# changelog

author: liuxu <liuxu156@huawei.com> - 1:1.34.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-26
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tool_progress: avoid division by zero in parallel progress
         digest: pass over leading spaces in qop values
         Curl_close: call Curl_resolver_cancel to avoid memory-leak
         easy: fix the altsvc init for curl_easy_duphandle
         libssh: if sftp_init fails, don't get the sftp error code
         url: move back the IDN conversion of proxy names
         ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
         http: fix the ::1 comparison for IPv6 localhost for cookies
         multi: free up more data earleier in DONE
         curl_path: bring back support for SFTP path ending in /~
         transfer: refuse POSTFIELDS + RESUME_FROM combo
         tool_operate: refuse (--data or --form) and --continue-at
         http: free the url before storing a new copy
         url: fix null dispname for --connect-to option
         vtls: avoid memory leak if sha256 call fails
         urlapi: make sure zoneid is also duplicated in curl_url_dup


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:transfer: also stop the sending on closed connection
         openssl: avoid BN_num_bits() NULL pointer derefs


author: zhouyihang <zhouyihang3@h-partners.com> - 7.79.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: hantwofish <yinbin8@huawei.com> - 1.0.2-73
changelog:
  - xdp: support XDP_STATISTICS by posix_api->getsockopt_fn
  - add SO_NUMA_ID(optname) for adapting opneGauss
  - remove the unused return variable.
  - Fix annotation errors
  - bugfix: start fail when executing the popen command for the second time in openGauss


author: yinbin <jiangheng14@huawei.com> - 1.0.2-74
changelog:
  - LOG: Optimize some log displays
  - remove: code about nobolck mode for mysql
  - interrupt: fix timeout events cannot be counted


author: zhangxianting <zhangxianting@uniontech.com> - 9.55.0-10
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511


author: shixuantong <shixuantong1@huawei.com> - 2.34-157
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:enable shared library use huge page for aarch64 architecture
         revert "elf/ld.so: use special mmap for hugepage to get symbols"
         hugepageedit: static-link build
         elf: the hugepage feature of dynamic library keep compatible with llvm lld
         elf: add some debug info for dynamic library hugepage feature


author: chengyechun <chengyechun1@huawei.com> - 2.34-160
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:resolv: Track single-request fallback via _res._flags
         resolv: Allow short error responses to match any query


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: Li Nan <linan122@huawei.com> - 5.10.0-228.0.0.130
changelog:
  - !11504 sdma-dae support debugfs and fast mode
  - !10195  xfs: Fix agf_longest update error
  - !11505  Misc minor bugfix for HNS RoCE
  - RDMA/hns: Fix endian issues
  - RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
  - RDMA/hns: Fix "Should it be static?" warnings
  - RDMA/hns: Fix dereference of noderef expression
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
  - drivers:misc:sdma-dae: add fast mode
  - !11479 【OLK 5.10】some bugfixes for hns3 driver
  - driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
  - driver:misc:sdma-dae: add debugfs of sdma-dae
  - !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11478  coresight: etm4x: Fix CPU idle PM support for ETE
  - net: hns3: fix concurrent setting vlan filter issue
  - net: hns3: fix snprintf() is printing too much problem
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
  - net: hns3: fix spelling mistake "reg_um" -> "reg_num"
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  - net: hns3:support enable or disable pfc strom prevent
  - !11491  Fix CVE-2022-48887
  - net: hns3: fix wrong use of semaphore up
  - !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - !11462  mptcp: pm: avoid possible UaF when selecting endp
  - !11470 OLK-5.10 Rever gpiolib bugfix
  - drm/vmwgfx: Remove rcu locks from user resources
  - drm/vmwgfx: Remove vmw_user_bo_noref_release
  - drm/vmwgfx: Introduce ttm reference object find function
  - RDMA/hns: Fix missing unlock of scc_mutex in error path
  - !11487  bna: ensure the copied buf is NUL terminated
  - bna: ensure the copied buf is NUL terminated
  - coresight: etm4x: Fix access to resource selector registers
  - coresight: etm4x: Safe access for TRCQCLTR
  - coresight: etm4x: Do not save/restore Data trace control registers
  - coresight: etm4x: Do not hardcode IOMEM access for register restore
  - coresight: etm4x: add CPU hotplug support for probing
  - !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
  - !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
  - !11466 OLK-5.10 Rever spi bugfix
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
  - net: hns3: don't auto enable misc vector
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
  - Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
  - Revert "spi: Add verification for the max_frequency provided by the firmware"
  - !11104  soc: qcom: pdr: protect locator_addr with the main mutex
  - !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
  - !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  - mptcp: pm: avoid possible UaF when selecting endp
  - !11282  CVE-2024-44935
  - !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - !11437 sdma-dae:fix code review problems
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
  - !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  - !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - !11015  nvme-pci: add missing condition check for existence of mapped data
  - !11432 v2  mm/block: add bdi sysfs knobs
  - !11316  block: fix pin count management when merging same-page segments
  - drm/amd/display: Fix null pointer deref in dcn20_resource.c
  - drivers:misc:sdma-dae: fix icsl code check problems
  - coresight: etm4x: Fix unbalanced pm_runtime_enable()
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - mm: fix arithmetic for bdi min_ratio
  - mm: fix arithmetic for max_prop_frac when setting max_ratio
  - mm: document /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/min_ratio_fine knob
  - mm: add bdi_set_min_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add /sys/class/bdi/<bdi>/max_ratio_fine knob
  - mm: add bdi_set_max_ratio_no_scale() function
  - mm: document /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add /sys/class/bdi/<bdi>/min_bytes knob
  - mm: add bdi_set_min_bytes() function
  - mm: split off __bdi_set_min_ratio() function
  - mm: add bdi_get_min_bytes() function
  - mm: document /sys/class/bdi/<bdi>/max_bytes knob
  - mm: add knob /sys/class/bdi/<bdi>/max_bytes
  - mm: add bdi_set_max_bytes() function
  - mm: split off __bdi_set_max_ratio() function
  - mm: add bdi_get_max_bytes() function
  - mm: use part per 1000000 for bdi ratios
  - mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
  - mm: document /sys/class/bdi/<bdi>/strict_limit knob
  - mm: add knob /sys/class/bdi/<bdi>/strict_limit
  - mm: add bdi_set_strict_limit() function
  - !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - !11207  kprobe support %pd/%pD type
  - !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !11391  fix CVE-2023-45896
  - !11405  dma: fix call order in dmam_free_coherent
  - !11237  CVE-2024-43907
  - !11409  btrfs: do not start relocation until in progress drops are done
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - !10904 Incorporate some bonding patches as follows(OLK_5.10):
  - !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
  - !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - btrfs: do not start relocation until in progress drops are done
  - !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
  - !11403  btrfs: do not WARN_ON() if we have PageError set
  - dma: fix call order in dmam_free_coherent
  - !11394  dmaengine: idxd: Prevent use after free on completion memory
  - btrfs: do not WARN_ON() if we have PageError set
  - fuse: Initialize beyond-EOF page contents before setting uptodate
  - dmaengine: idxd: Prevent use after free on completion memory
  - fs/ntfs3: Add more attributes checks in mi_enum_attr()
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - nfsd: map the EBADMSG to nfserr_io to avoid warning
  - block: fix pin count management when merging same-page segments
  - sctp: Fix null-ptr-deref in reuseport_add_sock().
  - sctp: move hlist_node and hashent out of sctp_ep_common
  - perf parse-event bugfix merge
  - perf test: Add parse-events test for aliases with hyphens
  - perf test: Add pmu-events test for aliases with hyphens
  - perf parse-events: Support event alias in form foo-bar-baz
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  - RDMA/hns: Fix concurrency issue between bond work and bond event
  - RDMA/hns: Fix UAF in clear bond printing
  - RDMA/hns: Encapsulate upper event and lowerstate event handlers
  - RDMA/hns: Register notifier block of bonding events in bond_grp
  - selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
  - Documentation: tracing: add new type '%pd' and '%pD' for kprobe
  - tracing/probes: support '%pD' type for print struct file's name
  - tracing/probes: support '%pd' type for print struct dentry's name
  - soc: qcom: pdr: protect locator_addr with the main mutex
  - nvme-pci: add missing condition check for existence of mapped data
  - xfs: Fix agf_longest update error
  - Fix x86 provides error symbol


author: Li Nan <linan122@huawei.com> - 5.10.0-229.0.0.131
changelog:
  - !11565 ip_notify:Clean up redundant import files
  - network_mgmt: Clean up redundant import files for ip_notify.c.
  - !11521  ipv6: prevent UAF in ip6_send_skb()
  - !11517  ipv6: fix possible UAF in ip6_finish_output2()
  - !11514  fix CVE-2024-44988
  - !11526 IP notify code optimization
  - !11552  mm/hugetlb: fix pgtable lock on pmd sharing
  - network_mgmt: Add ip_notify timer print.
  - !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11553  mm: fix failure to unmap pte on highmem systems
  - !11488  wifi: nl80211: don't free NULL coalescing rule
  - mm: fix failure to unmap pte on highmem systems
  - mm/hugetlb: fix pgtable lock on pmd sharing
  - ata: libata: Fix memory leak for error path in ata_host_alloc()
  - !11456 Backport 5.10.216 LTS patches from upstream
  - !11484  drm/qxl: Add check for drm_cvt_mode
  - !11457  usb: gadget: core: Check for unset descriptor
  - !11475  Fix CVE-2023-52916
  - !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
  - ipv6: prevent UAF in ip6_send_skb()
  - ipv6: fix possible UAF in ip6_finish_output2()
  - net: dsa: mv88e6xxx: Fix out-of-bound access
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points
  - net: dsa: mv88e6xxx: read FID when handling ATU violations
  - x86/mtrr: Check if fixed MTRRs exist before saving them
  - !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
  - wifi: nl80211: don't free NULL coalescing rule
  - drm/qxl: Add check for drm_cvt_mode
  - media: aspeed: Fix memory overwrite if timing is 1600x900
  - media: aspeed: Fix no complete irq for non-64-aligned width
  - usb: gadget: core: Check for unset descriptor
  - udp: preserve the connected status if only UDP cmsg
  - dma: xilinx_dpdma: Fix locking
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: owl: fix register access functions
  - mtd: diskonchip: work around ubsan link failure
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - PM / devfreq: Fix buffer overflow in trans_stat_show
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
  - tracing: Show size of requested perf buffer
  - Revert "crypto: api - Disallow identical driver names"
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - ipvs: Fix checksumming on GSO of SCTP packets
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - NFC: trf7970a: disable all regulators on removal
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - vxlan: drop packets from invalid src-address
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
  - arm64: dts: mediatek: mt7622: add support for coherent DMA
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - nilfs2: fix OOB in nilfs_set_de_type
  - nouveau: fix instmem race condition around ptr stores
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Print an info line before disabling unused clocks
  - clk: remove extra empty line
  - clk: Mark 'all_lists' as const
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - selftests/ftrace: Limit length in subsystem-enable tests
  - btrfs: record delayed inode root in transaction
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - mailbox: imx: fix suspend failue
  - iommu/vt-d: Allocate local memory for page request queue
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - nouveau: fix function cast warning
  - media: cec: core: remove length check of Timer Status


author: Li Nan <linan122@huawei.com> - 5.10.0-230.0.0.132
changelog:
  - !11771  tools: move alignment-related macros to new <linux/align.h>
  - !11729  scsi: qedi: Fix crash while reading debugfs attribute
  - tools: move alignment-related macros to new <linux/align.h>
  - !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - !11707  btrfs: fix qgroup reserve leaks in cow_file_range
  - !11723 v2  Squashfs: sanity check symbolic link size
  - !11708  CVE-2024-46751
  - !11728  lib: objagg: Fix general protection fault
  - !11727  jfs: fix null ptr deref in dtInsertEntry
  - !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - !11690  sch/netem: fix use after free in netem_dequeue
  - !11693  Fix CVE-2024-39501
  - !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11701  userfaultfd: fix checks for huge PMDs
  - !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
  - scsi: qedi: Fix crash while reading debugfs attribute
  - lib: objagg: Fix general protection fault
  - jfs: fix null ptr deref in dtInsertEntry
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling
  - Squashfs: sanity check symbolic link size
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
  - btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
  - btrfs: fix qgroup reserve leaks in cow_file_range
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  - userfaultfd: fix checks for huge PMDs
  - x86/mm: Fix pti_clone_pgtable() alignment assumption
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
  - !8831 Add support for Hygon model 7h processors
  - !11665  drm/amd/pm: fix the Out-of-bounds read warning
  - sch/netem: fix use after free in netem_dequeue
  - !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - !11649  fix CVE-2024-46714
  - drm/amd/pm: fix the Out-of-bounds read warning
  - !11632  fix CVE-2024-46723
  - !11555 v2  Fix CVE-2024-45025
  - !11588  drm/amd/display: Skip finding free audio for unknown engine_id
  - !11586  jfs: don't walk off the end of ealist
  - !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
  - !11637  netfilter: tproxy: bail out if IP has been disabled on the device
  - !11562  Backport bugfix from mainline
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - netfilter: tproxy: bail out if IP has been disabled on the device
  - !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
  - !11612  Input: uinput - reject requests with unreasonable number of slots
  - drm/amdgpu: fix ucode out-of-bounds read
  - !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  - drivers/perf: hisi_pcie: Record hardware counts correctly
  - docs: fix 'make htmldocs' warning in perf
  - docs: perf: Fix build warning of hisi-pcie-pmu.rst
  - docs: perf: Update usage for target filter of hisi-pcie-pmu
  - drivers/perf: hisi: Add TLP filter support
  - Documentation: perf: Indent filter options list of hisi-pcie-pmu
  - docs: perf: Fix PMU instance name of hisi-pcie-pmu
  - docs: perf: Add description for HiSilicon PCIe PMU driver
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
  - !11606  Fix iBMA bug and change version
  - mmc: mmc_test: Fix NULL dereference on allocation failure
  - Input: uinput - reject requests with unreasonable number of slots
  - !11592  CVE-2024-36915
  - !10933  drm/amd/display: Check index msg_id before read or write
  - !10936  ata: libata-core: Fix null pointer dereference on error
  - !11604 hns3 udma: add resource allocation and change name of struct
  - BMA: Fix edma driver initialization problem and change the version number.
  - !11593  gtp: pull network headers in gtp_dev_xmit()
  - hns3 udma: add prefix hns3 for udma.
  - !11583  nfs: always check dreq->error after a commit
  - !11584  vfs: Don't evict inode under the inode lru traversing context
  - !11577  tcp: fix one compile error in __inet_hash_connect()
  - !11578  net: fix one compile error in net_rship_refresh_timeout()
  - gtp: pull network headers in gtp_dev_xmit()
  - nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
  - net: add copy_safe_from_sockptr() helper
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - !11574  nilfs2: add missing check for inode numbers on directory entries
  - jfs: don't walk off the end of ealist
  - vfs: Don't evict inode under the inode lru traversing context
  - nfs: always check dreq->error after a commit
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - net: fix one compile error in net_rship_refresh_timeout()
  - tcp: fix one compile error in __inet_hash_connect()
  - nilfs2: add missing check for inode numbers on directory entries
  - !11570  NFSD: Fix ia_size underflow
  - NFSD: Fix ia_size underflow
  - mm/compaction: correctly return failure with bogus compound_order in strict mode
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
  - bootmem: use kmemleak_free_part_phys in free_bootmem_page
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
  - mm: migrate: fix THP's mapcount on isolation
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  - enable CONFIG_BPF_LSM option by default to use safegurad
  - ata: libata-core: Fix null pointer dereference on error
  - drm/amd/display: Check index msg_id before read or write
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - Fix error kernel provides


author: Li Nan <linan122@huawei.com> - 5.10.0-231.0.0.133
changelog:
  - !11964  drm/amd/pm: Fix negative array index read
  - !12073  kprobes: Fix deadlock issue with kmemleak
  - !12062  CVE-2024-46857
  - kprobes: Fix deadlock issue with kmemleak
  - !12050  um: line: always fill *error_out in setup_one_line()
  - !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
  - !12020  drm/amd/display: Check gpio_id before used as array index
  - !12024  ASoC: meson: axg-card: fix 'use-after-free'
  - !12034  ksmbd: discard write access to the directory open
  - !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !11942  sbitmap: backport bugfix patches
  - net/mlx5: Fix bridge mode operations when there are no VFs
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
  - !11998  drm/amd/display: Add array index check for hdcp ddc access
  - !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
  - um: line: always fill *error_out in setup_one_line()
  - !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
  - !12015  perf/x86/intel: Limit the period on Haswell
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - !12028  Fix CVE-2024-44958 for olk-5.10
  - !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
  - !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
  - ksmbd: discard write access to the directory open
  - serial: sc16is7xx: fix invalid FIFO access with special register set
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - sched: Revert fix unbalance sched_smt_present dec/inc
  - ASoC: meson: axg-card: fix 'use-after-free'
  - drm/amd/display: Check gpio_id before used as array index
  - !11999  nvmet-tcp: fix kernel crash if commands allocation fails
  - perf/x86/intel: Limit the period on Haswell
  - !12006 v3  add steal_task for cgroup
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - sched/core: Add mutex lock to protect steal_task
  - sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
  - sched/fair: Set the maximum number of steal attempts
  - sched/fair: Count the number of tasks marked as steal_task on cfs_rq
  - sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
  - sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
  - sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
  - Revert "sched: add mutex lock to protect qos_level"
  - !11907  ksmbd: unset the binding mark of a reused connection
  - drm/amd/display: Assign linear_pitch_alignment even for VM
  - nvmet-tcp: fix kernel crash if commands allocation fails
  - drm/amd/display: Add array index check for hdcp ddc access
  - !11976  CVE-2024-46814
  - !11941  usb: typec: ucsi: Fix null pointer dereference in trace
  - !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - drm/amd/display: Check msg_id before processing transcation
  - drm/amd/pm: Fix negative array index read
  - Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
  - !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - !11916  ethtool: check device is present when getting link settings
  - !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - !11928  Some bug fix patches for OLK-5.10 hns RoCE
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
  - blk-mq: Fix potential io hung for shared sbitmap per tagset
  - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
  - sbitmap: fix lockup while swapping
  - sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
  - sbitmap: fix possible io hung due to lost wakeup
  - block: Fix lockdep warning in blk_mq_mark_tag_wait
  - blk-mq: fix potential io hang by wrong 'wake_batch'
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang
  - blk-mq: fix tag_get wait task can't be awakened
  - usb: typec: ucsi: Fix null pointer dereference in trace
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  - RDMA/hns: Fix restricted __le16 degrades to integer issue
  - RDMA/hns: Optimize hem allocation performance
  - btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
  - !11925  nilfs2: protect references to superblock parameters exposed in sysfs
  - !11914  sched: fix a deadlock in task_net_group()
  - !11843  CVE-2024-46771
  - RDMA/hns: Fix ah error counter in sw stat not increasing
  - Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
  - RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
  - RDMA/hns: Use one CQ bank per context for HIP09
  - RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - ethtool: check device is present when getting link settings
  - !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
  - !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
  - !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
  - !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - sched: fix a deadlock in task_net_group()
  - !11867  pktgen: use cpus_read_lock() in pg_net_init()
  - !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - ksmbd: unset the binding mark of a reused connection
  - !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11903  scsi: aacraid: Fix double-free on probe failure
  - !11875  btrfs: handle errors from btrfs_dec_ref() properly
  - scsi: aacraid: Fix double-free on probe failure
  - !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - bcache: fix variable length array abuse in btree_iter
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !11881  PCI: Add missing bridge lock to pci_bus_lock()
  - !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
  - !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - !11866 v2  drm/amd/display: Ensure index calculation will not overflow
  - !11791  nilfs2: fix missing cleanup on rollforward recovery error
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - PCI: Add missing bridge lock to pci_bus_lock()
  - btrfs: handle errors from btrfs_dec_ref() properly
  - !11767 [sync] PR-11733:  Input: MT - limit max slots
  - !11847  bpf: verifier: prevent userspace memory access
  - !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  - pktgen: use cpus_read_lock() in pg_net_init()
  - drm/amd/display: Ensure index calculation will not overflow
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - !11494  ext4: Fix race in buffer_head read fault injection
  - !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - !11673  netem: fix return value if duplicate enqueue fails
  - !11810  apparmor: fix possible NULL pointer dereference
  - !11805  drm/amdgpu: Fix out-of-bounds write warning
  - !11678  udf: Avoid excessive partition lengths
  - !11680  binder: fix UAF caused by offsets overwrite
  - !11784  perf/x86: Serialize set_attr_rdpmc()
  - !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - bpf: verifier: prevent userspace memory access
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  - !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
  - !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook
  - apparmor: fix possible NULL pointer dereference
  - drm/amdgpu: Fix out-of-bounds write warning
  - modify for ICSL.
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  - nilfs2: fix missing cleanup on rollforward recovery error
  - perf/x86: Serialize set_attr_rdpmc()
  - !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
  - !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - !11752  driver: iio: add missing checks on iio_info's callback access
  - !11773  A group of optimization and bug fix for numa-affinity
  - mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
  - mm: numa-affinity: adapt for task_numa_placement
  - mm: numa-affinity: adapt for should_numa_migrate_memory
  - mm: numa-affinity: add helper numa_affinity_sampling_enabled()
  - mm: thp: support to control numa migration
  - Input: MT - limit max slots
  - driver: iio: add missing checks on iio_info's callback access
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - binder: fix UAF caused by offsets overwrite
  - udf: Avoid excessive partition lengths
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - netem: fix return value if duplicate enqueue fails
  - ext4: Fix race in buffer_head read fault injection


author: Li Nan <linan122@huawei.com> - 5.10.0-232.0.0.134
changelog:
  - !12102  Fix CVE-2024-46826
  - !12219 v7  xfs: some fix for forcealign
  - !12121  CVE-2024-43855
  - !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
  - xfs: correct the truncate blocksize of forcealign
  - xfs: refactor the truncating order
  - iomap: pass blocksize to iomap_truncate_page()
  - math64: add rem_u64() to just return the remainder
  - xfs: only bunmap align in datafork for forcealign
  - xfs: forcealign not compatible with reflink and realtime device
  - xfs: simplify extent allocation alignment
  - xfs: don't attempting non-aligned fallbacks alloc for forcealign
  - xfs: Don't revert allocated offset for forcealign
  - xfs: align args->minlen for forced allocation alignment
  - xfs: always tail align maxlen allocations
  - xfs: only allow minlen allocations when near ENOSPC
  - !12136 Backport some SAS patches to OLK-5.10
  - !12215  net/hinic3: fix version showed in ethtool
  - !12166  crypto: stm32/cryp - call finalize with bh disabled
  - !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
  - net/hinic3: fix version showed in ethtool
  - !12142  nfc: pn533: Add poll mod list filling check
  - !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
  - atm: idt77252: prevent use after free in dequeue_rx()
  - !12172  fou: remove warn in gue_gro_receive on unsupported protocol
  - !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - ima: Avoid blocking in RCU read-side critical section
  - Revert "ima: Avoid blocking in RCU read-side critical section"
  - !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12133  ALSA: line6: Fix racy access to midibuf
  - fou: remove warn in gue_gro_receive on unsupported protocol
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - crypto: stm32/cryp - call finalize with bh disabled
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
  - !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
  - !12126  ice: Add netif_device_attach/detach into PF reset flow
  - !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12135 Backport 5.10.217 LTS patches from upstream
  - regulator: core: fix debugfs creation regression
  - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  - mei: me: add lunar lake point M DID
  - ASoC: tegra: Fix DSPK 16-bit playback
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  - iio: accel: mxc4005: Interrupt handling fixes
  - iio:imu: adis16475: Fix sync mode setting
  - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  - usb: dwc3: core: Prevent phy suspend during init
  - usb: xhci-plat: Don't include xhci.h
  - usb: gadget: f_fs: Fix a race condition when processing setup packets.
  - usb: gadget: composite: fix OS descriptors w_value logic
  - usb: ohci: Prevent missed ohci interrupts
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  - usb: typec: ucsi: Fix connector check on init
  - usb: typec: ucsi: Check for notifications after init
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells
  - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - kcov: Remove kcov include from sched.h and move it to its users.
  - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  - hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  - hwmon: (corsair-cpro) Use a separate buffer for sending commands
  - net:usb:qmi_wwan: support Rolling modules
  - drm/nouveau/dp: Don't probe eDP ports twice harder
  - fs/9p: drop inodes immediately on non-.L too
  - clk: Don't hold prepare_lock when calling kref_put()
  - gpio: crystalcove: Use -ENOTSUPP consistently
  - gpio: wcove: Use -ENOTSUPP consistently
  - 9p: explicitly deny setlease attempts
  - fs/9p: translate O_TRUNC into OTRUNC
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  - MIPS: scall: Save thread_info.syscall unconditionally on entry
  - gpu: host1x: Do not setup DMA for virtual devices
  - scsi: target: Fix SELinux error when systemd-modules loads the target module
  - btrfs: always clear PERTRANS metadata during commit
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  - tools/power turbostat: Fix Bzy_MHz documentation typo
  - tools/power turbostat: Fix added raw MSR output
  - ata: sata_gemini: Check clk_enable() result
  - net: bcmgenet: Reset RBUF on first open
  - ALSA: line6: Zero-initialize message buffers
  - btrfs: return accurate error code on open failure in open_fs_devices()
  - net: mark racy access on sk->sk_rcvbuf
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  - gfs2: Fix invalid metadata access in punch_hole
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  - net: gro: add flush check in udp_gro_receive_segment
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  - cxgb4: Properly lock TX queue for the selftest.
  - ASoC: meson: cards: select SND_DYNAMIC_MINORS
  - ASoC: Fix 7/8 spaces indentation in Kconfig
  - net: qede: use return from qede_parse_actions()
  - net: qede: use return from qede_parse_flow_attr() for flow_spec
  - net: qede: use return from qede_parse_flow_attr() for flower
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  - s390/vdso: Add CFI for RA register to asm macro vdso_func
  - net l2tp: drop flow hash on forward
  - s390/mm: Fix clearing storage keys for huge pages
  - s390/mm: Fix storage key clearing for guest huge pages
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  - nfc: pn533: Add poll mod list filling check
  - arm64/mpam: Be compatible with MPAM architecture v1.x
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  - scsi: libsas: Fix the failure of adding phy with zero-address to port
  - scsi: libsas: Set port when ex_phy is added or deleted
  - scsi: libsas: Move sas_add_parent_port() to sas_expander.c
  - scsi: libsas: Add helper for port add ex_phy
  - ALSA: line6: Fix racy access to midibuf
  - sched: sch_cake: fix bulk flow accounting logic for host fairness
  - ice: Add netif_device_attach/detach into PF reset flow
  - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  - !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
  - !12043  s390/sclp: Prevent release of buffer in I/O
  - md: ensure child flush IO does not affect origin bio->bi_status
  - md: Remove flush handling
  - !8834 Add support for Hygon model 10h processors
  - !12105  sched/fair: Fix the condition in overload_clear
  - !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - !12003  perf cpumap: Wrapper for CPU map indices
  - !12096  CVE-2024-46858
  - !12095  net: dpaa: Pad packets to ETH_ZLEN
  - !12094  netfilter: nft_socket: fix sk refcount leaks
  - !12089  USB: usbtmc: prevent kernel-usb-infoleak
  - sched/fair: Fix the condition in overload_clear
  - sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - mptcp: pm: Fix uaf in __timer_delete_sync
  - mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
  - mptcp: export lookup_anno_list_by_saddr
  - net: dpaa: Pad packets to ETH_ZLEN
  - netfilter: nft_socket: fix sk refcount leaks
  - !12088  tracing: Have tracing_max_latency inc the trace array ref count
  - USB: usbtmc: prevent kernel-usb-infoleak
  - tracing: Have tracing_max_latency inc the trace array ref count
  - !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - !12084  drm/i915/gt: Cleanup partial engine discovery failures
  - !12048  Add generic xdp xsk multi-buffer recv for ipvlan
  - !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
  - !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - drm/i915/gt: Cleanup partial engine discovery failures
  - !11558  mm/ksm: fix possible UAF of stable_node
  - !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  - xsk: Add generic xdp multi-buffer recv support
  - ipvlan: support use xdp native mode
  - s390/dasd: fix error recovery leading to data corruption on ESE devices
  - s390/sclp: Prevent release of buffer in I/O
  - perf cpumap: Wrapper for CPU map indices
  - UNIC: The ublhdr structure and UBL_HLEN macro are modified
  - UNIC: Invoke the hns3_unic_set_default_cc in advance
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - x86/amd_nb: Get DF ID for Hygon family 18h model 7h
  - mm/ksm: fix possible UAF of stable_node


author: Li Nan <linan122@huawei.com> - 5.10.0-233.0.0.135
changelog:
  - !12315 perf pmu: resolve CPU map for "cpu" PMUs
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - !12072 sdma-dae: fix possible mremap error
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - Revert "perf cpumap: Add is_subset function"
  - Revert "perf cpumap: Add intersect function"
  - Revert "perf pmu: Add CPU map for "cpu" PMUs"
  - Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
  - !12298  CVE-2024-46822
  - drivers:misc:sdma-dae: add vma_ops to avoid mremap error
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header
  - !12261  drm/lima: fix a memleak in lima_heap_alloc
  - !12262  media: go7007: fix a memleak in go7007_load_encoder
  - !12257  octeontx2-af: Use separate handlers for interrupts
  - !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - drm/amd/display: Avoid overflow from uint32_t to uint8_t
  - !12244 v2  net/mlx5e: Fix netif state handling
  - !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
  - media: go7007: fix a memleak in go7007_load_encoder
  - drm/lima: fix a memleak in lima_heap_alloc
  - octeontx2-af: Use separate handlers for interrupts
  - !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12164 Backport 5.10.218 LTS patches from upstream
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  - !12155  bonding: Fix CVE-2024-44990
  - !12153  bonding: fix xfrm real_dev null pointer dereference
  - !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
  - xfs: atomic write file dio convert to mark IOCB_ATOMIC
  - !12115  md/raid1: don't free conf on raid0_run failure
  - !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - netfilter: nf_tables: use timestamp to check for set element timeout
  - net/mlx5e: Fix netif state handling
  - !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
  - !12182  netns: Make get_net_ns() handle zero refcount net
  - !12179  net/sched: Fix CVE-2024-36244
  - !12176  ipv6: sr: fix invalid unregister error path
  - !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
  - !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - !12213  scsi: qla2xxx: During vport delete send async logout explicitly
  - !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - !12227  nbd: Fix signal handling
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
  - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  - !12208  Some bugfixs for ubi/fs
  - nbd: Fix signal handling
  - nbd: Improve the documentation of the locking assumptions
  - !11910  ext4: dax: Fix inconsistent isize during writing
  - !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - locks: fix TOCTOU race when granting write lease
  - ubi: block: fix null-pointer-dereference in ubiblock_create()
  - ubi: block: Remove in vain semicolon
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
  - ipv4: Fix uninit-value access in __ip_make_skb()
  - mlxsw: spectrum_acl_erp: Fix object nesting warning
  - netns: Make get_net_ns() handle zero refcount net
  - net/sched: taprio: extend minimum interval restriction to entire cycle too
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
  - ipv6: sr: fix invalid unregister error path
  - docs: kernel_include.py: Cope with docutils 0.21
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  - usb: typec: ucsi: displayport: Fix potential deadlock
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  - KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
  - netlink: annotate lockless accesses to nlk->max_recvmsg_len
  - net: bcmgenet: synchronize UMAC_CMD access
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
  - perf arm: Workaround ARM PMUs cpu maps having offline cpus
  - perf pmu: Add CPU map for "cpu" PMUs
  - bonding: fix null pointer deref in bond_ipsec_offload_ok
  - bonding: fix bond_ipsec_offload_ok return type
  - bonding: fix xfrm real_dev null pointer dereference
  - perf cpumap: Add intersect function
  - perf cpumap: Add is_subset function
  - md/raid1: don't free conf on raid0_run failure
  - blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
  - ext4: dax: keep orphan list before truncate overflow allocated blocks
  - ext4: dax: fix overflowing extents beyond inode size when partially writing
  - gpio: prevent potential speculation leaks in gpio_device_get_desc()


author: Li Nan <linan122@huawei.com> - 5.10.0-234.0.0.136
changelog:
  - !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12248  nilfs2: fix state management in error path of log writing function
  - !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
  - !12640  sock_map: Add a cond_resched() in sock_hash_free()
  - !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - !12639  net: do not delay dst_entries_add() in dst_release()
  - !12621  apparmor: fix policy_unpack_test on big endian systems
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
  - !12611  drm/amd/display: Check null pointer before dereferencing se
  - !12596  scsi: fnic: Move flush_work initialization out of if block
  - !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12615  writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !12620  PCI: mt7621: Add sentinel to quirks table
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - sock_map: Add a cond_resched() in sock_hash_free()
  - net: do not delay dst_entries_add() in dst_release()
  - !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - apparmor: fix policy_unpack_test on big endian systems
  - !12571 v2  Randomized Kmalloc 5.10 Backport V2
  - PCI: mt7621: Add sentinel to quirks table
  - !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
  - !12605  fix CVE-2024-46802
  - !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - !8925  ext4: avoid deadlock in fs reclaim with page writeback
  - drm/amd/display: Check null pointer before dereferencing se
  - !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
  - !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12460  NFSD: Limit the number of concurrent async COPY operations
  - !12560  fix CVE-2024-49900
  - !12569  fix CVE-2024-47667
  - drm/amd/display: fix mixed declarations warning
  - drm/amd/display: added NULL check at start of dc_validate_stream
  - !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - scsi: fnic: Move flush_work initialization out of if block
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
  - !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - Randomized slab caches for kmalloc()
  - mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
  - !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - !12424  jfs: check if leafidx greater than num leaves per dmap tree
  - !12425  jfs: Fix uaf in dbFreeBits
  - !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  - !12542  media: pci: cx23885: check cx23885_vdev_init() return
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  - !12369  x86/ioapic: Handle allocation failures gracefully
  - media: pci: cx23885: check cx23885_vdev_init() return
  - kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - !12511  jfs: Fix array-index-out-of-bounds in diFree
  - !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
  - !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
  - !12252  KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - !12382  fix CVE-2024-46675
  - !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - !12467  fix CVE-2024-42301
  - !12310  fix CVE-2024-40965
  - !12484  CVE-2024-38667
  - !12480  CVE-2024-36286
  - !12454  soundwire: cadence: fix invalid PDI offset
  - jfs: Fix array-index-out-of-bounds in diFree
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - exfat: fix potential deadlock on __exfat_get_dentry_set
  - ocfs2: cancel dqi_sync_work before freeing oinfo
  - !12411  CVE-2024-43894
  - riscv: prevent pt_regs corruption for secondary idle threads
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
  - !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - parport: Proper fix for array out-of-bounds access
  - dev/parport: fix the array out-of-bounds risk
  - drm/amd/display: Initialize get_bytes_per_element's default to 1
  - NFSD: Limit the number of concurrent async COPY operations
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
  - soundwire: cadence: fix invalid PDI offset
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
  - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  - !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
  - !12395  tracing/timerlat: Fix a race during cpuhp processing
  - !12406  fix CVE-2024-43841
  - jfs: Fix uaf in dbFreeBits
  - jfs: check if leafidx greater than num leaves per dmap tree
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  - drm/client: fix null pointer dereference in drm_client_modeset_probe
  - wifi: virt_wifi: don't use strlen() in const context
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - tracing/timerlat: Fix a race during cpuhp processing
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - !12349  neighbour: fix data-races around n->output
  - !12294  nfsd: return -EINVAL when namelen is 0
  - x86/ioapic: Handle allocation failures gracefully
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
  - !12344  of: module: prevent NULL pointer dereference in vsnprintf()
  - !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - !12334  drm/nouveau: prime: fix refcount underflow
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  - neighbour: fix data-races around n->output
  - !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
  - !12332 hns3 udma: delete irrl and trrl table
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment
  - hns3 udma: delete irrl and trrl table.
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  - drm/nouveau: prime: fix refcount underflow
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  - nfsd: call cache_put if xdr_reserve_space returns NULL
  - i2c: lpi2c: Avoid calling clk_get_rate during transfer
  - i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
  - i2c: imx-lpi2c: use bulk clk API
  - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
  - clk: Add a devm variant of clk_rate_exclusive_get()
  - soc: qcom: cmd-db: Map shared memory as WC, not WB
  - nfsd: return -EINVAL when namelen is 0
  - blk-mq: fix blk_mq_hw_ctx active request accounting
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  - nilfs2: fix state management in error path of log writing function
  - mptcp: pm: only decrement add_addr_accepted for MPJ req
  - ext4: avoid deadlock in fs reclaim with page writeback


author: Li Nan <linan122@huawei.com> - 5.10.0-235.0.0.137
changelog:
  - !13009  CVE-2024-49950
  - !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
  - !13003  CVE-2024-50064
  - !13051  ext4: fix CVE-2024-47701
  - !12680  smb: client: fix UAF in async decryption
  - !13039  static_call: Handle module init failure correctly in static_call_del_module()
  - !13017  f2fs: fix to wait dio completion
  - !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - !13015  drm/amd/display: Check stream before comparing them
  - !13019  l2tp: prevent possible tunnel refcount underflow
  - !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - !12992  igb: Do not bring the device up after non-fatal error
  - !12994  drm/amd/display: Check BIOS images before it is used
  - !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
  - !12901  ext4: fix double brelse() the buffer of the extents path
  - !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
  - !12958  ext4: update orig_path in ext4_find_extent()
  - static_call: Handle module init failure correctly in static_call_del_module()
  - !12449  scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
  - l2tp: prevent possible tunnel refcount underflow
  - f2fs: fix to wait dio completion
  - !12884  CVE-2024-50016
  - !12844  ACPI: sysfs: validate return type of _STR method
  - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  - drm/amd/display: Check stream before comparing them
  - !12998  f2fs: get rid of online repaire on corrupted directory
  - !12911  fsnotify: fix CVE-2024-47660
  - !12908  io_uring: fix CVE-2024-50060
  - !12879  drm/stm: Avoid use-after-free issues with crtc and plane
  - !12915  CVE-2022-48961
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - !12944  fix CVE-2024-47723
  - !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12954  memcg_write_event_control(): fix a user-triggerable oops
  - !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - !12870  Fix CVE-2024-47703
  - !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
  - zram: don't free statically defined names
  - zram: free secondary algorithms names
  - [Backport]scsi: libsas: Fix disk not being scanned in after being removed
  - [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
  - f2fs: get rid of online repaire on corrupted directory
  - [Backport]scsi: libsas: Introduce struct smp_disc_resp
  - !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
  - !12686  security/keys: fix slab-out-of-bounds in key_task_permission
  - drm/amd/display: Check BIOS images before it is used
  - igb: Do not bring the device up after non-fatal error
  - !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
  - !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - !12875  tipc: guard against string buffer overrun
  - ext4: update orig_path in ext4_find_extent()
  - memcg_write_event_control(): fix a user-triggerable oops
  - !12781  uprobes: fix kernel info leak via "[uprobes
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
  - !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
  - jfs: Fix sanity check in dbMount
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  - !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gpiolib: fix memory leak in gpiochip_setup_dev()
  - tcp: fix mptcp DSS corruption due to large pmtu xmit
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - gso: fix udp gso fraglist segmentation after pull from frag_list
  - !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12790  slip: make slhc_remember() more robust against malicious packets
  - !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
  - !12737  r8169: add tally counter fields added with RTL8125
  - !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - !12778  riscv: Sync efi page table's kernel mappings before switching
  - !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
  - net: mdio: use device_set_node() to setup both fwnode and of
  - fsnotify: clear PARENT_WATCHED flags lazily
  - fsnotify: remove unused declaration
  - fsnotify: Fix comment typo
  - io_uring: check if we need to reschedule during overflow flush
  - io_uring: always lock __io_cqring_overflow_flush
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
  - UNIC: Eliminate compile warnings
  - drm/stm: Avoid use-after-free issues with crtc and plane
  - tipc: guard against string buffer overrun
  - bpf, lsm: Add check for BPF LSM return value
  - bpf, lsm: Add disabled BPF LSM hook list
  - hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
  - !12525  powercap: intel_rapl: Fix off by one in get_rpi()
  - !12818  media: venus: fix use after free bug in venus_remove due to race condition
  - !12825  drm/amd/display: Check null pointers before using them
  - !12798  uprobe: avoid out-of-bounds memory access of fetching args
  - ACPI: sysfs: validate return type of _STR method
  - !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  - !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12754  CVE-2024-50063
  - !12488  gtp: fix a potential NULL pointer dereference
  - !12762  smack: tcp: ipv4, fix incorrect labeling
  - drm/amd/display: Check null pointers before using them
  - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  - media: venus: fix use after free bug in venus_remove due to race condition
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - uprobe: avoid out-of-bounds memory access of fetching args
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  - !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - slip: make slhc_remember() more robust against malicious packets
  - uprobes: fix kernel info leak via "[uprobes]" vma
  - riscv: Sync efi page table's kernel mappings before switching
  - hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
  - !12551  cifs: Fix buffer overflow when parsing NFS reparse points
  - !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  - !12723  ppp: fix ppp_async_encode() illegal access
  - smack: tcp: ipv4, fix incorrect labeling
  - !12733  CVE-2024-50059
  - !12373  fix CVE-2024-49954
  - !12705  fix CVE-2024-49924
  - !12517  fix CVE-2024-47742
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - selftests/bpf: Add test for lsm tail call
  - bpf: Prevent tail call between progs attached to different hooks
  - !12665 v2  CVE-2024-49955
  - !12685  block: fix potential invalid pointer dereference in blk_add_partition
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - !12697  mm: memcg: don't periodically flush stats when memcg is disabled
  - !12694  crypto: xor - fix template benchmarking
  - !12701  vhost_vdpa: assign irq bypass producer token correctly
  - r8169: add tally counter fields added with RTL8125
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
  - ppp: fix ppp_async_encode() illegal access
  - !12678  CVE-2024-47673
  - !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - vhost_vdpa: assign irq bypass producer token correctly
  - !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - !12667  randomize_kstack: Improve entropy diffusion
  - !12668  selinux: fix potential counting error in avc_add_xperms_decision()
  - !12499  nbd: fix race between timeout and normal completion
  - mm: memcg: don't periodically flush stats when memcg is disabled
  - !12610  blk_iocost: fix more out of bound shifts
  - crypto: xor - fix template benchmarking
  - crypto: xor - Fix typo of optimization
  - !12633  ALSA: asihpi: Fix potential OOB array access
  - !12354 Backport important bugfix from the kernel-5.10.y
  - ocfs2: reserve space for inline xattr before attaching reflink tree
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - block: fix potential invalid pointer dereference in blk_add_partition
  - smb: client: fix UAF in async decryption
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  - iwlwifi: mvm: move iwl_mvm_stop_device() out of line
  - IB/core: Fix ib_cache_setup_one error flow cleanup
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - randomize_kstack: Improve entropy diffusion
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  - ALSA: asihpi: Fix potential OOB array access
  - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
  - blk_iocost: fix more out of bound shifts
  - cifs: Fix buffer overflow when parsing NFS reparse points
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  - powercap: intel_rapl: Fix off by one in get_rpi()
  - firmware_loader: Block path traversal
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - scsi: fix kabi broken
  - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  - scsi: mpt3sas: Remove scsi_dma_map() error messages


author: Li Nan <linan122@huawei.com> - 5.10.0-236.0.0.138
changelog:
  - !13186  virtio_pmem: Check device status before requesting flush
  - !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13146  arm64: probes: Remove broken LDR (literal) uprobe support
  - !13167  CVE-2024-50133
  - !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
  - !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - virtio_pmem: Check device status before requesting flush
  - arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
  - LoongArch: Don't crash in stack_top() for tasks without vDSO
  - cgroup: add cgroup_root_ext to keep kabi
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  - cgroup: Make operations on the cgroup root_list RCU safe
  - Revert "cgroup: fix uaf when proc_cpuset_show"
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - RDMA/mad: Improve handling of timed out WRs of mad agent
  - !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !13144 v2  tracing: Consider the NULL character when validating the event length
  - arm64: probes: Remove broken LDR (literal) uprobe support
  - tracing: Consider the NULL character when validating the event length
  - !13125 v7  mm: support poison recover for more
  - mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
  - arm64: send sig fault for user task when apei_claim_sea fails
  - arm64: mm: Add copy mc support for all migrate_page
  - mm: support poison recovery from do_cow_fault()
  - mm: support poison recovery from copy_present_page()
  - mm: hwpoison: support recovery from HugePage copy-on-write faults
  - make copy_[user]_highpage_mc have return value
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  - !12974  ext4: fix timer use-after-free on failed mount
  - !12976  : ext4: no need to continue when the number of entries is 1
  - !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - !12970  exfat: fix memory leak in exfat_load_bitmap()
  - !12972  ext4: fix access to uninitialised lock in fc replay path
  - !13094  RDMA/hns: Fix DCA mmap area PUAF
  - !12973  vfs: fix race between evice_inodes() and find_inode()&iput()
  - PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
  - !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13101  thunderbolt: Mark XDomain as unplugged when router is removed
  - !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - !13103  CVE-2024-49878
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - thunderbolt: Mark XDomain as unplugged when router is removed
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - RDMA/hns: Fix DCA mmap area PUAF
  - !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13067  Fix UAF of rpc_task
  - bpf, net: Fix a potential race in do_sock_getsockopt()
  - !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - !12996 【OLK-5.10】Support SMT control on arm64
  - network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
  - !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - !13054  net: add more sanity checks to qdisc_pkt_len_init()
  - !13048 sdma-dae: add ida validation
  - !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - NFSv4: release seqid when open failed for nfs4.0
  - drivers:misc:sdma-dae: add channel ida validation
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  - net: add more sanity checks to qdisc_pkt_len_init()
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - config: enable CONFIG_HOTPLUG_SMT for arm64
  - arm64: Kconfig: Enable HOTPLUG_SMT
  - arm64: topology: Support SMT control on ACPI based system
  - arch_topology: Support SMT control for OF based system
  - arch_topology: Support basic SMT control for the driver
  - cpu/SMT: Store the current/max number of threads
  - cpu/SMT: Move SMT prototypes into cpu_smt.h
  - ext4: no need to continue when the number of entries is 1
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  - ext4: fix timer use-after-free on failed mount
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ext4: fix access to uninitialised lock in fc replay path
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  - exfat: fix memory leak in exfat_load_bitmap()
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]


author: Li Nan <linan122@huawei.com> - 5.10.0-237.0.0.139
changelog:
  - !13310  fs/ntfs3: Additional check in ni_clear()
  - !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
  - !13344  mm,hwpoison: check mm when killing accessing process
  - mm,hwpoison: check mm when killing accessing process
  - smb: client: fix OOBs when building SMB2_IOCTL request
  - !13318 Fix objtool error for AMX instruction decoding
  - !13196  fs/ntfs3: Additional check in ntfs_file_release
  - !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
  - !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
  - !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
  - !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
  - !13276  mailbox: bcm2835: Fix timeout during suspend mode
  - !13294 sdma-dae: change authority of debugfs
  - x86/insn: Add AMX instructions to the x86 instruction decoder
  - !13277  CVE-2023-52920
  - fs/ntfs3: Additional check in ni_clear()
  - !13227  fs/ntfs3: Add rough attr alloc_size check
  - !13225  fs/ntfs3: Check if more than chunk-size bytes are written
  - !13226  fs/ntfs3: Fix possible deadlock in mi_read
  - !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
  - !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
  - !13194  fix CVE-2024-50115
  - bpf, arm64: Fix address emission with tag-based KASAN enabled
  - driver:misc:sdma:change authority of sdma device
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - !13178  bpf: Use raw_spinlock_t in ringbuf
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking
  - bpf: mostly decouple jump history management from is_state_visited()
  - bpf: encapsulate precision backtracking bookkeeping
  - bpf: decouple prune and jump points
  - mailbox: bcm2835: Fix timeout during suspend mode
  - !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
  - platform/x86/intel/ifs: Initialize union ifs_status to zero
  - platform/x86/intel/ifs: release cpus_read_lock()
  - platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - !13221  aoe: fix the potential use-after-free problem in more places
  - !13239  scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13255  RDMA/hns: Fix the valid QP bank set to improve performance
  - RDMA/hns: Fix the valid QP bank set to improve performance
  - !12858 intel: backport GNR and SRF intel_idle fix for 5.10
  - !12154 v2  netfilter: flowtable: initialise extack before use
  - !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  - staging: iio: frequency: ad9834: Validate frequency parameter value
  - !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
  - !13212 v7  arm64: support page mapping percpu first chunk allocator
  - fs/ntfs3: Add rough attr alloc_size check
  - fs/ntfs3: Fix possible deadlock in mi_read
  - fs/ntfs3: Check if more than chunk-size bytes are written
  - aoe: fix the potential use-after-free problem in more places
  - !13080  serial: core: Fix atomicity violation in uart_tiocmget
  - !13073  selinux: clarify return code in filename_trans_read_helper_compat()
  - !13128  drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
  - arm64: support page mapping percpu first chunk allocator
  - vmalloc: choose a better start address in vm_area_register_early()
  - iio: light: veml6030: fix IIO device retrieval from embedded device
  - fs/ntfs3: Additional check in ntfs_file_release
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - net/ncsi: Disable the ncsi work before freeing the associated structure
  - bpf: Use raw_spinlock_t in ringbuf
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
  - drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
  - serial: core: Fix atomicity violation in uart_tiocmget
  - selinux: clarify return code in filename_trans_read_helper_compat()
  - KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms
  - intel_idle: add Granite Rapids Xeon support
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
  - intel_idle: Add a new flag to initialize the AMX state
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
  - netfilter: flowtable: initialise extack before use
  - intel_th: pci: Add Sapphire Rapids SOC support
  - intel_th: pci: Add Granite Rapids SOC support
  - intel_th: pci: Add Granite Rapids support


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: xinghe <xinghe2@h-partners.com> - 2.74.2-5
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: xiaochn <xiaochuannan@inspur.com> - 1.1.5-3
changelog:
  - Resolve the issue of different kernel source download locations in kabi test case
  - Resolve the issue that kabiwhitelist still passes when the ko and rpm file does not exist
  - Add the way for manually adding kabiwhitelist file
  - For custom vendors, refer to the method of obtaining openEuler os information
  - Supports custom vendor


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-0
changelog:
  - Add new test suite srpm and intel
  - Add virtual branch of test suite
  - Add support for Kylin and UOS
  - Bugfix


author: wangshuai <wangshuai321@huawei.com> - 1.1.6-3
changelog:
  - Update the pci.ids file
  - Remove unused variable in cdrom test suite
  - Update test_guide doc
  - Unify the location for downloading kernel source RPMs
  - Optimize kabiwhitelist and system test


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: chenyaqiang <chengyaqiang@huawei.com> - 1:9.0.96-1
changelog:
  - Update to 9.0.96
  - Fix CVE-2021-43980 CVE-2022-25762 CVE-2023-44487 CVE-2023-46589
    CVE-2024-23672 CVE-2024-24549 CVE-2024-34750


