fix data race around sk->sk_err.
  - af_unix: Fix data-races around sk->sk_shutdown.
  - af_unix: Fix data-race around unix_tot_inflight.
  - af_unix: Fix data-races around user->unix_inflight.
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
  - net: read sk->sk_family once in sk_mc_loop()
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  - tcp: tcp_enter_quickack_mode() should be static
  - net: Avoid address overwrite in kernel_connect
  - md/raid1: fix error: ISO C90 forbids mixed declarations
  - md: raid1: fix potential OOB in raid1_remove_disk()
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
  - pstore/ram: Check start of empty przs during init
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
  - fs: Fix error checking for d_hash_and_lookup()
  - !2767  crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - crypto: hisilicon/qm - alloc reserve buffer to set and get xqc
  - !2760  fs: lockd: avoid possible wrong NULL parameter
  - !2164 Net: ethernet: Support 3snic 3s9xx network card
  - !2605 add CONFIG_NGBE for Wangxun 1G NIC for aarch64
  - !1873 [openEuler-1.0-LTS] Add Phytium hda driver support
  - !2564 [openEuler-1.0-LTS] Add Phytium i2c driver support
  - !2636  kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - fs: lockd: avoid possible wrong NULL parameter
  - !2754  Sync LTS patches for openEuler-1.0-LTS
  - !2758  crypto: hisilicon - qm obtain the mailbox config at one time
  - crypto: hisilicon - qm obtain the mailbox config at one time
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node
  - regmap: rbtree: Use alloc_flags for memory allocations
  - !2730  PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - !2722  net: sched: sch_qfq: Use non-work-conserving warning handler
  - !2650  sched/cpuacct: Fix charge cpuacct.usage_sys
  - PCI/IOV: Add pci_sriov_numvfs_lock to support enable pci sriov concurrently
  - net: sched: sch_qfq: Use non-work-conserving warning handler
  - arm64: config: add CONFIG_NGBE for Wangxun 1G NIC
  - netfilter: conntrack: fix infinite loop on rmmod
  - netfilter: conntrack: do not auto-delete clash entries on reply
  - netfilter: conntrack: allow insertion of clashing entries
  - netfilter: conntrack: split resolve_clash function
  - netfilter: conntrack: place confirm-bit setting in a helper
  - netfilter: conntrack: remove two args from resolve_clash
  - netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clash
  - sched/membarrier: fix missing local execution of ipi_sync_rq_state()
  - sched/cpuacct: Fix charge cpuacct.usage_sys
  - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  - hda: add phytium hda driver
  - hda: add phytium hda driver document
  - i2c: add Phytium i2c driver
  - i2c: add phytium i2c driver DT binding docs
  - Net: ethernet: Support 3snic 3s9xx network card


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.3.0.0226
changelog:
  - !2803 drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - !2841  drm/qxl: fix UAF on handle creation
  - !2785  [openEuler-1.0-LTS] SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA controllers
  - drm/qxl: fix UAF on handle creation
  - !2809  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: media/dvb: Use kmemdup rather than duplicating its implementation
  - media: dvbdev: Fix memleak in dvb_register_device
  - drivers/gmjstcm: fix a dev_err() call in spi tcm device probe
  - SCSI: SSSRAID: Support 3SNIC 3S5XX serial RAID/HBA  controllers


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.4.0.0227
changelog:
  - !1935 [openEuler-1.0-LTS] Add Phytium optee driver support
  - !2895  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2873 Fix SAS start error with maxcpus=1
  - genirq: Take the proposed affinity at face value if force==true
  - optee: add phytium optee driver
  - optee: model OP-TEE as a platform device/driver
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - !2508 [openEuler-1.0-LTS] jpeg: Add a Phytium JPEG Engine driver
  - !2522 [openEuler-1.0-LTS] Add support for Phytium SoC RNG
  - !2877  Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - !2693 [openEuler-1.0-LTS] Add support for Phytium QSPI
  - !2402 [openEuler-1.0-LTS] Add Phytium w1 driver support
  - !2403 [openEuler-1.0-LTS] Add Phytium adc driver support
  - !1874 [openEuler-1.0-LTS] Add Phytium mailbox driver support
  - !2024 [openEuler-1.0-LTS] Add Phytium RTC driver support
  - !2682 [openEuler-1.0-LTS] Add support for Phytium MMC
  - !2671 [openEuler-1.0-LTS] phytium dwmac net driver
  - !2676 [openEuler-1.0-LTS] Add Phytium gpio driver support
  - !2604 [openEuler-1.0-LTS] Add support for Phytium SPI
  - !2540 [openEuler-1.0-LTS] Driver for the Phytium keypad port.
  - Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - hwrng: Add support for Phytium SoC RNG
  - jpeg: Add a Phytium JPEG Engine driver
  - !2818  Fix memleak in disassociate_ctty()
  - !2810 drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - rtc: add phytium rtc driver document
  - rtc: add rtc drivers for Phytium SOCs
  - gpio: add phytium gpio driver
  - dwmac:add phytium dwmac driver
  - mailbox:add phytium mailbox driver document
  - mailbox: add phytium mailbox driver
  - mmc: add phytium mmc driver DT binding docs
  - mmc: add support for Phytium MMC
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
  - Revert "tty: fix pid memleak in disassociate_ctty()"
  - spi: add phytium spi driver DT binding docs
  - spi: add phytium spi support
  - qspi: add phytium qspi driver DT binding docs
  - qspi: add support for Phytium QSPI controller
  - gpio: add phytium gpio driver document
  - dwmac:add phytium dwmac driver DT binding docs
  - adc: add phytium adc driver
  - adc: add phytium adc driver document
  - w1: add phytium w1 driver
  - w1: add phytium w1 driver document
  - KEYPAD: Driver for the Phytium keypad port.
  - KEYPAD: Document for the Phytium keypad port.


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2311.5.0.0228
changelog:
  - !3000 [openEuler-1.0-LTS] add Phytium drivers CONFIG
  - arm64: config: add config for Phytium drivers
  - !2908  mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - !2869  mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - !2805  sched/fair: Refill bandwidth before scaling
  - !2804  signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal
  - !2960  Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - kbuild: ensure full rebuild when the compiler is updated
  - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - sched/fair: Refill bandwidth before scaling
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2312.1.0.0229
changelog:
  - !3158  mm: don't let userspace spam allocations warnings
  - mm: don't let userspace spam allocations warnings
  - !2781  cpufreq: Abort show()/store() for half-initialized policies
  - !3118  sched: smart grid: check is active in affinity timer
  - sched: smart grid: check is active in affinity timer
  - !2977  Backport crypto bugfix
  - !3071  perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - !3038  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3031  x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - !3030  x86/mce/inject: Fix a wrong assignment of i_mce.status
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - x86/mce/inject: Fix a wrong assignment of i_mce.status
  - crypto: fix kabi broken in struct crypto_instance
  - crypto: api - Use work queue in crypto_destroy_instance
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-36
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


