# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: wangkai <13474090681@163.com> - 1.4.3.36-7
changelog:
  - Fix dsidm role subtree-status fails with TypeError
  - Fix name cockpit_present is not defined.
  - Fix typo
  - Fix DirSrv has no attribute userid


author: maminjie <maminjie1@huawei.com> - 1.3.30-8
changelog:
  - fix some CVEs: CVE-2018-18544 CVE-2019-7397 CVE-2019-11005 CVE-2019-11006
    CVE-2019-11010 CVE-2019-12921 CVE-2020-10938 CVE-2020-12672


author: wangxiao <wangxiao65@huawei.com> - 6.9.10.67-19
changelog:
  - Fix CVE-2020-25676 CVE-2020-27757 CVE-2020-27758 CVE-2020-27771
    CVE-2020-27772 CVE-2020-27774 CVE-2020-27775 CVE-2020-27751


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhanghua <zhanghua40@huawei.com> - 2.2.0-18
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DESC:fix CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113
    CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2017-12596


author: wangyue <wangyue92@huawei.com> - 2.2.0-19
changelog:
  - fix CVE-2021-3474 CVE-2021-3477 CVE-2021-3476 CVE-2021-3475 CVE-2021-20296 CVE-2021-3479 CVE-2021-20296


author: yaoxin <yaoxin30@huawei.com> - 2.2.0-22
changelog:
  - fix CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15305 CVE-2020-15306


author: openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide


author: yaoxin <yaoxin30@huawei.com> - 2.5.5-2
changelog:
  - Fix CVE-2019-14904 CVE-2020-10684 CVE-2020-10729 CVE-2020-1735-to-CVE-2020-1740 CVE-2020-1753 CVE-2021-20191


author: wangkai <wangkai385@huawei.com> - 2.5.5-5
changelog:
  - Fix CVE-2019-3828 and hostname module support openEuler
  - and add defination of is_subpath and remove module_response_deepcopy


author: gongzhengtang<gong_zhengtang@163.com> - v1.3.4-5
changelog:
  - fixed many issues with cvelist queries (package fuzzy matching, page confusion, sorting is not supported) and rpm packet loss when generating repair tasks


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-7
changelog:
  - new patch for da-tool
  - add summary report of schedswitch and delay
  - modify method of mark invalid data and expanding valid data range
  - adjusted the format of the output data


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-10
changelog:
  - add check of command parameters and configuration files
  - handling scenarios with lost scheduling information
  - update document


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-11
changelog:
  - da-tool consider trace as valid data when first core lost scheduling information
  - update document


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hugang<18768366022@163.com> - v2.0.0-1
changelog:
  - Refactor Aops-hermes，upgrading the Vue framework
  - Support cluster management,add operations on sub-cluster hosts, vulnerabilities, users, and configurations


author: Hugang<18768366022@163.com> - v2.0.0-2
changelog:
  - Fixed the issue that the host group was not reset after selecting a cluster on the Add Host page
  - Supports simultaneous build of arm and x86 architectures


author: Hugang <18768366022@163.com> - v2.0.1-2
changelog:
  - Fixed the issue that the input format was not verified when creating commands and scripts with timeouts
  - Fixed the issue in the cron expression selection plugin that caused a backend error when selecting conflicting categories of day and week
  - Added some internationalized text


author: wenxin<wenxin32@foxmail.com> - v1.3.1-2
changelog:
  - fix bug: metric proxy init failed
  - add a way about key authentication for add host api
  - remove python3-prometheus-api-client


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.11.21-14
changelog:
  - Type:CVE
  - ID:CVE-2022-2906 CVE-2022-38177 CVE-2022-38178 CVE-2022-2795 CVE-2022-2881
  - SUG:NA
  - DESC:FIX CVE-2022-2906CVE-2022-38177CVE-2022-38178CVE-2022-2795CVE-2022-2881


author: zhanghao <zhanghao383@huawei.com> - 32:9.11.21-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: panxiaohe <panxiaohe@huawei.com> - 2.34-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix erroneous decoding of LEB128 values
         heap-buffer-overflow on readelf -Ww


author: panxiaohe <panxiaohe@huawei.com> - 3.6.4-2
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use make macros to run check in parallel;
         fix a concurrent build issue in examples


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.1.0.0144
changelog:
  - serial: 8250: Fix max baud limit in generic 8250 port
  - sched/fair: Add qos_throttle_list node in struct cfs_rq
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  - USB: gadget: validate endpoint index for xilinx udc
  - sr9700: sanity check for packet length
  - ima: Fix return value of ima_write_policy()
  - ima: Don't modify file descriptor mode on the fly
  - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
  - ima: Remove __init annotation from ima_pcrread()
  - ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()
  - evm: Check size of security.evm before using it
  - ima: Don't ignore errors from crypto_shash_update()
  - mm: Fallback to non-mirrored region below low watermark
  - mm: Disable watermark check if reliable fallback is disabled
  - mm: Do limit checking after memory allocation for memory reliable


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.2.0.0145
changelog:
  - Revert "module, async: async_synchronize_full() on module init iff async is used"
  - tty: n_gsm: fix encoding of control signal octet bit DV
  - fget: clarify and improve __fget_files() implementation
  - memblock: use kfree() to release kmalloced memblock regions
  - tty: n_gsm: fix proper link termination after failed open
  - gso: do not skip outer ip header in case of ipip and net_failover
  - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
  - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
  - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
  - dmaengine: sh: rcar-dmac: Check for error num after setting mask
  - net: sched: limit TC_ACT_REPEAT loops
  - mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
  - NFS: Do not report writeback errors in nfs_getattr()
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks
  - bonding: fix data-races around agg_select_timer
  - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
  - ping: fix the dif and sdif check in ping_lookup
  - taskstats: Cleanup the use of task->exit_code
  - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
  - nvme: fix a possible use-after-free in controller reset during load
  - quota: make dquot_quota_sync return errors from ->sync_fs
  - vfs: make freeze_super abort when sync_filesystem returns error
  - serial: parisc: GSC: fix build when IOSAPIC is not set
  - perf: Fix list corruption in perf_cgroup_switch()
  - seccomp: Invalidate seccomp mode to catch death failures
  - n_tty: wake up poll(POLLRDNORM) on receiving data
  - veth: fix races around rq->rx_notify_masked
  - net: fix a memleak when uncloning an skb dst and its metadata
  - net: do not keep the dst cache when uncloning an skb dst and its metadata
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
  - bonding: pair enable_port with slave_arr_updates
  - bpf: Add kconfig knob for disabling unpriv bpf by default
  - scsi: target: iscsi: Make sure the np under each tpg is unique
  - NFSv4 expose nfs_parse_server_name function
  - NFSv4 remove zero number of fs_locations entries error check
  - NFSv4.1: Fix uninitialised variable in devicenotify
  - nfs: nfs4clinet: check the return value of kstrdup()
  - NFSv4 only print the label when its queried
  - NFS: Fix initialisation of nfs_client cl_flags field
  - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
  - ima: Remove ima_policy file before directory
  - integrity: check the return value of audit_log_start()
  - ext4: fix error handling in ext4_restore_inline_data()
  - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
  - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
  - block: bio-integrity: Advance seed correctly for larger interval sizes
  - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
  - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
  - ipv4: tcp: send zero IPID in SYNACK messages
  - ipv4: raw: lock the socket in raw_bind()
  - phylib: fix potential use-after-free
  - NFS: Ensure the server has an up to date ctime before renaming
  - NFS: Ensure the server has an up to date ctime before hardlinking
  - ipv6: annotate accesses to fn->fn_sernum
  - ipv4: avoid using shared IP generator for connected sockets
  - ping: fix the sk_bound_dev_if match in ping_lookup
  - ipv6_tunnel: Rate limit warning messages
  - tty: n_gsm: fix SW flow control encoding/handling
  - serial: stm32: fix software flow control transfer
  - serial: 8250: of: Fix mapped region size when using reg-offset property
  - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
  - PM: wakeup: simplify the output logic of pm_show_wakelocks()
  - tty: fix crash in release_tty if tty->port is not set
  - tty: don't crash in tty_init_dev when missing tty_port
  - printk: Convert a use of sprintf to snprintf in console_unlock


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.3.0.0146
changelog:
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error
  - Revert "ext4: fix file system corrupted when rmdir non empty directory with IO error"
  - sched: Fix yet more sched_fork() races
  - sched/fair: Fix wrong cpu selecting from isolated domain
  - netfilter: nf_tables: initialize registers in nft_do_chain()
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
  - net: sched: adapt Qdisc kabi
  - net_sched: fix a crash in tc_new_tfilter()
  - net: sched: use Qdisc rcu API instead of relying on rtnl lock
  - net: sched: add helper function to take reference to Qdisc
  - net: sched: extend Qdisc with rcu
  - net: core: netlink: add helper refcount dec and lock function
  - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
  - xen/gnttab: fix gnttab_end_foreign_access() without page specified
  - xen/pvcalls: use alloc/free_pages_exact()
  - xen/9p: use alloc/free_pages_exact()
  - xen: remove gnttab_query_foreign_access()
  - xen/gntalloc: don't use gnttab_query_foreign_access()
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
  - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
  - xen/grant-table: add gnttab_try_end_foreign_access()
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
  - xen/xenbus: Fix granting of vmalloc'd memory
  - binder: fix test regression due to sender_euid change
  - binder: use cred instead of task for selinux checks
  - binder: use euid from cred instead of using task
  - svm: Change svm to modules
  - svm: Delete unused svm_get_unmapped_area ops
  - ascend: mm: Add MAP_ALIGN flag to map aligned va
  - svm: Delete unused function sysrq_sched_debug_show_export
  - svm: Delete get meminfo interface in svm ioctl
  - svm: Export symbols for svm module
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
  - mm: Add space after ReliableFileCache
  - mm: Drop reliable_reserve_size
  - mm: page_counter: mitigate consequences of a page_counter underflow
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  - hamradio: remove needs_free_netdev to avoid UAF
  - hamradio: defer 6pack kfree after unregister_netdev
  - ovl: fix uninitialized pointer read in ovl_lookup_real_one()
  - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
  - ovl: fix lseek overflow on 32bit
  - ovl: sync dirty data when remounting to ro mode


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2204.4.0.0147
changelog:
  - Revert "perf: Paper over the hw.target problems"
  - ax25: Fix NULL pointer dereferences in ax25 timers
  - ax25: fix NPD bug in ax25_disconnect
  - ax25: Fix NULL pointer dereference in ax25_kill_by_device
  - ax25: improve the incomplete fix to avoid UAF and NPD bugs
  - ax25: NPD bug when detaching AX25 device
  - objtool: Fix stack offset tracking for indirect CFAs
  - x86/entry/64: Fix unwind hints in kernel exit path
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
  - arm64: Use the clearbhb instruction in mitigations
  - arm64: add ID_AA64ISAR2_EL1 sys register
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
  - arm64: Mitigate spectre style branch history side channels
  - KVM: arm64: Add templates for BHB mitigation sequences
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
  - arm64: Add percpu vectors for EL1
  - arm64: entry: Add macro for reading symbol addresses from the trampoline
  - arm64: entry: Add vectors that have the bhb mitigation sequences
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
  - arm64: entry: Allow the trampoline text to occupy multiple pages
  - arm64: entry: Make the kpti trampoline's kpti sequence optional
  - arm64: entry: Move trampoline macros out of ifdef'd section
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
  - arm64: entry: Move the trampoline data page before the text page
  - arm64: entry: Free up another register on kpti's tramp_exit path
  - arm64: entry: Make the trampoline cleanup optional
  - arm64: entry.S: Add ventry overflow sanity checks
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
  - x86/speculation: Warn about Spectre v2 LFENCE mitigation
  - x86/speculation: Update link to AMD speculation whitepaper
  - x86/speculation: Use generic retpoline by default on AMD
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting
  - Documentation/hw-vuln: Update spectre doc
  - x86/speculation: Add eIBRS + Retpoline options
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
  - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation()
  - mm/memory.c: fix clear_gigantic_page_chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.1.0.0148
changelog:
  - hamradio: improve the incomplete fix to avoid NPD
  - hamradio: defer ax25 kfree after unregister_netdev
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
  - llc: only change llc->dev when bind() succeeds
  - netdevice: add the case if dev is NULL
  - llc: fix netdevice reference leaks in llc_ui_bind()
  - ARM: fix Thumb2 regression with Spectre BHB
  - ARM: Spectre-BHB: provide empty stub for non-config
  - ARM: fix build warning in proc-v7-bugs.c
  - ARM: Do not use NOCROSSREFS directive with ld.lld
  - ARM: fix co-processor register typo
  - ARM: fix build error when BPF_SYSCALL is disabled
  - ARM: include unprivileged BPF status in Spectre V2 reporting
  - ARM: Spectre-BHB workaround
  - ARM: use LOADADDR() to get load address of sections
  - ARM: early traps initialisation
  - ARM: report Spectre v2 status through sysfs
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.3.0.0149
changelog:
  - ixgbevf: add disable link state
  - ixgbe: add improvement for MDD response functionality
  - ixgbe: add the ability for the PF to disable VF link state
  - io_uring: fix false WARN_ONCE
  - mm/sharepool: Fix sharepool node id invalid when using sp_alloc
  - sharepool: fix hisi oom deadlock
  - share_pool: Fix ABBA deadlock
  - net: ipv6: fix skb_over_panic in __ip6_append_data
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  - mm: fix dereference a null pointer in migrate[_huge]_page_move_mapping()
  - cpuset: Fix unsafe lock order between cpuset lock and cpuslock
  - tcp: make tcp_read_sock() more robust
  - xfrm: Fix xfrm migrate issues when address family changes
  - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
  - ext4: add check to prevent attempting to resize an fs with sparse_super2
  - net-sysfs: add check for netdevice being present to speed_show
  - memfd: fix F_SEAL_WRITE after shmem huge page allocated
  - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
  - netfilter: nf_queue: fix possible use-after-free
  - netfilter: nf_queue: don't assume sk is full socket
  - xfrm: enforce validity of offload input flags
  - xfrm: fix the if_id check in changelink
  - netfilter: fix use-after-free in __nf_register_net_hook()
  - xfrm: fix MTU regression
  - cifs: fix double free race when mount fails in cifs_get_root()
  - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
  - x86/asm: Move native_write_cr0/4() out of line
  - x86/asm: Pin sensitive CR0 bits
  - x86/asm: Pin sensitive CR4 bits
  - mm: Add more debug info if oom occurs
  - mm: Fix reliable task used problem shown in meminfo
  - mm: Show correct reliable pagecache size


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.4.0.0150
changelog:
  - scsi: hisi_sas: Change hisi_sas_control_phy() phyup timeout
  - scsi: hisi_sas: Fix SAS disk sense info print incorrectly sometimes
  - scsi: hisi_sas: Don't fail IT nexus reset for Open Reject timeout
  - mm/share_pool: Support read-only memory allocation
  - mm: clear_freelist_page: Provide timeout mechanism for worker runtime
  - io_uring: fix race between timeout flush and removal
  - ax25: fix UAF bug in ax25_send_control()
  - ax25: Fix refcount leaks caused by ax25_cb_del()
  - ax25: fix UAF bugs of net_device caused by rebinding operation
  - ax25: fix reference count leaks of ax25_dev
  - ax25: add refcount in ax25_dev to avoid UAF bugs
  - ext4: fix bug_on in start_this_handle during umount filesystem
  - ext4: unregister sysfs path before destroying jbd2 journal
  - ext4: fix use-after-free in ext4_search_dir
  - mm: Update reliable flag in memory allocaion for reliable task only in task context
  - mm: refactor the reclaim thread of page cache from per-cpu to per-node


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.5.0.0151
changelog:
  - sched/qos: Add qos_tg_{throttle,unthrottle}_{up,down}
  - sched: Throttle offline task at tracehook_notify_resume()
  - sched: enable CONFIG_QOS_SCHED on arm64
  - sched/qos: Remove dependency CONFIG_x86
  - net/sched: cls_u32: fix netns refcount changes in u32_change()
  - mm: hwpoison: enable memory error handling on 1GB hugepage optionaly
  - mm: fix gup_pud_range
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
  - ext4: fix warning when submitting superblock in ext4_commit_super()
  - ext4: fix bug_on in __es_tree_search
  - secure_seq: use the 64 bits of the siphash for port offset calculation
  - floppy: use a statically allocated error counter
  - mmc: block: fix read single on recovery logic
  - SUNRPC: Ensure that the gssproxy client can start in a connected state
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  - ax25: Fix UAF bugs in ax25 timers
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
  - drm/vgem: Close use-after-free race in vgem_gem_create
  - mm/memory.c: update the first page in clear_gigantic_page_chunk


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2205.6.0.0152
changelog:
  - net: hns3: update hns3 version to 22.5.1
  - net: hns3: fix vf link setting failed when no vf driver loaded
  - arm64: Add memmap reserve range check to avoid conflict
  - ext4: fix bug_on in ext4_writepages
  - ext4: fix warning in ext4_handle_inode_extension
  - ext4: fix use-after-free in ext4_rename_dir_prepare
  - uce: coredump scenario support kernel recovery
  - NULL pointer dereference on rmmod iptable_mangle.


author: Luo Qiu <luoqiu@kylinos.com.cn> - 4.19.90-2205.6.0.0152.kb1
changelog:
  - net: phy: motorcomm: remove unused vars
  - net: phy: add Motorcomm PHYs
  - drm: add phytium gpu driver
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - mtd: nandraw: add phytium_nand_pci driver
  - mtd: nandraw: add phytium_nand driver
  - ASoC: phytium: fix depends
  - ASoC: phytium: add pmdk_dp driver
  - ASoC: phytium: add pmdk_es8388 driver
  - ASoC: phytium: add pmdk_es8336 driver
  - ASoC: add phytium i2s driver
  - ASoC: add es8388 codec driver
  - ASoC: add es8336 codec driver
  - mfd: phytium: make config tristate
  - mfd: phytium: select MFD_CORE
  - mfd: phytium: error handling
  - mfd: add phytium i2s mmd mfd driver
  - mfd: add phytium i2s lsd mfd driver
  - i2c: add phytium i2c pci support
  - i2c: add phytium i2c base support
  - serial: phytium-uart: rename dev_name
  - serial: add phytium uart support
  - input: serio: add phytium ps2 keyboard support
  - xHCI: add XHCI_RESET_ON_RESUME quirk for phytium xHCI host
  - acpi/irq: refactor acpi_get_gsi
  - acpi/irq: Implement helper to create hierachical domains
  - firmware: arm_scpi: fix use-after-free
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - KVM: SVM: force guest pat to WB for Hygon CPU
  - i2c: designware: Add device HID for Hygon I2C controller
  - drm: jjw mwv206 update to 2.1.4
  - compiler.h: fix error in BUILD_BUG_ON() reporting
  - Revert "arm64: mm: blacklist the memory region below the start of kernel"
  - irqchip: fix match table for some buggy bios
  - net: sched: sch_teql: fix null-pointer dereference
  - wdt: add wdt resource name
  - bonding: support enhanced bond 3 mode
  - scsi: sr: get rid of sr global mutex
  - arm64: mm: blacklist the memory region below the start of kernel
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - drm/smifb: fix section mismatch
  - drm/smifb: remove useless files
  - drm: sm7xx: update to v1.3.12
  - drm: jjw: add FB_MODE_HELPERS config dependency
  - gpu: drm: add jjw mwv206 support
  - spi: phytium: fix phytium_spi_add_host
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - usb: xhci: Add support for Renesas controller with memory
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - rtc: class: do not sync rtc twice while using devm_rtc_device_register
  - rtc: class: hctosys while register rtc with devm_rtc_device_register
  - rtc: class: support hctosys from modular RTC drivers
  - rtc: class: add debug message when registration fails
  - platform/phytium: ec: fix depends
  - input: serio: i8042: add support for phytium
  - platform: add phytium platform support
  - bus: add phytium_lpc support
  - driver core: platform: return -ENXIO for missing GpioInt
  - driver: platform: Support parsing GpioInt 0 in platform_get_irq()
  - rtc: ds1307: fix issue found on ft2000plus
  - drm: add sm7xx drivers
  - rtc: class: hctosys while register rtc with rtc_device_register
  - tools iio: Override CFLAGS assignments
  - tools thermal tmon: Allow overriding CFLAGS assignments
  - tools cpupower: Override CFLAGS assignments
  - perf arm64: Fix mksyscalltbl when system kernel headers are ahead of the kernel
  - video: replace linux boot logo with kylin new S logo
  - KVM: arm/arm64: disable WARN_ON for phytium platform
  - net: stmicro: stmmac: set 32bit DMA mask to allocate DMA buffers below 4GB address space
  - usb: renesas-xhci: remove version check
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - mm: support memblock alloc on the exact node for sparse_buffer_init()
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - arm64: add model name for phytium cpu in cpuinfo
  - ALSA: hda/phytium: improve compatibility
  - sound: add hda_phytium driver
  - hwmon: scpi: add acpi support
  - cpufreq: scpi: add acpi support
  - firmware: arm_scpi: add acpi support
  - clk: scpi: add acpi support
  - mailbox: add acpi support
  - mailbox: add phytium mailbox support
  - tee: optee: add optee support for phytium
  - mmc: add phytium SD host controller support
  - can: add phytium-can driver
  - mtd: spi-nor: add phytium quad spi controller
  - net: stmmac: add ACPI support
  - spi: add phytium spi controller core support
  - gpio: add phytium gpio pci support
  - gpio: add phytium gpio platform support
  - gpio: add phytium gpio base support
  - rtc: add rtc-phytium driver
  - i2c: designware: add device id for phytium platform
  - ACPI: APD: add device id for phytium
  - arm64: add uImage build rule for ft2000plus
  - irq: add support for phytium D2000 PCIe legacy INTx interrupt controller
  - PCI: Add Phytium vendor ID
  - arm64: topology: Support PHYTIUM CPU
  - arm64: dts: phytium: add FT-2000plus SR board
  - arm64: dts: phytium: add FT-2000plus MR board
  - arm64: dts: phytium: add FT-2000A/2 board
  - arm64: dts: phytium: add FT-2000/4 board
  - arm64: dts: phytium: add FT1500A-16CORE-DSK board


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.5.0.0178
changelog:
  - svm: Delete unused ioctl command
  - Revert "posix-cpu-timers: Make timespec to nsec conversion safe"
  - block: limit request dispatch loop duration
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory
  - block: check flags of claimed slave bdev to fix uaf for bd_holder_dir


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2211.6.0.0179
changelog:
  - x86/tsc: use topology_max_packages() in tsc watchdog check
  - scsi: hisi_sas: Set iptt aborted flag when receiving an abnormal CQ
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.1.0.0180
changelog:
  - !272 [openEuler-1.0-LTS] Add MWAIT Cx support for Zhaoxin CPUs.
  - Bluetooth: L2CAP: Fix u8 overflow
  - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
  - l2tp: Serialize access to sk_user_data with sk_callback_lock
  - !288 Add support for ConnectX6 Lx and ConnectX6Dx with openEuler inbox driver
  - net/mlx5: Update the list of the PCI supported devices
  - net/mlx5: Update the list of the PCI supported devices
  - drivers: net: slip: fix NPD bug in sl_tx_timeout()
  - staging: rtl8712: fix use after free bugs
  - Add MWAIT Cx support for Zhaoxin CPUs.


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.2.0.0181
changelog:
  - mm/sharepool: Fix a double free problem caused by init_local_group
  - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
  - macvlan: enforce a consistent minimal mtu
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - net: gso: fix panic on frag_list with mixed head alloc types
  - tcp/udp: Make early_demux back namespacified.
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - tcp: fix indefinite deferral of RTO with SACK reneging
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - security: commoncap: fix -Wstringop-overread warning
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - kprobe: reverse kp->flags when arm_kprobe failed
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - nfs4: Fix kmemleak when allocate slot failed
  - kernfs: fix use-after-free in __kernfs_remove
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
  - signal handling: don't use BUG_ON() for debugging
  - ida: don't use BUG_ON() for debugging


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.3.0.0182
changelog:
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix build errors in some archs
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
  - hv_netvsc: Add check for kvmalloc_array
  - xen/netback: don't call kfree_skb() with interrupts disabled
  - xen/netback: fix build warning
  - xen/netback: Ensure protocol headers don't fall in the non-linear area
  - !273 [openEuler-1.0-LTS] Fix mouse enumeration issue after wakeup from s4
  - arm64: fix a concurrency issue in emulation_proc_handler()
  - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
  - sched/qos: Don't unthrottle cfs_rq when cfs_rq is throttled by qos
  - media: mceusb: Use new usb_control_msg_*() routines
  - media: mceusb: fix control-message timeouts
  - USB: add usb_control_msg_send() and usb_control_msg_recv()
  - Fix mouse enumeration issue after wakeup from s4


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2212.4.0.0183
changelog:
  - dm thin: Use last transaction's pmd->root when commit failed
  - drm: mali-dp: potential dereference of null pointer
  - power: supply: wm8350-power: Add missing free in free_charger_irq
  - sched: Reinit task's vruntime if a task sleep over 200 days
  - media: dvb-core: Fix UAF due to refcount races at releasing
  - drm/amdkfd: Check for null pointer after calling kmemdup
  - !325 Support enabling dirty log gradually in small chunks
  - KVM: arm64: Support enabling dirty log gradually in small chunks
  - KVM: x86: enable dirty log gradually in small chunks
  - KVM: Introduce KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2
  - KVM: Fix kvm_clear_dirty_log_protect off-by-(minus-)one
  - KVM: Fix the bitmap range to copy during clear dirty
  - kvm_main: fix some comments
  - KVM: fix KVM_CLEAR_DIRTY_LOG for memory slots of unaligned size
  - Revert "KVM: Eliminate extra function calls in kvm_get_dirty_log_protect()"
  - KVM: validate userspace input in kvm_clear_dirty_log_protect()
  - kvm: introduce manual dirty log reprotect
  - kvm: rename last argument to kvm_get_dirty_log_protect
  - kvm: make KVM_CAP_ENABLE_CAP_VM architecture agnostic


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.3.0.0184
changelog:
  - arm64: Kconfig: default unset ARCH_LLC_128_LINE_SIZE
  - mm/sharepool: clean up ABI breakage
  - timekeeping: Avoiding false sharing in field access of tk_core
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED
  - mm/memory-failure.c: fix race with changing page more robustly
  - mm,memory_failure: always pin the page in madvise_inject_error
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access()
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os
  - mm/sharepool: Charge Buddy hugepage to memcg


author: Zheng Zengkai <zhengzengkai@huawei.com> - 4.19.90-2301.5.0.0185
changelog:
  - USB: Fix kABI for usb_device->reset_in_progress
  - rndis_wlan: Prevent buffer overflow in rndis_query_oid
  - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
  - ima: Directly assign the ima_default_policy pointer to ima_rules
  - driver core: Don't probe devices after bus_type.match() probe deferral
  - KEYS: trusted: Fix migratable=1 failing
  - certs: Fix blacklist flag type confusion
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - ipv6: avoid use-after-free in ip6_fragment()
  - nvme initialize core quirks before calling nvme_init_subsystem
  - memcg: fix possible use-after-free in memcg_write_event_control()
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - nvme: restrict management ioctls to admin
  - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
  - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - af_key: Fix send_acquire race with pfkey_register
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - USB: core: Fix RST error in hub.c
  - USB: core: Prevent nested device-reset calls
  - ima: Do not print policy rule with inactive LSM labels
  - lsm: Resolve KABI changes on lsm_notifier
  - ima: Evaluate error in init_ima()
  - ima: ima/lsm policy rule loading logic bug fixes
  - ima: Handle -ESTALE returned by ima_filter_rule_match()
  - ima: use the lsm policy update notifier
  - LSM: switch to blocking policy update notifiers
  - mm/hwpoison: do not lock page again when me_huge_page() successfully recovers


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2301.6.0.0186
changelog:
  - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  - of/fdt: Don't calculate initrd size from DT if start > end
  - lib/cmdline: avoid page fault in next_arg
  - genirq: Introduce warn log when irq be reentrant
  - net: sched: disallow noqueue for qdisc classes
  - net: sched: atm: dont intepret cls results when asked to drop
  - block: check 'bd_super' before rescanning partition
  - net: sched: cbq: dont intepret cls results when asked to drop
  - swapfile: fix soft lockup in scan_swap_map_slots
  - Huawei BMA: Fix iBMA driver bug


author: Luo Qiu <luoqiu@kylinos.com.cn> - 4.19.90-2301.6.0.0186.kb1
changelog:
  - sched/rt: Disable RT_RUNTIME_SHARE by default
  - zxgnic: add support of zhaoxin gigabyte network interface controller driver
  - add fix phytium ldp/stnp bug patch
  - hwmon: (scpi-hwmon) shows the negative temperature properly
  - phytium can: add ACPI probe support
  - scpi-hwmon/phytium: add support to old ACPI HID 'FTSS0001',fix the issue of scpi-hwmon driver probe.
  - drm/phytium: check return value of drm_fb_helper_initial_config
  - drm/phytium/octopus: fix checking of devfreq
  - dmaengine: phytium: remove useless target
  - drm/phytium: fix access_ok()
  - drm/phytium: fix Makefile
  - drm: add phytium gpu driver (0523)
  - media: add phytium vpu support
  - dmaengine: add phytium dma controller support
  - Revert "drm: add phytium gpu driver"
  - drm/mwv207: silence maybe-uninitialized build warnings for gcc 11
  - drm/mwv207: silence array-bounds build warnings for gcc 11
  - drm/mwv207: fix implicit declaration of j9maths_debasement
  - gpu/mwv207: simplify makefile
  - gpu: drm: add jjw mwv207 support
  - net: phy: motorcomm: remove unused vars
  - net: phy: add Motorcomm PHYs
  - drm: add phytium gpu driver
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - mtd: nandraw: add phytium_nand_pci driver
  - mtd: nandraw: add phytium_nand driver
  - ASoC: phytium: fix depends
  - ASoC: phytium: add pmdk_dp driver
  - ASoC: phytium: add pmdk_es8388 driver
  - ASoC: phytium: add pmdk_es8336 driver
  - ASoC: add phytium i2s driver
  - ASoC: add es8388 codec driver
  - ASoC: add es8336 codec driver
  - mfd: phytium: make config tristate
  - mfd: phytium: select MFD_CORE
  - mfd: phytium: error handling
  - mfd: add phytium i2s mmd mfd driver
  - mfd: add phytium i2s lsd mfd driver
  - i2c: add phytium i2c pci support
  - i2c: add phytium i2c base support
  - serial: phytium-uart: rename dev_name
  - serial: add phytium uart support
  - input: serio: add phytium ps2 keyboard support
  - xHCI: add XHCI_RESET_ON_RESUME quirk for phytium xHCI host
  - acpi/irq: refactor acpi_get_gsi
  - acpi/irq: Implement helper to create hierachical domains
  - firmware: arm_scpi: fix use-after-free
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - KVM: SVM: force guest pat to WB for Hygon CPU
  - i2c: designware: Add device HID for Hygon I2C controller
  - drm: jjw mwv206 update to 2.1.4
  - compiler.h: fix error in BUILD_BUG_ON() reporting
  - wdt: add wdt resource name
  - bonding: support enhanced bond 3 mode
  - scsi: sr: get rid of sr global mutex
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - drm/smifb: fix section mismatch
  - drm/smifb: remove useless files
  - drm: sm7xx: update to v1.3.12
  - drm: jjw: add FB_MODE_HELPERS config dependency
  - gpu: drm: add jjw mwv206 support
  - spi: phytium: fix phytium_spi_add_host
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - usb: xhci: Add support for Renesas controller with memory
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - rtc: class: do not sync rtc twice while using devm_rtc_device_register
  - rtc: class: hctosys while register rtc with devm_rtc_device_register
  - rtc: class: support hctosys from modular RTC drivers
  - rtc: class: add debug message when registration fails
  - platform/phytium: ec: fix depends
  - input: serio: i8042: add support for phytium
  - platform: add phytium platform support
  - bus: add phytium_lpc support
  - driver core: platform: return -ENXIO for missing GpioInt
  - driver: platform: Support parsing GpioInt 0 in platform_get_irq()
  - rtc: ds1307: fix issue found on ft2000plus
  - drm: add sm7xx drivers
  - rtc: class: hctosys while register rtc with rtc_device_register
  - tools iio: Override CFLAGS assignments
  - tools thermal tmon: Allow overriding CFLAGS assignments
  - tools cpupower: Override CFLAGS assignments
  - perf arm64: Fix mksyscalltbl when system kernel headers are ahead of the kernel
  - video: replace linux boot logo with kylin new S logo
  - KVM: arm/arm64: disable WARN_ON for phytium platform
  - net: stmicro: stmmac: set 32bit DMA mask to allocate DMA buffers below 4GB address space
  - usb: renesas-xhci: remove version check
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - mm: support memblock alloc on the exact node for sparse_buffer_init()
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - arm64: add model name for phytium cpu in cpuinfo
  - ALSA: hda/phytium: improve compatibility
  - sound: add hda_phytium driver
  - hwmon: scpi: add acpi support
  - cpufreq: scpi: add acpi support
  - firmware: arm_scpi: add acpi support
  - clk: scpi: add acpi support
  - mailbox: add acpi support
  - mailbox: add phytium mailbox support
  - tee: optee: add optee support for phytium
  - mmc: add phytium SD host controller support
  - can: add phytium-can driver
  - mtd: spi-nor: add phytium quad spi controller
  - net: stmmac: add ACPI support
  - spi: add phytium spi controller core support
  - gpio: add phytium gpio pci support
  - gpio: add phytium gpio platform support
  - gpio: add phytium gpio base support
  - rtc: add rtc-phytium driver
  - i2c: designware: add device id for phytium platform
  - ACPI: APD: add device id for phytium
  - arm64: add uImage build rule for ft2000plus
  - irq: add support for phytium D2000 PCIe legacy INTx interrupt controller
  - PCI: Add Phytium vendor ID
  - arm64: topology: Support PHYTIUM CPU
  - arm64: dts: phytium: add FT-2000plus SR board
  - arm64: dts: phytium: add FT-2000plus MR board
  - arm64: dts: phytium: add FT-2000A/2 board
  - arm64: dts: phytium: add FT-2000/4 board
  - arm64: dts: phytium: add FT1500A-16CORE-DSK board


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.1.0.0187
changelog:
  - ring-buffer: Fix race between reset page and reading page
  - block: don't allow a disk link holder to itself
  - ext4: fix use-after-free in ext4_orphan_cleanup
  - ext4: lost matching-pair of trace in ext4_truncate
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
  - mm/swapfile: add cond_resched() in get_swap_pages()
  - hugetlbfs: don't delete error page from pagecache
  - mm: hwpoison: refactor refcount check handling
  - dhugetlb: set DYNAMIC_HUGETLB to y for hulk_defconfig
  - dhugetlb: use enable_dhugetlb to disable huge_memory
  - dhugetlb: skip dissolve hugepage belonging to dynamic hugetlb
  - dhugetlb: only support 1G/2M hugepage and ARM64_4K_PAGES
  - dhugetlb: isolate dynamic hugetlb code
  - dhugetlb: backport dynamic hugetlb feature
  - !344 mm: fix false-positive OVERCOMMIT_GUESS failures
  - cfq: fix memory leak for cfqq
  - mm: fix false-positive OVERCOMMIT_GUESS failures


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.3.0.0188
changelog:
  - block, bfq: switch 'bfqg->ref' to use atomic refcount apis
  - x86/bugs: Flush IBP in ib_prctl_set()
  - media: vivid: fix compose size exceed boundary
  - cifs: do not include page data when checking signature
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm: gup: fix the fast GUP race against THP collapse
  - prlimit: do_prlimit needs to have a speculation check
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - net/ulp: prevent ULP without clone op from entering the LISTEN status
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - md: fix a crash in mempool_free
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - pnode: terminate at peers of source
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - device_cgroup: Roll back to original exceptions after copy failure
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list
  - ipmi: fix long wait in unload when IPMI disconnect
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - chardev: fix error handling in cdev_device_add()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device
  - ipmi: fix memleak when unload ipmi driver
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - skbuff: Account for tail adjustment during pull operations
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - class: fix possible memory leak in __class_register()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - bonding: uninitialized variable in bond_miimon_inspect()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - blk-mq: fix possible memleak when register 'hctx' failed
  - perf: Fix possible memleak in pmu_dev_alloc()
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - pstore/ram: Fix error return code in ramoops_probe()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - sched/rt: Optimize checking group RT scheduler constraints
  - md: protect md_unregister_thread from reentrancy
  - hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
  - lib/list_debug.c: Detect uninitialized lists
  - crypto: tcrypt - avoid signed overflow in byte count
  - mm: sharepool: fix hugepage_rsvd count increase error
  - config: enbale irq pending config for openeuler
  - genirq: introduce CONFIG_GENERIC_PENDING_IRQ_FIX_KABI
  - irqchip/gic-v3-its: introduce CONFIG_GENERIC_PENDING_IRQ
  - md: fix uaf in md_wakeup_thread
  - genirq: add printk safe in irq context
  - jbd2: Fix data missing when reusing bh which is ready to be checkpointed
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - cifs: sanitize multiple delimiters in prepath
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.4.0.0189
changelog:
  - !213  net: bonding: Inherit MPLS features from slave devices
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - dhugetlb: set hpool to NULL for cont-bit hugepage
  - arm64/ascend: Delete CONFIG_ASCEND_AUTO_TUNING_HUGEPAGE in hulk_defconfig
  - arm64/ascend: Delete unused feature auto-tuning hugepage
  - mm/memcg_memfs_info: fix potential oom_lock recursion deadlock
  - net: bridge: mcast: add and enforce query interval minimum
  - net: bridge: mcast: add and enforce startup query interval minimum
  - !396 anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - net: bonding: Inherit MPLS features from slave devices


author: Laibin Qiu <qiulaibin@huawei.com> - 4.19.90-2302.5.0.0190
changelog:
  - !423 genirq bugfix for arm64
  - genirq: Remove irqd_irq_disabled in __irq_move_irq
  - !422 iscsi bugfixes backport
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
  - !420 backport CVEs and bugfixes
  - net: mpls: fix stale pointer if allocation fails during device rename
  - nbd: fix assignment error for first_minor in nbd_dev_add
  - selinux: further adjust init order for cred_* hooks
  - selinux: further adjust init order for file_alloc_security hook
  - !415 mainline bugfix backport
  - selinux: reorder hooks to make runtime disable less broken
  - evm: Fix a small race in init_desc()
  - evm: Check also if *tfm is an error pointer in init_desc()
  - iommu: Properly export iommu_group_get_for_dev()
  - of: resolver: Add of_node_put() before return and break
  - of: unittest: Add of_node_put() before return
  - drivers/iommu: Allow IOMMU bus ops to be unregistered
  - drivers/iommu: Export core IOMMU API symbols to permit modular drivers
  - component: do not dereference opaque pointer in debugfs
  - ipmi: use %*ph to print small buffer
  - crypto: algif_skcipher - Use chunksize instead of blocksize
  - crypto: algif_skcipher - EBUSY on aio should be an error
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
  - dhugetlb: isolate hwpoison hugepage when release
  - mm/sharepool: Fix null-pointer-deference in sp_free_area


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.4.0.0210
changelog:
  - !1435 fix CVE-2023-3117
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - !1400 [openEuler-1.0-LTS] block: Try to handle busy underlying device on discard
  - !1416  Fix generic/299 fail
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1404  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - block: Try to handle busy underlying device on discard
  - !1377 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1374  etmem: fix the div 0 problem in swapcache reclaim process
  - !177 net:bonding:support balance-alb interface with vlan to bridge
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - etmem: fix the div 0 problem in swapcache reclaim process
  - bonding: fix reference count leak in balance-alb mode
  - net:bonding:support balance-alb interface with vlan to bridge


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2307.5.0.0211
changelog:
  - !1534 arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !1529  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1474 [openEuler-1.0-LTS] pmu: remove uncore code for Zhaoxin Platform
  - !1498  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1444 ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1469  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1472  ipv6/addrconf: fix a potential refcount underflow for idev
  - pmu: remove uncore code for Zhaoxin Platform
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
  - ring-buffer: Fix deadloop issue on reading trace_pipe


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.1.0.0212
changelog:
  - !1571 【openEuler-1.0-LTS】net: hns: fix wrong head when modify the tx feature when sending packets
  - !1570 【openEuler-1.0-LTS】net: hns3: bugfixes for hns3 drivers 2023.07.29
  - net: hns: update hns version to 23.7.1
  - net: hns: fix wrong head when modify the tx feature when sending packets
  - net: hns3: update hns3 version to 23.7.1
  - net: hns3: fix tx timeout issue
  - net: hns3: fix incorrect hw rss hash type of rx packet
  - net: hns3: add barrier in vf mailbox reply process
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
  - net: hns3: fix not call nic_call_event() problem when reset failed
  - !1556  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1568  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1549  binder: fix UAF caused by faulty buffer cleanup
  - binder: fix UAF caused by faulty buffer cleanup


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.2.0.0213
changelog:
  - !1699 dm bugfixes backport from mainline
  - !1697  x86/cpu/amd: Add a Zenbleed fix
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - dm thin metadata: check fail_io before using data_sm
  - !1662  media: usb: siano: Fix CVE-2023-4132
  - !1696  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/cpu/amd: Add a Zenbleed fix
  - !1694 linux-4.19.y bugfixes backport
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - sch_netem: fix issues in netem_change() vs get_dist_table()
  - sch_netem: acquire qdisc lock in netem_change()
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - !1577  tracing: Fix warning in trace_buffered_event_disable()
  - !1663  tty: fix pid memleak in disassociate_ctty()
  - tty: fix pid memleak in disassociate_ctty()
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - !1629  can: raw: fix receiver memory leak
  - !1655  can: bcm: Fix UAF in bcm_proc_show()
  - can: bcm: Fix UAF in bcm_proc_show()
  - can: raw: fix lockdep issue in raw_release()
  - can: raw: fix receiver memory leak
  - !1625  Fix host zero page refcount overflow caused by kvm
  - !1595  net: nfc: Fix CVE-2023-3863
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
  - KVM: fix overflow of zero page refcount with ksm running
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - nfc: llcp: nullify llcp_sock->dev on connect() error paths
  - nfc: Fix to check for kmemdup failure
  - tracing: Fix warning in trace_buffered_event_disable()


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.3.0.0214
changelog:
  - !1762  xen/netback: Fix buffer overrun triggered by unusual packet
  - xen/netback: Fix buffer overrun triggered by unusual packet
  - !1761 fix CVE-2023-4194
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - !1728  fix CVE-2023-4128
  - !1673  sched: disable sched_autogroup by default
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
  - !1712  xfrm: add NULL check in xfrm_update_ae_params
  - xfrm: add NULL check in xfrm_update_ae_params
  - sched: disable sched_autogroup by default


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.4.0.0215
changelog:
  - !1831  fix NULL pointer dereference in __nf_nat_mangle_tcp_packet
  - netfilter: nat: fix kabi change
  - netfilter: nat: fix udp checksum corruption
  - netfilter: nat: remove csum_recalc hook
  - !1769  workqueue: Make flush_workqueue() also watch flush_work()
  - !1803  net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  - !1767  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - workqueue: Assign a color to barrier work items
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier()
  - workqueue: Change arguement of pwq_dec_nr_in_flight()
  - workqueue: Rename "delayed" (delayed by active management) to "inactive"
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2308.5.0.0216
changelog:
  - !1863  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1638 [openEuler-1.0-LTS] Add support for Hygon model 4h~6h processors
  - !1884  ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - !1882  ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
  - EDAC/amd64: Add support for Hygon family 18h model 6h
  - x86/amd_nb: Add support for Hygon family 18h model 6h
  - hwmon/k10temp: Add support for Hygon family 18h model 5h
  - EDAC/amd64: Add support for Hygon family 18h model 5h
  - x86/amd_nb: Add support for Hygon family 18h model 5h
  - x86/cpu: Get LLC ID for Hygon family 18h model 5h
  - i2c-piix4: Remove the IMC detecting for Hygon SMBus
  - hwmon/k10temp: Add support for Hygon family 18h model 4h
  - EDAC/mce_amd: Use struct cpuinfo_x86.logical_die_id for Hygon NodeId
  - EDAC/amd64: Adjust address translation for Hygon family 18h model 4h
  - EDAC/amd64: Add support for Hygon family 18h model 4h
  - EDAC/amd64: Get UMC channel from the 6th nibble for Hygon
  - iommu/hygon: Add support for Hygon family 18h model 4h IOAPIC
  - x86/amd_nb: Add northbridge support for Hygon family 18h model 4h
  - x86/amd_nb: Add Hygon family 18h model 4h PCI IDs
  - x86/microcode/hygon: Add microcode loading support for Hygon processors
  - x86/cpu/hygon: Modify the CPU topology deriving method for Hygon
  - x86/MCE/AMD: Use an u64 for bank_map
  - EDAC/mc_sysfs: Increase legacy channel support to 12
  - EDAC/amd64: Add new register offset support and related changes
  - EDAC/amd64: Set memory type per DIMM
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh
  - EDAC: Add RDDR5 and LRDDR5 memory types
  - hwmon: (k10temp) Remove unused definitions
  - hwmon: (k10temp) Remove residues of current and voltage
  - hwmon: (k10temp) Rework the temperature offset calculation
  - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU
  - x86/cstate: Allow ACPI C1 FFH MWAIT use on Hygon systems
  - x86/topology: Make __max_die_per_package available unconditionally
  - x86/cpu/amd: Set __max_die_per_package on AMD
  - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs
  - EDAC: Add DDR5 new memory type
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
  - x86/CPU/AMD: Save AMD NodeId as cpu_die_id
  - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh
  - hwmon: (k10temp) Add support for Zen3 CPUs
  - x86/mce: Increase maximum number of banks to 64
  - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs
  - hwmon: (k10temp) Create common functions and macros for Zen CPU families
  - i2c: designware: Add device HID for Hygon I2C controller
  - hwmon: (k10temp) make some symbols static
  - hwmon: (k10temp) Reorganize and simplify temperature support detection
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs
  - hwmon: (k10temp) Report temperatures per CPU die
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info
  - hwmon: (k10temp) Use bitops
  - hwmon: Add convience macro to define simple static sensors
  - hwmon: (k10temp) Auto-convert to use SENSOR_DEVICE_ATTR_{RO, RW, WO}
  - hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants
  - x86/umip: Make the UMIP activated message generic
  - x86/umip: Print UMIP line only once
  - x86/microcode/AMD: Clean up per-family patch size checks
  - !1689 [openEuler-1.0-LTS] drm/atomic-helper: Bump vblank timeout to 100 ms
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1807  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1844  net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - !1785  README: Remove out-of-date contribution guide
  - !1849  fs: jfs: fix possible NULL pointer dereference in dbFree()
  - fs: jfs: fix possible NULL pointer dereference in dbFree()
  - !1836  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - README: Remove out-of-date contribution guide
  - drm/atomic-helper: Bump vblank timeout to 100 ms


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.1.0.0217
changelog:
  - !1964  crypto:padata: Fix return err for PADATA_RESET
  - !1955  fuse: revalidate: don't invalidate if interrupted
  - !1973  sched/smt: fix unbalance sched_smt_present dec/inc
  - sched/smt: fix unbalance sched_smt_present dec/inc
  - !1906  tracing: Fix memleak due to race between current_tracer and trace
  - !1958  block: don't get gendisk if queue has not been registered
  - crypto:padata: Fix return err for PADATA_RESET
  - block: don't get gendisk if queue has not been registered
  - fuse: revalidate: don't invalidate if interrupted
  - !1902  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed


author: Zhang Changzhong <zhangchangzhong@huawei.com> - 4.19.90-2309.3.0.0218
changelog:
  - !2084  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2071 【openEuler-1.0-LTS】net: openvswitch: don't send internal clone attribute to the userspace
  - net: openvswitch: don't send internal clone attribute to the userspace.
  - !2089  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !335 efi: fix crash due to EFI runtime service page faults
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - !2088 [openEuler-1.0-LTS] bugfixes of scsi
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2069  x86/speculation: Add Gather Data Sampling mitigation
  - !1692  Mainline bugfix patches backport 4.19
  - !2075  x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !2079 [openEuler-1.0-LTS] stable inclusion from linux-4.19.y
  - scsi: core: raid_class: Remove raid_component_add()
  - scsi: core: Fix possible memory leak if device_add() fails
  - scsi: core: Fix legacy /proc parsing buffer overflow
  - serial: 8250_dw: Preserve original value of DLF register
  - serial: 8250_dw: split Synopsys DesignWare 8250 common functions
  - nbd: Add the maximum limit of allocated index in nbd_dev_add
  - integrity: Fix possible multiple allocation in integrity_inode_get()
  - !2070 net bugfixes inclusion from linux-4.19.y
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit
  - net/packet: annotate data-races around tp->status
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
  - tcp_metrics: annotate data-races around tm->tcpm_net
  - tcp_metrics: annotate data-races around tm->tcpm_vals[]
  - tcp_metrics: annotate data-races around tm->tcpm_lock
  - tcp_metrics: annotate data-races around tm->tcpm_stamp
  - tcp_metrics: fix addr_same() helper
  - virtio-net: set queues after driver_ok
  - virtio-net: fix race between set queues and probe
  - team: reset team's flags when down link is P2P device
  - bonding: reset bond's flags when down link is P2P device
  - tcp: annotate data-races around fastopenq.max_qlen
  - tcp: annotate data-races around tp->notsent_lowat
  - tcp: annotate data-races around rskq_defer_accept
  - tcp: annotate data-races around tp->linger2
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
  - net/sched: make psched_mtu() RTNL-less safe
  - udp6: fix udp6_ehashfn() typo
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
  - vrf: Increment Icmp6InMsgs on the original netdev
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
  - tcp: annotate data races in __tcp_oow_rate_limited()
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
  - ipvlan: Fix return value of ipvlan_queue_xmit()
  - netlink: do not hard code device address lenth in fdb dumps
  - netlink: Add __sock_i_ino() for __netlink_diag_dump().
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - !1987  tracing: Fix race issue between cpu buffer write and swap
  - !2067  memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - netlink: fix potential deadlock in netlink_set_err()
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation
  - !2063  cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2046  use precise io accounting apis
  - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
  - !2050  memcg: fix a UAF problem in drain_all_stock()
  - !1976  fix race between setxattr and write back
  - memcg: fix a UAF problem in drain_all_stock()
  - dm: switch to precise io accounting
  - block: add precise io accouting apis
  - tracing: Fix race issue between cpu buffer write and swap
  - ext2: dump current reservation window info
  - ext2: fix race between setxattr and write back
  - ext2: introduce flag argument for ext2_new_blocks()
  - ext2: remove ext2_new_block()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Recover from synchronous exceptions occurring in firmware
  - arm64: efi: Execute runtime services from a dedicated stack
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - arm64: efi: Restore register x18 if it was corrupted
  - x86/efi: fix a -Wtype-limits compilation warning
  - efi: Fix build error due to enum collision between efi.h and ima.h
  - efi: Fix debugobjects warning on 'efi_rts_work'
  - efi/x86: Handle page faults occurring while running EFI runtime services
  - efi: Make efi_rts_work accessible to efi page fault handler
  - lib/genalloc.c: change return type to unsigned long for bitmap_set_ll
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb1
changelog:
  - clk: scpi: add soft dependenciy on scpi-cpufreq
  - config: arm64: enable at24
  - config: arm64: enable stmicro ethernet driver
  - config: arm64: enable zhaoxin sata controller
  - config: arm64: enable renesas xhci controller
  - config: arm64: enable massive wireless network drivers
  - config: arm64: enable bluetooth support
  - config: arm64: enable massive sound card drivers
  - config: arm64: enable device drivers for phytium platform
  - config: arm64: enable silicon motion sm7xx display driver
  - config: arm64: enable jjw mwv display driver
  - config: arm64: enable motorcom phy driver
  - config: arm64: enable zhaoxin ethernet driver
  - config: arm64: enable mucse ethernet driver
  - config: arm64: enable wangxun ngbe ethernet driver
  - config: arm64: fix reassigning to symbol warnings
  - net: mucse: add rnpm mac driver
  - net: mucse: add rnpvf mac driver
  - net: mucse: add rnp mac driver
  - mailbox: fix uninitialized build warnings
  - mailbox: add acpi support
  - mailbox: add phytium mailbox support
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - wdt: add wdt resource name
  - drm/smifb: fix section mismatch build warnings
  - drm/smifb: simplify makefile
  - drm: add sm7xx drivers
  - KVM: arm/arm64: disable WARN_ON for non-hisi cpu
  - rtc: class: add debug message when registration fails
  - rtc: class: support hctosys from modular RTC drivers
  - driver core: platform: return -ENXIO for missing GpioInt
  - driver: platform: Support parsing GpioInt 0 in platform_get_irq()
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: renesas-xhci: Remove renesas_xhci_pci_exit()
  - usb: xhci: avoid renesas_usb_fw.mem when it's unusable
  - usb: xhci: Add support for Renesas controller with memory
  - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
  - usb: renesas-xhci: remove version check
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - mm: support memblock alloc on the exact node for sparse_buffer_init()
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - hwmon: (scpi-hwmon) shows the negative temperature properly
  - net: add support of zhaoxin gigabyte network interface controller driver
  - sched/rt: Disable RT_RUNTIME_SHARE by default
  - scsi: sr: get rid of sr global mutex
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - net: stmmac set 32bit DMA mask to allocate DMA buffer
  - platform: add phytium platform support
  - bus: phytium_lpc: register as module platform driver
  - bus: add phytium_lpc support
  - watchdog: dw_wdt: add acpi support
  - ASoC: phytium: add phytium x100 DP support
  - ASoC: phytium: add phytium x100 support with ES8388
  - ASoC: phytium: add phytium x100 support with ES8336
  - ASoC: add phytium i2s support
  - ASoC: add es8388 codec driver
  - ASoC: add es8336 codec driver
  - ALSA: hda/phytium: add command resend support
  - ALSA: hda: add acpi support
  - clk: scpi: add acpi support
  - hwmon: scpi: add acpi support
  - firmware: arm_scpi: fix use-after-free
  - firmware: arm_scpi: add acpi support
  - mfd: add phytium x100 MMD I2S controller support
  - mfd: add phytium x100 LSD I2S controller support
  - media: add pytium e2000 JPEG encoder support
  - PCI: add phytium pci endpoint controller support
  - mtd: spi-nor: add phytium Quad SPI controller support
  - mtd: nandraw: add phytium NAND controller platform support
  - mtd: nandraw: add phytium NAND controller pci support
  - mtd: nandraw: add phytium NAND controller support
  - mmc: add phytium multimedia card interface platform support
  - mmc: add phytium multimedia card interface pci support
  - mmc: add phytium SD host controller support
  - dmaengine: add phytium x100 pci dma support
  - acpi/irq: Implement helper to create hierachical domains
  - irqchip: add phytium INTx support
  - pwm: add phytium PWM support
  - hwrng: add phytium hardware RNG support
  - config: arm64: enable CONFIG_CPUFREQ_DT
  - cpufreq: scpi: add acpi support
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - ASoC: hdmi-codec: Add an op to set callback function for plug event
  - ipmi: add phytium bt bmc driver support
  - ipmi: add phytim kcs impi bmc support
  - usb: phytium-usb: depends on USB_GADGET
  - usb: add phytium USB support
  - tty: serial: add phytium PCI serial port support
  - input: serio: add phytium ps2 support
  - input: keyboard: add phytium keypad support
  - hwmon: add phytium fan tacho support
  - iio: adc: Add support phytium adc
  - w1: add phytium 1-wire bus master controller driver
  - can: add phytium CAN support
  - net: stmmac: add acpi support
  - net: phy: abort loading yt8511 driver in unsupported modes
  - net: phy: fix yt8511 clang uninitialized variable warning
  - net: phy: add driver for Motorcomm yt8511 phy
  - net: phy: add macros for PHYID matching
  - spi: phytium: fix phytium_spi_add_host
  - spi: add phytium spi platform support
  - spi: add phytium spi pci support
  - spi: add phytium spi core support
  - rtc: rtc-phytium: add rtc support
  - gpio: add phytium sgpio support
  - gpio: add phytium gpio platform support
  - gpio: add phytium gpio pci support
  - gpio: add phytium gpio core support
  - i2c: designware: add acpi match table
  - i2c: add phytium i2c platform support
  - i2c: add phytium i2c pci support
  - i2c: add phytium i2c core support
  - ACPI: APD: Add clock frequency for phytium e2000
  - ACPI: APD: Add clock frequency for phytium
  - drm: add phytium gpu driver
  - xHCI: Add XHCI_SLOWDOWN_QUIRK quirk for phytium xHCI controller
  - xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  - PCI: Mark Px210 PCI-E Extended Tags as broken
  - PCI: Add Phytium vendor ID
  - dt-bindings: arm: cpus: Add phytium compatible
  - dt-bindings: vendor-prefixes: Add phytium vendor prefix
  - arm64: dts: phytium: add e2000 development board
  - arm64: dts: phytium: add d2000 development board
  - arm64: dts: phytium: add ft2004 development board
  - arm64: dts: phytium: add ft2000plus development board
  - arm64: dts: phytium: add ft2000a development board
  - arm64: dts: phytium: add ft1500a development board
  - arm64: workaround for phytium S2500
  - arm64: add model name for phytium cpu in cpuinfo
  - arm64: add uImage build rule
  - drm/mwv207: fix conflicting types of _QuerySignal
  - drm/mwv207: fix implicit declaration of j9maths_debasement
  - drm/mwv207: simplify makefile
  - gpu: drm: add jjw mwv207 support
  - drm/mwv206: suppress unused function build warnings
  - gpu: drm: add jjw mwv206 support
  - video/logo: replace logo


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb2
changelog:
  - serial: pl011: Add dynamic baud rate for sbsa uart
  - config: arm64: don't filter access to /dev/mem
  - config: x86: optimize kernel configs for performance
  - syscall: remove local_daif_mask/store
  - config: arm64: optimize kernel configs for performance
  - kpti: KASLR does not force KPTI to be turned on
  - sched: Add affinity wake-up code
  - lse atomic performance optimization
  - arm64: add SMID register copy_page
  - pipe performance optimization
  - topology: Represent clusters of CPUs within a die
  - bonding: enhanced bond3 support
  - config: enable console cjk font
  - vt: fix depend issue
  - vt: add cjk font that has 65536 chars
  - vt: diable setfont if we have cjk font in kernel
  - vt: fix 255 glyph limit, prepare for CJK font support


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb3
changelog:
  - kabi: fix (config: x86: optimize kernel configs for performance) kabi broken
  - kabi: fix (config: arm64: optimize kernel configs for performance) kabi broken
  - kabi: fix (sched: Add affinity wake-up code) kabi broken
  - kabi: fix ARM64_HAS_LSE_ATOMICS1 cause kabi broken
  - kabi: fix ldp/stnp patch kabi broken
  - sched: fix build warnings
  - kabi: arm64: fix kabi broken
  - kabi: acpi: fix kabi broken
  - config: arm64: enable optee
  - tee: optee: add acpi match table
  - optee: Refuse to load the driver under the kdump kernel
  - tee: optee: fix return value type mismatch build warning
  - optee: model OP-TEE as a platform device/driver
  - tee: optee: log message if dynamic shm is enabled


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb4
changelog:
  - config: x86: enable jjw mwv display driver
  - rtc: class: hctosys after registering rtc with rtc_device_register
  - rtc: class: remove redundant assignment to variable err
  - rtc: class: avoid unnecessary lookup in hctosys


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb5
changelog:
  - config: arm64: disable SERIO_PHYTIUM_PS2
  - Revert "PCI: Mark Px210 PCI-E Extended Tags as broken"
  - serial: phytium-uart: rename device name


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb6
changelog:
  - config: arm64: enable i3c
  - i3c: cdns: guard phytium workaround
  - i3c: master: Use fallthrough comment
  - i3c: cdns: Fix DAA fail at high frequency
  - i3c: cdns: Add GETMXDS format 1 retransmission
  - i3c: cdns: add support for Phytium workaround
  - i3c: Make remove callback return void
  - i3c: Handle drivers without probe or remove callback
  - i3c: master: Fix error return in cdns_i3c_master_probe()
  - i3c: master: fix for SETDASA and DAA process
  - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
  - i3c master: GETMRL's 3rd byte is optional even with BCR_IBI_PAYLOAD
  - i3c: master: Replace zero-length array with flexible-array member
  - i3c: Simplify i3c_device_match_id()
  - i3c: Add a modalias sysfs attribute
  - i3c: Fix MODALIAS uevents
  - i3c: master: no need to iterate master device twice
  - i3c: master: make i3c_bus_set_mode static
  - i3c: master: cdns: add data hold delay support
  - i3c: Spelling s/dicovered/discovered/
  - i3c: master: use i3c_dev_get_master()
  - i3c: master: Use dev_to_i3cmaster()
  - i3c: master: fix a memory leak bug
  - i3c: add addr and lvr to i2c_dev_desc structure
  - i3c: master: cdns: Use for_each_set_bit()
  - i3c: master: Add of_node_put() before return
  - i3c: move i3c_device_match_id to device.c and export it
  - i3c: master: Use struct_size() helper
  - i3c: add mixed limited bus mode
  - i3c: fix i2c and i3c scl rate by bus mode
  - i3c: Drop support for I2C 10 bit addresing
  - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
  - i3c: Fix the verification of random PID
  - i3c: fix missing detach if failed to retrieve i3c dev
  - i3c: master: Fix an error checking typo in 'cdns_i3c_master_probe()'
  - i3c: master: cdns: fix I2C transfers in Cadence I3C master driver
  - ic3: off by one in mode_show()
  - i3c: fix an error code in i3c_master_add_i3c_dev_locked()
  - i3c: master: Remove set but not used variable 'old_i3c_scl_lim'
  - i3c: master: Add driver for Cadence IP
  - i3c: Add core I3C infrastructure


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb7
changelog:
  - performace: optimize unixbench context1/spawn performance
  - config: arm64: disable optee
  - Fix virtual machine soft deadlock issues


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2309.3.0.0218.kb11
changelog:
  - performance: fix the bug(performance: Add affinity wake-up for x86)
  - config: arm64: enable DVFS
  - phytium: fix phytium patch problem(PCI/ACPI: Add stacked IRQ domain support to PCI Interrupt Link)
  - PCI/ACPI: Add stacked IRQ domain support to PCI Interrupt Link


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.3.0.0260
changelog:
  - !3768  iomap: add support to track dirty state of sub pages
  - !3845  netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3847  nvmet: nul-terminate the NQNs passed in the connect command
  - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2
  - team: Fix use-after-free when an option instance allocation fails
  - packet: Move reference count in packet_sock to atomic_long_t
  - tcp: do not accept ACK of bytes we never sent
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - ipv6: fix potential NULL deref in fib6_add()
  - ipv4: Correct/silence an endian warning in __ip_do_redirect
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: Don't propagate promisc change to lower dev in passthru
  - ppp: limit MRU to 64K
  - tty: Fix uninit-value access in ppp_sync_receive()
  - net: annotate data-races around sk->sk_dst_pending_confirm
  - net: annotate data-races around sk->sk_tx_queue_mapping
  - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1
  - ring-buffer: Fix memory leak of free page
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - x86/CPU/AMD: Check vendor in the AMD microcode callback
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - audit: don't take task_lock() in audit_exe_compare() code path
  - nvmet: nul-terminate the NQNs passed in the connect command
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3823 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3803  net/sched: cbs: Fix not adding cbs instance to list
  - net/sched: cbs: Fix not adding cbs instance to list
  - !3770  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - iomap: add support to track dirty state of sub pages
  - !3757  Fix bugs from LTS patches
  - devcoredump: Send uevent once devcd is ready
  - devcoredump : Serialize devcd_del work
  - driver core: Release all resources during unbind before updating device links
  - !3716  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3667  net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - net/rose: Fix Use-After-Free in rose_ioctl


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.4.0.0261
changelog:
  - !4006  crypto: hisilicon/sec2: fix memory use-after-free issue
  - crypto: hisilicon/sec2: fix memory use-after-free issue
  - !3923  net: bridge: multicast: fix UAF of net_bridge
  - net: bridge: multicast: fix UAF of net_bridge


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2401.5.0.0262
changelog:
  - !4101  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !2954 spi: phytium: fix phytium_spi_irq panic on boot
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4067  fix CVE-2022-48619
  - !4080  rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
  - !4065  smb: client: fix OOB in receive_encrypted_standard()
  - !4021  netfilter: nf_tables: Reject tables of unsupported family
  - Input: add bounds checking to input_set_capability()
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4039  crypto: hisilicon/qm: fix several issues
  - !4025  crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - !3980  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - crypto: hisilicon/qm: fix several issues
  - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - netfilter: nf_tables: Reject tables of unsupported family
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - spi: phytium: fix phytium_spi_irq panic on boot


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.1.0.0263
changelog:
  - !4277  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4288  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4299  smb: client: fix NULL deref in asn1_ber_decoder()
  - smb: client: fix NULL deref in asn1_ber_decoder()
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4228  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4235  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4255  drm/amdgpu: Fix potential fence use-after-free v2
  - !4209  dhugetlb: skip unexpected migration
  - drm/amdgpu: Fix potential fence use-after-free v2
  - !4231  crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - !4212  netlink: fix potential sleeping issue in mqueue_flush_file
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - dhugetlb: skip unexpected migration
  - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function
  - !3944  time: Handle negative seconds correctly in timespec64_to_ns()
  - !3943  timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - !3942  efi/x86: Map the entire EFI vendor string before copying it
  - !4166  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !4137  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - time: Handle negative seconds correctly in timespec64_to_ns()
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - efi/x86: Map the entire EFI vendor string before copying it


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.4.0.0264
changelog:
  - !4454  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4411 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4412 v3  Save and restore msg_namelen in sock_sendmsg
  - net: Save and restore msg_namelen in sock_sendmsg
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - !4399  net: dst: Optimized route gc
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4392 linux-4.19.y inclusion
  - !4369  mm/filemap: avoid buffered read/write race to read inconsistent data
  - net/dst: use a smaller percpu_counter batch for dst entries accounting
  - net: add a route cache full diagnostic message
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - mm: fix unmap_mapping_range high bits shift bug
  - x86/alternatives: Sync core before enabling interrupts
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4360  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - !4320  io_uring/af_unix: disable sending io_uring over sockets
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - io_uring/af_unix: disable sending io_uring over sockets


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.5.0.0266
changelog:
  - !4601 v2  xen-netback: don't produce zero-size SKB frags
  - xen-netback: don't produce zero-size SKB frags
  - !4583  net: hns3: fix a bug and modify the hns3 driver version
  - net: hns3: update hns3 version to 24.2.1
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - !4552 v4  CVE-2023-52340
  - !4526 v2  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - ipv6: fix kabi broken in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - !4538  fix kprobe reenter bug
  - arm64/openeuler_defconfig: add not set config to fix compiling error
  - tracing/kprobes: Do the notrace functions check without kprobes on ftrace
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.6.0.0267
changelog:
  - !4701 v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - !4684 v3  CVE-2023-52435
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - !4643  f2fs: explicitly null-terminate the xattr list
  - f2fs: explicitly null-terminate the xattr list


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.1.0.0268
changelog:
  - !4947  powerpc/64s: Fix pte update for kernel memory on radix
  - !4932  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - powerpc/64s: Fix pte update for kernel memory on radix
  - !4874 v2  net: openvswitch: limit the number of recursions from action sets
  - !4920  ARM: footbridge: remove personal server platform
  - !4887  KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - !4918 v3  usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4936  i2c: validate user data in compat ioctl
  - i2c: validate user data in compat ioctl
  - !4898  platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4879  KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - !4869  Fix CVE-2021-46941
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4904  i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4859  hfsplus: prevent corruption in shrinking truncate
  - !4877  i2c: Fix a potential use after free
  - ARM: footbridge: fix PCI interrupt mapping
  - !4888 v3  media: dvbdev: Fix memory leak in dvb_media_device_free()
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4825  sched/membarrier: reduce the ability to hammer on sys_membarrier
  - !4882  Input: appletouch - initialize work before device registration
  - !4876  backport patch to fix CVE-2021-47077
  - !4899  net: qualcomm: rmnet: fix global oob in rmnet_policy
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4892  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !4881  i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4865  Input: powermate - fix use-after-free in powermate_config_complete
  - !4860  apparmor: avoid crash when parsed profile name is empty
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - media: dvbdev: Fix memory leak in dvb_media_device_free()
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - Input: appletouch - initialize work before device registration
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - i2c: Fix a potential use after free
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - net: openvswitch: limit the number of recursions from action sets
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: balance phy init and exit
  - usb: dwc3: core: Do core softreset when switch mode
  - Input: powermate - fix use-after-free in powermate_config_complete
  - !4856  bus: qcom: Put child node before return
  - apparmor: avoid crash when parsed profile name is empty
  - hfsplus: prevent corruption in shrinking truncate
  - bus: qcom: Put child node before return
  - !4828  Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4806 v2  media: pvrusb2: fix use after free on context disconnection
  - !4777  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4819 v2  fix CVE-2020-36782
  - !4833  openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - !4677  f2fs: fix to avoid dirent corruption
  - !4804  CVE-2023-52451 backport to 4.19 v2
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4778 v3  Revert "memcg: fix a UAF problem in drain_all_stock()"
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - !4812  parisc: Clear stale IIR value on instruction access rights trap
  - parisc: Clear stale IIR value on instruction access rights trap
  - media: pvrusb2: fix use after free on context disconnection
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - !4758  binder: signal epoll threads of self-work
  - !4746  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - Revert "memcg: fix a UAF problem in drain_all_stock()"
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to  fifo depth - 1
  - !4707  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - !4686  mlxsw: spectrum_acl_tcam: Fix stack corruption
  - binder: signal epoll threads of self-work
  - !4710  CVE-2021-46904 for openEuler1.0
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - !4671  uio: Fix use-after-free in uio_open
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - net: hso: fix NULL-deref on disconnect regression
  - net: hso: fix null-ptr-deref during tty device unregistration
  - usb: hso: check for return value in hso_serial_common_create()
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - f2fs: fix to avoid dirent corruption
  - uio: Fix use-after-free in uio_open


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2403.1.0.0268.kb1
changelog:
  - pci: add workaround for phytium laptops
  - ASoC: phytium: phytium_i2s: add a default i2s clock rate if ACPI tables don't have i2s_clk property
  - ASoC: phytium: phytium_i2s: add missing MODULE_DEVICE_TABLE for acpi
  - ASoC: es8388: unmute by default
  - drm/nouveau/kms: fix a crash on arm64
  - platform/phytium: phytium-power: fix some D2000 laptop's hardware or EC firmware bugs
  - platform/phytium: rename phytium_battery.c to phytium_power.c
  - platform/phytium: phytium-battery: refactor phytium battery driver
  - config: enable igc ethernet driver
  - igc: Remove unneeded hw_dbg prints
  - igc: Fix the typo in igc_base.h header definition
  - igc: Add support for the ntuple feature
  - igc: Add support for statistics
  - igc: Extend the ethtool supporting
  - igc: Add multiple receive queues control supporting
  - igc: Use struct_size() helper
  - igc: Add ethtool support
  - igc: Remove the 'igc_get_phy_id_base' method
  - igc: Remove the 'igc_read_mac_addr_base' method
  - igc: Remove unneeded code
  - igc: Remove unused code
  - igc: Fix code redundancy
  - igc: Remove unreachable code from igc_phy.c file
  - igc: Remove obsolete IGC_ERR define
  - ethernet/intel: consolidate NAPI and NAPI exit
  - igc: Clean up code
  - igc: Tidy up some white space
  - igc: fix error return handling from call to netif_set_real_num_tx_queues
  - igc: Remove set but not used variable 'pci_using_dac'
  - igc: Remove set but not used variables 'ctrl_ext, link_mode'
  - intel-ethernet: software timestamp skbs as late as possible
  - igc: Add watchdog
  - igc: Add setup link functionality
  - igc: Add code for PHY support
  - igc: Add NVM support
  - igc: Add HW initialization code
  - igc: Add transmit and receive fastpath and interrupt handlers
  - igc: Add support for Tx/Rx rings
  - igc: Add interrupt support
  - igc: Add netdev
  - igc: Add support for PF
  - igc: Add skeletal frame for Intel(R) 2.5G Ethernet Controller support
  - config: x86: enable SM3 and SM4 algorithms
  - config: arm64: enable SM3 algorithm
  - xfrm: Add support for SM1 symmetric cipher algorithm
  - xfrm: SM4: remove geniv
  - xfrm: SM3: set truncbits to 96
  - xfrm: Add support for SM4 symmetric cipher algorithm
  - xfrm: Add support for SM3 secure hash
  - config: arm64: enable DVFS
  - Revert "arm64: zero GPRs upon entry from EL0"
  - arm64: kpti: Add phytium CUPs to the KPTI whitelist
  - config: arm64: enable i3c
  - i3c: cdns: guard phytium workaround
  - i3c: master: Use fallthrough comment
  - i3c: cdns: Fix DAA fail at high frequency
  - i3c: cdns: Add GETMXDS format 1 retransmission
  - i3c: cdns: add support for Phytium workaround
  - i3c: Make remove callback return void
  - i3c: Handle drivers without probe or remove callback
  - i3c: master: Fix error return in cdns_i3c_master_probe()
  - i3c: master: fix for SETDASA and DAA process
  - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
  - i3c master: GETMRL's 3rd byte is optional even with BCR_IBI_PAYLOAD
  - i3c: master: Replace zero-length array with flexible-array member
  - i3c: Simplify i3c_device_match_id()
  - i3c: Add a modalias sysfs attribute
  - i3c: Fix MODALIAS uevents
  - i3c: master: no need to iterate master device twice
  - i3c: master: make i3c_bus_set_mode static
  - i3c: master: cdns: add data hold delay support
  - i3c: Spelling s/dicovered/discovered/
  - i3c: master: use i3c_dev_get_master()
  - i3c: master: Use dev_to_i3cmaster()
  - i3c: master: fix a memory leak bug
  - i3c: add addr and lvr to i2c_dev_desc structure
  - i3c: master: cdns: Use for_each_set_bit()
  - i3c: master: Add of_node_put() before return
  - i3c: move i3c_device_match_id to device.c and export it
  - i3c: master: Use struct_size() helper
  - i3c: add mixed limited bus mode
  - i3c: fix i2c and i3c scl rate by bus mode
  - i3c: Drop support for I2C 10 bit addresing
  - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
  - i3c: Fix the verification of random PID
  - i3c: fix missing detach if failed to retrieve i3c dev
  - i3c: master: Fix an error checking typo in 'cdns_i3c_master_probe()'
  - i3c: master: cdns: fix I2C transfers in Cadence I3C master driver
  - ic3: off by one in mode_show()
  - i3c: fix an error code in i3c_master_add_i3c_dev_locked()
  - i3c: master: Remove set but not used variable 'old_i3c_scl_lim'
  - i3c: master: Add driver for Cadence IP
  - i3c: Add core I3C infrastructure
  - config: arm64: disable SERIO_PHYTIUM_PS2
  - serial: phytium-uart: rename device name
  - config: x86: enable jjw mwv display driver
  - rtc: class: hctosys after registering rtc with rtc_device_register
  - rtc: class: remove redundant assignment to variable err
  - rtc: class: avoid unnecessary lookup in hctosys
  - kabi: acpi: fix kabi broken
  - optee: Refuse to load the driver under the kdump kernel
  - tee: optee: fix return value type mismatch build warning
  - serial: pl011: Add dynamic baud rate for sbsa uart
  - config: arm64: don't filter access to /dev/mem
  - kpti: KASLR does not force KPTI to be turned on
  - topology: Represent clusters of CPUs within a die
  - bonding: enhanced bond3 support
  - config: enable console cjk font
  - vt: fix depend issue
  - vt: add cjk font that has 65536 chars
  - vt: diable setfont if we have cjk font in kernel
  - vt: fix 255 glyph limit, prepare for CJK font support
  - clk: scpi: add soft dependenciy on scpi-cpufreq
  - config: arm64: enable at24
  - config: arm64: enable zhaoxin sata controller
  - config: arm64: enable renesas xhci controller
  - config: arm64: enable bluetooth support
  - config: arm64: enable device drivers for phytium platform
  - config: arm64: enable silicon motion sm7xx display driver
  - config: arm64: enable jjw mwv display driver
  - config: arm64: enable motorcom phy driver
  - config: arm64: enable zhaoxin ethernet driver
  - config: arm64: enable mucse ethernet driver
  - net: mucse: add rnpm ethernet driver
  - net: mucse: add rnpvf ethernet driver
  - net: mucse: add rnp ethernet driver
  - mailbox: fix uninitialized build warnings
  - mailbox: add acpi support
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - wdt: add wdt resource name
  - drm/smifb: fix section mismatch build warnings
  - drm/smifb: simplify makefile
  - drm: add sm7xx drivers
  - KVM: arm/arm64: disable WARN_ON for non-hisi cpu
  - rtc: class: add debug message when registration fails
  - rtc: class: support hctosys from modular RTC drivers
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: renesas-xhci: Remove renesas_xhci_pci_exit()
  - usb: xhci: avoid renesas_usb_fw.mem when it's unusable
  - usb: xhci: Add support for Renesas controller with memory
  - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
  - usb: renesas-xhci: remove version check
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - mm: support memblock alloc on the exact node for sparse_buffer_init()
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - hwmon: (scpi-hwmon) shows the negative temperature properly
  - net: add support of zhaoxin gigabyte network interface controller driver
  - sched/rt: Disable RT_RUNTIME_SHARE by default
  - scsi: sr: get rid of sr global mutex
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - platform: add phytium platform support
  - bus: phytium_lpc: register as module platform driver
  - bus: add phytium_lpc support
  - watchdog: dw_wdt: add acpi support
  - ASoC: phytium: add phytium x100 DP support
  - ASoC: phytium: add phytium x100 support with ES8388
  - ASoC: phytium: add phytium x100 support with ES8336
  - ASoC: add phytium i2s support
  - ASoC: add es8388 codec driver
  - ASoC: add es8336 codec driver
  - clk: scpi: add acpi support
  - hwmon: scpi: add acpi support
  - firmware: arm_scpi: fix use-after-free
  - firmware: arm_scpi: add acpi support
  - mfd: add phytium x100 MMD I2S controller support
  - mfd: add phytium x100 LSD I2S controller support
  - PCI: add phytium pci endpoint controller support
  - mtd: nandraw: add phytium NAND controller platform support
  - mtd: nandraw: add phytium NAND controller pci support
  - mtd: nandraw: add phytium NAND controller support
  - dmaengine: add phytium x100 pci dma support
  - acpi/irq: Implement helper to create hierachical domains
  - irqchip: add phytium INTx support
  - pwm: add phytium PWM support
  - config: arm64: enable CONFIG_CPUFREQ_DT
  - cpufreq: scpi: add acpi support
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - ipmi: add phytium bt bmc driver support
  - ipmi: add phytim kcs impi bmc support
  - usb: phytium-usb: depends on USB_GADGET
  - usb: add phytium USB support
  - tty: serial: add phytium PCI serial port support
  - input: serio: add phytium ps2 support
  - hwmon: add phytium fan tacho support
  - net: phy: abort loading yt8511 driver in unsupported modes
  - net: phy: fix yt8511 clang uninitialized variable warning
  - net: phy: add driver for Motorcomm yt8511 phy
  - net: phy: add macros for PHYID matching
  - xHCI: Add XHCI_SLOWDOWN_QUIRK quirk for phytium xHCI controller
  - xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  - dt-bindings: arm: cpus: Add phytium compatible
  - arm64: dts: phytium: add e2000 development board
  - arm64: dts: phytium: add d2000 development board
  - arm64: dts: phytium: add ft2004 development board
  - arm64: dts: phytium: add ft2000plus development board
  - arm64: dts: phytium: add ft2000a development board
  - arm64: dts: phytium: add ft1500a development board
  - arm64: add model name for phytium cpu in cpuinfo
  - arm64: add uImage build rule
  - drm/mwv207: fix conflicting types of _QuerySignal
  - drm/mwv207: fix implicit declaration of j9maths_debasement
  - drm/mwv207: simplify makefile
  - gpu: drm: add jjw mwv207 support
  - drm/mwv206: suppress unused function build warnings
  - gpu: drm: add jjw mwv206 support
  - video/logo: replace logo


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.2.0.0269
changelog:
  - !5133  CVE-2021-46926
  - !5136  NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - !5052 v3  Remove WQ_FLAG_BOOKMARK flag
  - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - soundwire: intel: filter SoundWire controller device search
  - !5114  fix CVE-2023-52578
  - !5119  crypto: scomp - fix req->dst buffer overflow
  - !5101  EDAC/thunderx: Fix possible out-of-bounds string access
  - !5094  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - crypto: scomp - fix req->dst buffer overflow
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - !5092  wifi: mac80211: fix potential key use-after-free
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2
  - !5090  drm: bridge/panel: Cleanup connector on bridge detach
  - !5088  uio_hv_generic: Fix a memory leak in error handling paths
  - !4952  scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - !5076 v3  CVE-2021-47074
  - netfilter: nft_compat: reject unused compat flag
  - ppp_async: limit MRU to 64K
  - inet: read sk->sk_family once in inet_recv_error()
  - bonding: remove print in bond_verify_device_path
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - net: ipv4: fix a memleak in ip_setup_cork
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - virtio_net: Fix Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - SUNRPC: Fix a suspicious RCU usage warning
  - tcp: Add memory barrier to tcp_push()
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - md: Whenassemble the array, consult the superblock of the freshest device
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - !5073  RDMA/rxe: Clear all QP fields if creation failed
  - !5077  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - wifi: mac80211: fix potential key use-after-free
  - drm: bridge/panel: Cleanup connector on bridge detach
  - uio_hv_generic: Fix a memory leak in error handling paths
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: unittest: Fix compile in the non-dynamic case
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - nvme-loop: don't put ctrl on nvme_init_ctrl error
  - !5060  net: fix possible store tearing in neigh_periodic_work()
  - RDMA/rxe: Clear all QP fields if creation failed
  - net: fix possible store tearing in neigh_periodic_work()
  - of: Fix double free in of_parse_phandle_with_args_map
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - audit: Send netlink ACK before setting connection in auditd_set
  - crypto: scompress - return proper error code for allocation failure
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - !5046  usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - !4929  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !4752  block: add check that partition length needs to be aligned with block size
  - !4735  blk-mq: fix IO hang from sbitmap wakeup race
  - !3864  nvme: sanitize metadata bounce buffer for reads
  - !4946  NFC: st21nfca: Fix memory leak in device probe and remove
  - !4999  CVE-2021-46984
  - !4938  crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - !4990  vt: fix memory overlapping when deleting chars in the buffer
  - !4978  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5018  ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4992  bnxt_en: Fix RX consumer index logic in the error path.
  - !4997  Fixed CVE-2023-52504
  - !4982  i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - !4983  net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - !4995  mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - !4974  arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !4975  arm64/mpam: support resctrl fs to show mounting option
  - !4973  arm64/mpam: Skip updates of unrelated ctrl type
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4996  soundwire: stream: fix memory leak in stream config error path
  - !4817 v2  io_uring: fix overflows checks in provide buffers
  - kyber: fix kabi broken in ->bio_merge()
  - kyber: fix out of bounds access when preempted
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - soundwire: stream: fix memory leak in stream config error path
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - bnxt_en: Fix RX consumer index logic in the error path.
  - !4969  CVE-2021-46990
  - vt: fix memory overlapping when deleting chars in the buffer
  - !4945  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4944  perf/x86/lbr: Filter vsyscall addresses
  - !4967  i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - !4970  binder: fix async_free_space accounting for empty parcels
  - !4919 v2  HID: usbhid: fix info leak in hid_submit_ctrl
  - !4980  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4949  CVE-2021-47024
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - arm64/mpam: Skip updates of unrelated ctrl type
  - binder: fix async_free_space accounting for empty parcels
  - powerpc/64s: Fix crashes when toggling entry flush barrier
  - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - vsock/virtio: free queued packets when closing socket
  - vsock/virtio: discard packets only when socket is really closed
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - NFC: st21nfca: Fix memory leak in device probe and remove
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - perf/x86/lbr: Filter vsyscall addresses
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - HID: usbhid: fix info leak in hid_submit_ctrl
  - io_uring: fix overflows checks in provide buffers
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - nvme: sanitize metadata bounce buffer for reads


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.3.0.0270
changelog:
  - !5306  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5347  s390/ptrace: handle setting of fpc register correctly
  - !5309  drm/msm/dpu: Add mutex lock in control vblank irq
  - s390/ptrace: handle setting of fpc register correctly
  - !5267  llc: call sock_orphan() at release time
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5241  powerpc/lib: Validate size for vector operations
  - !5246  ceph: fix deadlock or deadcode of misusing dget()
  - !5268  crypto: algif_aead - fix uninitialized ctx->init
  - crypto: algif_aead - fix uninitialized ctx->init
  - llc: call sock_orphan() at release time
  - !5220  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5196  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - ceph: fix deadlock or deadcode of misusing dget()
  - powerpc/lib: Validate size for vector operations
  - !5210 v2  Fix CVE-2022-48629 and CVE-2022-48630
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5175  arm64/mpam: Fix use-after-free when deleting resource groups
  - !5163  nfc: nci: assert requested protocol is valid
  - !5172  CVE-2023-52502 for openEuler-1.0-LTS
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - crypto: qcom-rng - ensure buffer for generate is completely filled
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5177  net: nfc: llcp: Add lock when modifying device list
  - !5157  RDMA/srp: Do not call scsi_done() from srp_abort()
  - net: nfc: llcp: Add lock when modifying device list
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - !5142  arm64/mpam: Expand the monitor number of the resctrl root
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: constify several pointers to u8, char and sk_buff
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - arm64/mpam: Expand the monitor number of the resctrl root


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.4.0.0271
changelog:
  - !5539  spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5542  round lts patches
  - !5520  scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - l2tp: pass correct message length to ip6_append_data
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5514 CVE-2021-47110
  - !5497  llc: Drop support for ETH_P_TR_802_2.
  - !5498  llc: make llc_ui_sendmsg() more robust against bonding changes
  - !5490  tcp: add sanity checks to rx zerocopy
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - x86/kvm: Disable kvmclock on all CPUs on shutdown
  - !5502  pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5477  Fixed CVE-2021-47112
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - tcp: add sanity checks to rx zerocopy
  - !5479  jfs: fix cve-2023-52600
  - !5478  jfs: fix array-index-out-of-bounds in diNewExt
  - !5485  nfsd: fix use-after-free due to delegation race
  - nfsd: fix use-after-free due to delegation race
  - !5281  printk: avoid deadlock in panic
  - jfs: fix uaf in jfs_evict_inode
  - JFS: fix memleak in jfs_mount
  - jfs: fix array-index-out-of-bounds in diNewExt
  - x86/kvm: Teardown PV features on boot CPU as well
  - !5465  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5361  btrfs: abort in rename_exchange if we fail to insert the second ref
  - !5254  tomoyo: fix UAF write bug in tomoyo_write_control()
  - !5321  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5455  CVE-2021-47114
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5320  jfs: fix slab-out-of-bounds Read in dtSearch
  - ocfs2: issue zeroout to EOF blocks
  - ocfs2: fix zero out valid data
  - ocfs2: fix data corruption by fallocate
  - !5374  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !5418 [sync] PR-5317:  KVM: s390: fix setting of fpc register
  - !5272  net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - !5274  phonet/pep: refuse to enable an unbound pipe
  - !5359  CVE-2021-47121 and CVE-2021-47122
  - KVM: s390: fix setting of fpc register
  - !5358 v5  CVE-2023-52595
  - !5336  binder: fix race between mmput() and do_exit()
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - btrfs: abort in rename_exchange if we fail to insert the second ref
  - net: caif: fix memory leak in caif_device_notify
  - net: caif: fix memory leak in cfusbl_device_notify
  - net: caif: add proper error handling
  - net: caif: added cfserl_release function
  - rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - wifi: rt2x00: restart beacon queue when hardware reset
  - rt2x00: clear up IV's on key removal
  - rt2x00: clear IV's on start to fix AP mode regression
  - rt2800: add pre_reset_hw callback
  - rt2800: do not nullify initialization vector data
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - printk: avoid deadlock in panic
  - phonet/pep: refuse to enable an unbound pipe
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - tomoyo: fix UAF write bug in tomoyo_write_control()


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2404.1.0.0272
changelog:
  - !5874  scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - !5841  fixup CVE-2024-26751
  - !5834  CVE-2021-47144
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - drm/amd/amdgpu: fix refcount leak
  - !5796  netfilter: nft_limit: reject configurations that cause integer overflow
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - !5755  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5767 v5  net: fec: fix the potential memory leak in fec_enet_init()
  - !5718  CVE-2024-26654
  - net: fec: fix the potential memory leak in fec_enet_init()
  - !5722  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5727  fix CVE-2021-47101
  - !5531  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - !5715  net: hns3: updates 2024.04.02
  - !5710 v2  ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - !5700  sr9800: Add check for usbnet_get_endpoints
  - !5680  USB: usbfs: Don't WARN about excessively large memory allocations
  - !5679  fix CVE-2023-52587
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - ALSA: aica: Fix a long-time build breakage
  - !5713 v2  tipc: wait and exit until all work queues are done
  - net: hns3: update hns3 version to 24.3.1
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5696  NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: wait and exit until all work queues are done
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - !5702  ext4: Validate inode pa before using preallocation blocks
  - !5694  tipc: skb_linearize the head skb when reassembling msgs
  - ext4: Validate inode pa before using preallocation blocks
  - !5674  mac80211: fix locking in ieee80211_start_ap error path
  - !5672  arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - sr9800: Add check for usbnet_get_endpoints
  - !5528  btrfs: do not BUG_ON in link_to_fixup_dir
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: skb_linearize the head skb when reassembling msgs
  - !5522  md/raid5: fix atomicity violation in raid5_cache_count
  - USB: usbfs: Don't WARN about excessively large memory allocations
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - mac80211: fix locking in ieee80211_start_ap error path
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5581  CVE-2023-52622
  - !5658 v2  CVE-2021-47131
  - !5645 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5559  fix CVE-2021-47173
  - !5575  net: dsa: fix a crash if ->get_sset_count() fails
  - net/tls: Use RCU API to access tls_ctx->netdev
  - net/tls: Remove the context from the list in tls_device_down
  - tls: Fix context leak on tls_device_down
  - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131
  - net/tls: Fix use-after-free after the TLS device goes down and up
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
  - !5625  i2c: i801: Don't generate an interrupt on bus reset
  - !5517  dm: revert partial fix for redundant bio-based IO accounting
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5481  jfs: fix array-index-out-of-bounds in dbAdjTree
  - !5572  mld: fix panic in mld_newpack()
  - !5565  tracing: Ensure visibility when inserting an element into tracing_map
  - !5571 v2  mm/mlock: return EINVAL for illegal user memory range in mlock
  - i2c: i801: Don't generate an interrupt on bus reset
  - !5587  Fix CVE-2021-47171
  - !5579  mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5573  Fix CVE-2021-47160
  - !5564  serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5560  drm/amdgpu: Fix a use-after-free
  - net: usb: fix possible use-after-free in smsc75xx_bind
  - net: usb: fix memory leak in smsc75xx_bind
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5558  net: fujitsu: fix potential null-ptr-deref
  - !5556  NFC: nci: fix memory leak in nci_allocate_device
  - net: dsa: fix a crash if ->get_sset_count() fails
  - net: dsa: mt7530: fix VLAN traffic leaks again
  - net: dsa: mt7530: fix VLAN traffic leaks
  - mld: fix panic in mld_newpack()
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - tracing: Ensure visibility when inserting an element into tracing_map
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5552  net/smc: remove device from smcd_dev_list after failed device_add()
  - !5290  crypto: algif_aead - Only wake up when ctx->more is zero
  - !5446  keys: safe concurrent user->{session,uid}_keyring access
  - drm/amdgpu: Fix a use-after-free
  - !5550  pciehp: clear p_slot->work.data after powering off a slot
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - misc/uss720: fix memory leak in uss720_probe
  - !5515  netfilter: nf_tables: disallow timeout for anonymous sets
  - !5538  netfilter: nf_tables: disallow anonymous set with timeout flag
  - net: fujitsu: fix potential null-ptr-deref
  - NFC: nci: fix memory leak in nci_allocate_device
  - net/smc: remove device from smcd_dev_list after failed device_add()
  - pciehp: clear p_slot->work.data after powering off a slot
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - btrfs: do not BUG_ON in link_to_fixup_dir
  - md/raid5: fix atomicity violation in raid5_cache_count
  - dm: revert partial fix for redundant bio-based IO accounting
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - keys: safe concurrent user->{session,uid}_keyring access
  - crypto: af_alg - Work around empty control messages without MSG_MORE
  - crypto: af_alg - Fix regression on empty requests
  - crypto: algif_aead - Only wake up when ctx->more is zero


author: chenyi <chenyi211@huawei.com> - 4.19.90-2404.2.0.0273
changelog:
  - !6231 v2  drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6083  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - !6160  net/sched: act_mirred: don't override retval if we already lost the skb
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6152  Fix CVE-2024-26812
  - !6139  iavf: free q_vectors before queues in iavf_disable_vf
  - !6164  CVE-2021-47194
  - !6123  xen/events: close evtchn after mapping cleanup
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
  - net/sched: act_mirred: don't override retval if we already lost the skb
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - !6053  net: ip_tunnel: prevent perpetual headroom growth
  - !6002  KVM: s390: vsie: fix race during shadow creation
  - iavf: free q_vectors before queues in iavf_disable_vf
  - !6102  Fix CVE-2024-27437
  - !6070  Fix CVE-2024-26686
  - !6049  wifi: mac80211: fix race condition on enabling fast-xmit
  - !5916  ext4: fix double-free of blocks due to wrong extents moved_len
  - xen/events: close evtchn after mapping cleanup
  - !6099  vfio/pci: Lock external INTx masking ops
  - !6032  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5899  dm-crypt: don't modify the data when using authenticated encryption
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
  - vfio/pci: Lock external INTx masking ops
  - !6042  nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6030  Fix CVE-2024-26685
  - !6015  btrfs: don't drop extent_map for free space inode on write error
  - !5963  btrfs: dev-replace: properly validate device names
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - fs/proc: do_task_stat: use __for_each_thread()
  - exit: Use the correct exit_code in /proc/<pid>/stat
  - net: ip_tunnel: prevent perpetual headroom growth
  - wifi: mac80211: fix race condition on enabling fast-xmit
  - !5999  mm/swap: fix race when skipping swapcache
  - nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6019  net/sched: act_mirred: use the backlog for mirred ingress
  - !6010  PM / devfreq: Synchronize devfreq_monitor_[start/stop
  - !5846  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5994  ipv6: sr: fix possible use-after-free and null-ptr-deref
  - nilfs2: fix potential bug in end_buffer_async_write
  - nilfs2: fix buffer corruption due to concurrent device reads
  - !5951  RDMA/qedr: Fix qedr_create_user_qp error flow
  - net/sched: act_mirred: use the backlog for mirred ingress
  - btrfs: don't drop extent_map for free space inode on write error
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  - !5961  fbdev: savage: Error out if pixclock equals zero
  - KVM: s390: vsie: fix race during shadow creation
  - mm/swap: fix race when skipping swapcache
  - ipv6: sr: fix possible use-after-free and null-ptr-deref
  - !5875 v3  CVE-2024-26771
  - !5926  RDMA/srpt: Support specifying the srpt_service_guid parameter
  - btrfs: dev-replace: properly validate device names
  - fbdev: savage: Error out if pixclock equals zero
  - !5778  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - RDMA/qedr: Fix qedr_create_user_qp error flow
  - !5830  fbdev: sis: Error out if pixclock equals zero
  - RDMA/srpt: Support specifying the srpt_service_guid parameter
  - ext4: fix double-free of blocks due to wrong extents moved_len
  - dm-crypt: don't modify the data when using authenticated encryption
  - !5807  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - dmaengine: ti: edma: Fix error return code in edma_probe()
  - dmaengine: ti: edma: add missed operations
  - dmaengine: ti: edma: fix missed failure handling
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - fbdev: sis: Error out if pixclock equals zero
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2404.3.0.0274
changelog:
  - !6313  fixup CVE-2024-26908
  - !6447  can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
  - !6309 v5  ima: Avoid blocking in RCU read-side critical section
  - !6405  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - !6466  bpf: Fix hashtab overflow check on 32-bit arches
  - !6396  tracing/trigger: Fix to return error if failed to alloc snapshot
  - !6278  Bluetooth: Avoid potential use-after-free in hci_error_reset
  - bpf: Fix hashtab overflow check on 32-bit arches
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
  - !6203  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - !6292  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - !6301 v2  tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - !6266  usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
  - tracing/trigger: Fix to return error if failed to alloc snapshot
  - !6290  CVE-2024-24861
  - x86/xen: Add some null pointer checking to smp.c
  - ima: Avoid blocking in RCU read-side critical section
  - !6269  scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  - !6276  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - !6277  gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - !6275  arp: Prevent overflow in arp_req_get().
  - !6280  scsi: advansys: Fix kernel pointer leak
  - !6177  arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - !6176  arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - !6075  Fix CVE-2024-26764
  - scsi: advansys: Fix kernel pointer leak
  - Bluetooth: Avoid potential use-after-free in hci_error_reset
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - arp: Prevent overflow in arp_req_get().
  - !6084  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
  - !6246  ubi: Check for too small LEB size in VTBL code
  - ubi: Check for too small LEB size in VTBL code
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio


author: chenyi <chenyi211@huawei.com> - 4.19.90-2405.1.0.0275
changelog:
  - !6858  CVE-2024-26883
  - !6836  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6845  erofs: fix pcluster use-after-free on UP platforms
  - !6827  fat: fix uninitialized field in nostale filehandles
  - !6807  CVE-2024-26923
  - !6847  ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Check for integer overflow when using roundup_pow_of_two()
  - !6758  CVE-2022-48664
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - erofs: fix pcluster use-after-free on UP platforms
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6795  rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - fat: fix uninitialized field in nostale filehandles
  - !6777  tun: Fix xdp_rxq_info's queue_index when detaching
  - !6803  scsi: target: core: Add TMF to tmr_list handling
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - af_unix: Fix garbage collector racing against connect()
  - scsi: target: core: Add TMF to tmr_list handling
  - !6705  quota: fix CVE-2024-26878
  - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - !6674  cifs: fix underflow in parse_server_interfaces()
  - !6494 v2  oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - !6745  PCI/IOV: Improve performance of creating VFs concurrently
  - !6754  binder: check offset alignment in binder_get_object()
  - !6746 v3  openEuler-1.0-LTS: bugfix for mm
  - !6716  CVE-2024-26922
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - Btrfs: fix crash during unmount due to race with delayed inode workers
  - binder: check offset alignment in binder_get_object()
  - !6652  geneve: make sure to pull inner header in geneve_rx()
  - mm/madvise: fix potential pte_unmap_unlock pte error
  - PCI/IOV: Improve performance of creating VFs concurrently
  - !6664  drm/bridge: adv7511: fix crash on irq during probe
  - !6653  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - !6510  cachefiles: fix memory leak in cachefiles_add_cache()
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
  - drm/amdgpu: restrict bo mapping within gpu address limits
  - drm/amdgpu: check alignment on CPU page for bo map
  - quota: Fix potential NULL pointer dereference
  - quota: check time limit when back out space/inode change
  - quota: code cleanup for __dquot_alloc_space()
  - !6662  sched/rt: Disallow writing invalid values to sched_rt_period_us
  - !6661  sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - !6659  sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - !6578  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - !6641  CVE-2024-26863
  - cifs: fix underflow in parse_server_interfaces()
  - !6646  fix race between rebuild scheduler domains and hotplug work
  - drm/bridge: adv7511: fix crash on irq during probe
  - sched/rt: Disallow writing invalid values to sched_rt_period_us
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - !6642 v3  x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - geneve: make sure to pull inner header in geneve_rx()
  - !6621  amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - cpuset: fix race between rebuild scheduler domains and hotplug work
  - !6617  net/bnx2x: Prevent access to a freed page in page_pool
  - !6611  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
  - hsr: Fix uninit-value access in hsr_get_node()
  - net: hsr: fix placement of logical operator in a multi-line statement
  - !6397  btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - !6616  drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - net/bnx2x: Prevent access to a freed page in page_pool
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - !6525 v2  CVE-2024-24860 bugfix
  - !6478  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - !6582  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - !6577  media: rc: bpf attach/detach requires write permission
  - !6560  IB/hfi1: Fix a memleak in init_credit_return
  - !6420  tty: fix read of tty->pgrp outside of ctrl_lock
  - !6436  dm: call the resume method on internal suspend
  - !6562  nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - !6481  CVE-2024-26875
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - media: rc: bpf attach/detach requires write permission
  - !6495  RDMA/srpt: Do not register event handler until srpt device is fully setup
  - !6457  CVE-2024-26813
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - IB/hfi1: Fix a memleak in init_credit_return
  - !6517  scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - !6521  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - !6454  CVE-2021-47182
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - cachefiles: fix memory leak in cachefiles_add_cache()
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - sched: Allocate a new task_struct_resvd object for fork task
  - media: pvrusb2: fix uaf in pvr2_context_set_notify
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - vfio/platform: Create persistent IRQ handlers
  - vfio/platform: Disable virqfds on cleanup
  - scsi: core: Fix scsi_mode_sense() buffer length handling
  - scsi: core: Reshuffle response handling in scsi_mode_sense()
  - scsi: core: Fixup calling convention for scsi_mode_sense()
  - dm: call the resume method on internal suspend
  - tty: fix read of tty->pgrp outside of ctrl_lock
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve


author: chenyi <chenyi211@huawei.com> - 4.19.90-2405.3.0.0276
changelog:
  - !7194  s390/dasd: fix double module refcount decrement
  - !7059  nilfs2: prevent kernel bug at submit_bh_wbc()
  - !7163 v2  usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - !7104  KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - !7203  NTB: fix possible name leak in ntb_register_device()
  - NTB: fix possible name leak in ntb_register_device()
  - s390/dasd: fix double module refcount decrement
  - !7158 v2  Squashfs: check the inode number is not the invalid value of zero
  - !7181  nfs: fix UAF in direct writes
  - !7091  nouveau: lock the client object tree.
  - !7120 v2  clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !7089  nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - !7151 v2  scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - nfs: fix UAF in direct writes
  - !7033  Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - !7079  nvmet: fix a use-after-free
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - !7140  media: usbtv: Remove useless locks in usbtv_video_free()
  - Squashfs: check the inode number is not the invalid value of zero
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - !7137 v2  SUNRPC: fix a memleak in gss_import_v2_context
  - !7138  SUNRPC: fix some memleaks in gssx_dec_option_array
  - !7100  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - !7095  CVE-2024-27020
  - media: usbtv: Remove useless locks in usbtv_video_free()
  - SUNRPC: fix some memleaks in gssx_dec_option_array
  - SUNRPC: fix a memleak in gss_import_v2_context
  - !7114 v2  backport patch for thp deferred list for 4.19
  - !7034  fix CVE-2024-27001 for 4.19
  - !7032  clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - !7115  drm/radeon: add a force flush to delay work when radeon
  - !7055  scsi: qla2xxx: Fix command flush on cable pull
  - !7109  fix CVE-2024-26960
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !6260  packet: move from strlcpy with unused retval to strscpy
  - drm/radeon: add a force flush to delay work when radeon
  - THP: avoid lock when check whether THP is in deferred list
  - mm/mmu_gather: limit free batch count and add schedule point in tlb_batch_pages_flush
  - mm, thp: do not queue fully unmapped pages for deferred split
  - !7046  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache()
  - !7053  CVE-2024-27024
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - !6970  ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - !6995 v2  net/mlx5e: Prevent deadlock while disabling aRFS
  - !7038  i40e: Fix NULL ptr dereference on VSI filter sync
  - !7037  media: v4l2-tpg: fix some memleaks in tpg_alloc
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type
  - nouveau: lock the client object tree.
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - !6992  media: edia: dvbdev: fix a use-after-free
  - nvmet: fix a use-after-free
  - !7045 v2  b43: fix CVE-2023-52644
  - !7017 v2  net: ath9k: fix CVE-2024-26897
  - nilfs2: prevent kernel bug at submit_bh_wbc()
  - !7016 v3  Fix CVE-2022-48693
  - !7012  clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - scsi: qla2xxx: Fix command flush on cable pull
  - net/rds: fix possible cp null dereference
  - net/rds: fix WARNING in rds_conn_connect_if_down
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - !6991  mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - b43: dma: Fix use true/false for bool type variable
  - !7005  media: ttpci: fix two memleaks in budget_av_attach
  - !7014  nilfs2: fix OOB in nilfs_set_de_type
  - !7001  fix CVE-2024-27010
  - i40e: Fix NULL ptr dereference on VSI filter sync
  - media: v4l2-tpg: fix some memleaks in tpg_alloc
  - !6880  media: go7007: fix a memleak in go7007_load_encoder
  - comedi: vmk80xx: fix incomplete endpoint checking
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - !6984  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6893  cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - !6958  netfilter: nf_tables: fix memleak in map from abort path
  - !6820  s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - !6940  drm: nv04: Fix out of bounds access
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
  - nilfs2: fix OOB in nilfs_set_de_type
  - !6968  CVE-2024-26974
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - !6976  nfp: flower: handle acti_netdevs allocation failure
  - media: ttpci: fix two memleaks in budget_av_attach
  - !6944  USB: core: Fix deadlock in usb_deauthorize_interface()
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion
  - !6870  scsi: mpt3sas: Fix use-after-free warning
  - net/mlx5e: Prevent deadlock while disabling aRFS
  - media: edia: dvbdev: fix a use-after-free
  - !6966  speakup: Avoid crash on very long word
  - !6963 v2  CVE-2024-27000
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6942 v2  ima: fix deadlock when traversing "ima_default_rules".
  - !6951 v2  spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - nfp: flower: handle acti_netdevs allocation failure
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - crypto: qat - resolve race condition during AER recovery
  - crypto: qat - fix double free during reset
  - !6881 v4  CVE-2024-26846
  - !6894  tun: limit printing rate when illegal packet received by tun dev
  - speakup: Avoid crash on very long word
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
  - serial: mxs-auart: add spinlock around changing cts state
  - serial: core: Provide port lock wrappers
  - !6883  Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - !6856  media: dvb-frontends: avoid stack overflow warnings with clang
  - netfilter: nf_tables: fix memleak in map from abort path
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - !6839  CVE-2023-52650
  - !6869 v2  media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - !6867 v2  nouveau: fix instmem race condition around ptr stores
  - USB: core: Fix deadlock in usb_deauthorize_interface()
  - !6852  serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - ima: fix deadlock when traversing "ima_default_rules".
  - drm: nv04: Fix out of bounds access
  - tun: limit printing rate when illegal packet received by tun dev
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - nvme-fc: do not wait in vain when unloading module
  - nvme-fc: remove err_work work item
  - media: go7007: fix a memleak in go7007_load_encoder
  - scsi: mpt3sas: Fix use-after-free warning
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - nouveau: fix instmem race condition around ptr stores
  - media: dvb-frontends: avoid stack overflow warnings with clang
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - drm/tegra: dsi: Add missing check for of_find_device_by_node
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - packet: move from strlcpy with unused retval to strscpy


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2405.3.0.0276.kb1
changelog:
  - Input: i8042: Fix build error
  - net: mucse: fix build error
  - drm/phytium: Replace default efi fb0 with dc fb
  - net: bonding: Replace do_gettimeofday() with ktime_get_real_ts64()
  - nvme-fc: Fix kabi for struct nvme_fc_port_template
  - nvme-fc: Revert "add module to ops template to allow module references"
  - platform/phytium/power: fix invalid free of input device in phytium_power
  - i2c: designware: Fix i2c controler timeout after S3
  - Input: i8042: Fix depends for arm64
  - Input: i8042: Simplify implementation for phytium
  - Input: i8042: Remove useless architecture-related code
  - Input: i8042: Remove hardcoded acpi match
  - Input: i8042: Add support for phytium
  - ACPI: irq: Add workaround for phytium PCI Interrupt Link
  - ACPI: irq: Fix incorrect return value in acpi_register_irq
  - PCI/ACPI: Add stacked IRQ domain support to PCI Interrupt Link
  - net: stmmac: Add workaround for dwmac-phytium
  - acpi: Add ACPI HIDs for phytium SoC device drivers
  - acpi: Add ACPI CIDs for phytium SoC device drivers
  - kconfig: Make phytium SoC drivers depend on ARCH_PHYTIUM
  - drm/radeon: fix bad DMA from INTERRUPT_CNTL2
  - performace: optimize unixbench context1/spawn performance
  - config: x86: optimize kernel configs for performance
  - syscall: remove local_daif_mask/store
  - config: arm64: optimize kernel configs for performance
  - sched: Add affinity wake-up code
  - lse atomic performance optimization
  - arm64: add SMID register copy_page
  - pipe performance optimization
  - pci: add workaround for phytium laptops
  - ASoC: phytium: phytium_i2s: add a default i2s clock rate if ACPI tables don't have i2s_clk property
  - ASoC: phytium: phytium_i2s: add missing MODULE_DEVICE_TABLE for acpi
  - ASoC: es8388: unmute by default
  - drm/nouveau/kms: fix a crash on arm64
  - platform/phytium/ec: fix ft2004 machine hang after S3/S4
  - platform/phytium/backlight: fix the problem of backlight get dark after S3
  - platform/phytium/ec: fix ec gpio interrupt
  - platform/phytium: add power button sci event handling
  - platform/phytium: phytium-power: fix some D2000 laptop's hardware or EC firmware bugs
  - platform/phytium: rename phytium_battery.c to phytium_power.c
  - platform/phytium: phytium-battery: refactor phytium battery driver
  - config: enable igc ethernet driver
  - igc: Remove unneeded hw_dbg prints
  - igc: Fix the typo in igc_base.h header definition
  - igc: Add support for the ntuple feature
  - igc: Add support for statistics
  - igc: Extend the ethtool supporting
  - igc: Add multiple receive queues control supporting
  - igc: Use struct_size() helper
  - igc: Add ethtool support
  - igc: Remove the 'igc_get_phy_id_base' method
  - igc: Remove the 'igc_read_mac_addr_base' method
  - igc: Remove unneeded code
  - igc: Remove unused code
  - igc: Fix code redundancy
  - igc: Remove unreachable code from igc_phy.c file
  - igc: Remove obsolete IGC_ERR define
  - ethernet/intel: consolidate NAPI and NAPI exit
  - igc: Clean up code
  - igc: Tidy up some white space
  - igc: fix error return handling from call to netif_set_real_num_tx_queues
  - igc: Remove set but not used variable 'pci_using_dac'
  - igc: Remove set but not used variables 'ctrl_ext, link_mode'
  - intel-ethernet: software timestamp skbs as late as possible
  - igc: Add watchdog
  - igc: Add setup link functionality
  - igc: Add code for PHY support
  - igc: Add NVM support
  - igc: Add HW initialization code
  - igc: Add transmit and receive fastpath and interrupt handlers
  - igc: Add support for Tx/Rx rings
  - igc: Add interrupt support
  - igc: Add netdev
  - igc: Add support for PF
  - igc: Add skeletal frame for Intel(R) 2.5G Ethernet Controller support
  - config: x86: enable SM3 and SM4 algorithms
  - config: arm64: enable SM3 algorithm
  - xfrm: Add support for SM4 symmetric cipher algorithm
  - xfrm: Add support for SM3 secure hash
  - config: arm64: enable DVFS
  - Revert "arm64: zero GPRs upon entry from EL0"
  - config: arm64: enable i3c
  - i3c: cdns: Fix phytium workaround
  - i3c: master: Use fallthrough comment
  - i3c: cdns: Fix DAA fail at high frequency
  - i3c: cdns: Add GETMXDS format 1 retransmission
  - i3c: cdns: add support for Phytium workaround
  - i3c: Make remove callback return void
  - i3c: Handle drivers without probe or remove callback
  - i3c: master: Fix error return in cdns_i3c_master_probe()
  - i3c: master: fix for SETDASA and DAA process
  - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
  - i3c master: GETMRL's 3rd byte is optional even with BCR_IBI_PAYLOAD
  - i3c: master: Replace zero-length array with flexible-array member
  - i3c: Simplify i3c_device_match_id()
  - i3c: Add a modalias sysfs attribute
  - i3c: Fix MODALIAS uevents
  - i3c: master: no need to iterate master device twice
  - i3c: master: make i3c_bus_set_mode static
  - i3c: master: cdns: add data hold delay support
  - i3c: Spelling s/dicovered/discovered/
  - i3c: master: use i3c_dev_get_master()
  - i3c: master: Use dev_to_i3cmaster()
  - i3c: master: fix a memory leak bug
  - i3c: add addr and lvr to i2c_dev_desc structure
  - i3c: master: cdns: Use for_each_set_bit()
  - i3c: master: Add of_node_put() before return
  - i3c: move i3c_device_match_id to device.c and export it
  - i3c: master: Use struct_size() helper
  - i3c: add mixed limited bus mode
  - i3c: fix i2c and i3c scl rate by bus mode
  - i3c: Drop support for I2C 10 bit addresing
  - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
  - i3c: Fix the verification of random PID
  - i3c: fix missing detach if failed to retrieve i3c dev
  - i3c: master: Fix an error checking typo in 'cdns_i3c_master_probe()'
  - i3c: master: cdns: fix I2C transfers in Cadence I3C master driver
  - ic3: off by one in mode_show()
  - i3c: fix an error code in i3c_master_add_i3c_dev_locked()
  - i3c: master: Remove set but not used variable 'old_i3c_scl_lim'
  - i3c: master: Add driver for Cadence IP
  - i3c: Add core I3C infrastructure
  - config: arm64: disable SERIO_PHYTIUM_PS2
  - serial: phytium-uart: rename device name
  - rtc: class: hctosys after registering rtc with rtc_device_register
  - rtc: class: remove redundant assignment to variable err
  - rtc: class: avoid unnecessary lookup in hctosys
  - kabi: acpi: fix kabi broken
  - optee: Refuse to load the driver under the kdump kernel
  - tee: optee: fix return value type mismatch build warning
  - serial: pl011: Add dynamic baud rate for sbsa uart
  - config: arm64: don't filter access to /dev/mem
  - kpti: KASLR does not force KPTI to be turned on
  - topology: Represent clusters of CPUs within a die
  - bonding: enhanced bond3 support
  - config: enable console cjk font
  - vt: fix depend issue
  - vt: add cjk font that has 65536 chars
  - vt: diable setfont if we have cjk font in kernel
  - vt: fix 255 glyph limit, prepare for CJK font support
  - config: arm64: enable at24
  - config: arm64: enable zhaoxin sata controller
  - config: arm64: enable renesas xhci controller
  - config: arm64: enable bluetooth support
  - config: arm64: enable device drivers for phytium platform
  - config: arm64: enable motorcom phy driver
  - config: arm64: enable zhaoxin ethernet driver
  - config: arm64: enable mucse ethernet driver
  - net: mucse: add rnpm ethernet driver
  - net: mucse: add rnpvf ethernet driver
  - net: mucse: add rnp ethernet driver
  - mailbox: fix uninitialized build warnings
  - mailbox: add acpi support
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - wdt: add wdt resource name
  - KVM: arm/arm64: disable WARN_ON for non-hisi cpu
  - rtc: class: add debug message when registration fails
  - rtc: class: support hctosys from modular RTC drivers
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: renesas-xhci: Remove renesas_xhci_pci_exit()
  - usb: xhci: avoid renesas_usb_fw.mem when it's unusable
  - usb: xhci: Add support for Renesas controller with memory
  - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
  - usb: renesas-xhci: remove version check
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - mm: support memblock alloc on the exact node for sparse_buffer_init()
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - hwmon: (scpi-hwmon) shows the negative temperature properly
  - net: add support of zhaoxin gigabyte network interface controller driver
  - sched/rt: Disable RT_RUNTIME_SHARE by default
  - scsi: sr: get rid of sr global mutex
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - platform: add phytium platform support
  - bus: phytium_lpc: register as module platform driver
  - bus: add phytium_lpc support
  - watchdog: dw_wdt: add acpi support
  - ASoC: phytium: add phytium x100 DP support
  - ASoC: phytium: add phytium x100 support with ES8388
  - ASoC: phytium: add phytium x100 support with ES8336
  - ASoC: add phytium i2s support
  - ASoC: add es8388 codec driver
  - ASoC: add es8336 codec driver
  - firmware: arm_scpi: Add error handling for reading mem resource
  - firmware: arm_scpi: add acpi support
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  - clk: scpi: add soft dependenciy on scpi-cpufreq
  - clk: scpi: Use fwnode_property_match_string
  - clk: scpi: add acpi support
  - hwmon: scpi: add acpi support
  - mfd: add phytium x100 MMD I2S controller support
  - mfd: add phytium x100 LSD I2S controller support
  - PCI: add phytium pci endpoint controller support
  - mtd: nandraw: add phytium NAND controller platform support
  - mtd: nandraw: add phytium NAND controller pci support
  - mtd: nandraw: add phytium NAND controller support
  - dmaengine: add phytium x100 pci dma support
  - acpi/irq: Implement helper to create hierachical domains
  - irqchip: add phytium INTx support
  - pwm: add phytium PWM support
  - config: arm64: enable CONFIG_CPUFREQ_DT
  - cpufreq: scpi: add acpi support
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - ipmi: add phytium bt bmc driver support
  - ipmi: add phytim kcs impi bmc support
  - usb: phytium-usb: depends on USB_GADGET
  - usb: add phytium USB support
  - tty: serial: add phytium PCI serial port support
  - input: serio: add phytium ps2 support
  - hwmon: add phytium fan tacho support
  - net: phy: abort loading yt8511 driver in unsupported modes
  - net: phy: fix yt8511 clang uninitialized variable warning
  - net: phy: add driver for Motorcomm yt8511 phy
  - net: phy: add macros for PHYID matching
  - xHCI: Add XHCI_SLOWDOWN_QUIRK quirk for phytium xHCI controller
  - xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  - dt-bindings: arm: cpus: Add phytium compatible
  - arm64: dts: phytium: add e2000 development board
  - arm64: dts: phytium: add d2000 development board
  - arm64: dts: phytium: add ft2004 development board
  - arm64: dts: phytium: add ft2000plus development board
  - arm64: dts: phytium: add ft2000a development board
  - arm64: dts: phytium: add ft1500a development board
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card
  - drm: Add mwv207 driver
  - drm/mwv206: Bump to 2.1.6-20220310.1700
  - drm/mwv206: Fix depends
  - drm: Add mwv206 driver
  - drm: Add smifb drm driver
  - arm64: cpuinfo: Add model name
  - arm64: Add cpu part definitions for E2000 and S5000C
  - firmware: dmi: Save processor information
  - arm64: add uImage build rule
  - video/logo: replace logo
  - arm64: kpti: Add phytium CUPs to the KPTI whitelist
  - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2405.3.0.0276.kb2
changelog:
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - cpupower: avoid multiple definition with gcc -fno-common
  - ci: Add gitlab ci


author: Liu Dalin <liudalin@kylinsec.com.cn> - 4.19.90-2405.3.0.0276.kb3
changelog:
  - net: phy: Fix kabi for phy_interface_t
  - config: arm64: enable macb ethernet driver
  - net: phy: Add 5GBASER interface mode
  - net: phy: add interface mode PHY_INTERFACE_MODE_USXGMII
  - net: macb: add support for high speed interface
  - net: macb: Switch NCSI device in the link state callback
  - net: macb: Add ACPI support for Phytium XMAC
  - Revert "net: macb: Add null check for PCLK and HCLK"
  - net: macb: Support clock management for tsu_clk
  - net: macb: add clock selection support to match the speed
  - net: macb: Add support for USXGMII
  - net: macb: Add compatible string for Phytium SoCs
  - net: macb: Support NCSI mode
  - mmc: phytium: Add clock phase adjustment logic
  - mmc: phytium: Fix emmc abnormal issue during S3 resume
  - mmc: phytium: Fix the phase problem of emmc at high temperature
  - mmc: phytium: Fix SD card CMD11 abnormal issue
  - usb: host: xhci-plat: add quirks member into struct xhci_plat_priv
  - usb: phytium: Improving USB controller write performance
  - usb: phytim: Fix the defect of endpoint request loss after DMA reset
  - usb: phytium: Add get_endpoint_interval function
  - usb: xhci: xhci-plat: Add XHCI_RESET_ON_RESUME quirk for Phytium Pe220x


author: Liu Dalin <liudalin@kylinsec.com.cn> - 4.19.90-2405.3.0.0276.kb4
changelog:
  - xfrm: Add support for SM1 symmetric cipher algorithm
  - xfrm: SM4: remove geniv
  - xfrm: SM3: set truncbits to 96


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2405.3.0.0276.kb6
changelog:
  - PCI: vmd: Add DID 8086:7D0B and 8086:AD0B for Intel MTL SKUs
  - PCI: vmd: Add DID 8086:A77F for all Intel Raptor Lake SKU's
  - PCI: vmd: Offset Client VMD MSI-X vectors
  - PCI: vmd: Create IRQ allocation helper
  - PCI: vmd: Create bus offset configuration helper
  - PCI: vmd: Create physical offset helper
  - PCI: vmd: Use Shadow MEMBAR registers for QEMU/KVM guests
  - PCI: vmd: Filter resource type bits from shadow register
  - PCI: vmd: Add two VMD Device IDs
  - PCI: vmd: Add device id for VMD device 8086:9A0B
  - PCI: vmd: Add bus 224-255 restriction decode
  - PCI/VMD: Configure MPS settings before adding devices
  - e1000e: Add support for the next LOM generation
  - e1000e: Add support for the next LOM generation
  - e1000e: Separate MTP board type from ADP
  - e1000e: Separate ADP board type from TGP
  - e1000e: Separate TGP board type from SPT
  - e1000e: Add support for the next LOM generation
  - e1000e: Add support for Lunar Lake
  - e1000e: Add support for Meteor Lake
  - e1000e: Add support for Tiger Lake device
  - e1000e: Add support for Alder Lake
  - e1000e: Add support for Tiger Lake
  - e1000e: Add support for Comet Lake
  - e1000e: Increase pause and refresh time
  - .gitignore: ignore *.mod files
  - libsubcmd: Fix use-after-free for realloc(..., 0)
  - tools lib: Fix builds when glibc contains strlcpy()
  - kbuild: disable -Wmaybe-uninitialized
  - gcc-10: disable 'stringop-overflow' warning for now
  - gcc-10: disable 'array-bounds' warning for now
  - gcc-10: disable 'zero-length-bounds' warning for now


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb6
changelog:
  - cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
  - nfc: pn533: initialize struct pn533_out_arg properly
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling
  - net: hns3: do not allow call hns3_nic_net_open repeatedly
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
  - dev/parport: fix the array out-of-bounds risk
  - usb: gadget: rndis: add spinlock for rndis response list
  - blk-io-hierarchy: support new stage for bio lifetime
  - blk-io-hierarchy: support new rq based stage rq_driver
  - blk-io-hierarchy: support new rq based stage requeue
  - blk-io-hierarchy: support new rq based stage hctx
  - blk-io-hierarchy: support new rq based stage kyber
  - blk-io-hierarchy: support new rq based stage bfq
  - blk-io-hierarchy: support new rq based stage mq-deadline
  - blk-io-hierarchy: support new rq based stage plug
  - blk-io-hierarchy: support new bio based stage gettag
  - blk-mq: remove blk_mq_put_ctx()
  - blk-io-hierarchy: support new bio based stage blk-wbt
  - blk-io-hierarchy: support new bio based stage blk-throtl
  - blk-io-hierarchy: support to recored the number of slow IO
  - block-io-hierarchy: core hierarchy iodump implementation
  - block-io-hierarchy: core hierarchy stats implementation
  - block: support to record when request is completed
  - blk-mq-debugfs: factor out a new helper to show allocated request
  - block: block: fix kabi broken for struct blk_mq_alloc_data
  - block: support to recored bio allocation task in request
  - block: fix kabi broken for struct request
  - block: support to recored bio allocation time in request
  - block: support to recored bio allocation task
  - block: support to recored bio allocation time
  - block: fix kabi broken in struct blk_plug
  - block: fix that blk_time_get_ns() doesn't update time after schedule
  - block: limit block time caching to in_task() context
  - block: update cached timestamp post schedule/preemption
  - block: cache current nsec time in struct blk_plug
  - block: add blk_time_get_ns() and blk_time_get() helpers
  - blk-mq: export blk-mq-debugfs apis
  - fs/proc: fix softlockup in __read_vmcore
  - perf/core: Fix missing wakeup when waiting for context reference
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  - ibmvnic: free reset-work-item when flushing
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  - regulator: da9211: Use irq handler when ready
  - devres: Fix memory leakage caused by driver API devm_free_percpu()
  - jfs: Fix array-index-out-of-bounds in diFree
  - netfilter: ctnetlink: use helper function to calculate expect ID
  - jbd2: avoid mount failed when commit block is partial submitted
  - ext4: remove the redundant folio_wait_stable()
  - Add exception protection processing for vd in axi_chan_handle_err function
  - serial: core: check uartclk for zero to avoid divide by zero
  - mtd: rawnand: hynix: fixed typo
  - media: xc2028: avoid use-after-free in load_firmware_cb()
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler
  - ACPI: EC: Abort address space access upon error
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
  - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
  - mm: avoid overflows in dirty throttling logic
  - memcg: protect concurrent access to mem_cgroup_idr
  - efi: fix NULL-deref in init error path
  - io_uring: add a schedule point in io_add_buffers()
  - scsi: qla2xxx: validate nvme_local_port correctly
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  - scsi: mpt3sas: Gracefully handle online firmware update
  - scsi: mpt3sas: Add ioc_<level> logging macros
  - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
  - net: tcp better handling of reordering then loss cases
  - tcp: tcp_mark_head_lost is only valid for sack-tcp
  - tcp: add ece_ack flag to reno sack functions
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
  - tcp: fix race in tcp_v6_syn_recv_sock()
  - x86/amd_nb: Check for invalid SMN reads
  - PCI: Add PCI_ERROR_RESPONSE and related definitions
  - kobject_uevent: Fix OOB access within zap_modalias_env()
  - irqchip/alpine-msi: Fix off-by-one in allocation error path
  - dma: fix call order in dmam_free_coherent
  - tracing: Fix overflow in get_free_elt()
  - f2fs: let's avoid panic if extent_tree is not created
  - usb: vhci-hcd: Do not drop references before new references are gained
  - xen/netfront: destroy queues before real_num_tx_queues is zeroed
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
  - KVM: x86/mmu: make apf token non-zero to fix bug
  - iio: adc: men_z188_adc: Fix a resource leak in an error handling path
  - gsmi: fix null-deref in gsmi_get_variable
  - scsi: qla2xxx: During vport delete send async logout explicitly
  - net/iucv: fix use after free in iucv_sock_close()
  - sysctl: always initialize i_uid/i_gid
  - mISDN: Fix a use after free in hfcmulti_tx()
  - exec: Fix ToCToU between perm check and set-uid/gid usage
  - f2fs: fix to don't dirty inode for readonly filesystem
  - thermal: int340x: fix memory leak in int3400_notify()
  - nilfs2: fix general protection fault in nilfs_btree_insert()
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  - drm/virtio: Fix GEM handle creation UAF
  - driver core: Fix uevent_show() vs driver detach race
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading
  - drivers: core: synchronize really_probe() and dev_uevent()
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  - ocfs2: add bounds checking to ocfs2_check_dir_entry()
  - xhci: Fix null pointer dereference when host dies
  - parisc: Fix data TLB miss in sba_unmap_sg
  - filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
  - s390/sclp: Fix sclp_init() cleanup on failure
  - net: usb: qmi_wwan: fix memory leak for not ip packets
  - tipc: Return non-zero value from tipc_udp_addr2str() on error
  - media: venus: fix use after free in vdec_close
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  - ext4: make sure the first directory block is not a hole
  - ext4: check dot and dotdot of dx_root before making dir indexed
  - perf: Optimize perf_pmu_migrate_context()
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  - leds: trigger: Unregister sysfs attributes before calling deactivate()
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  - libceph: fix race between delayed_work() and ceph_monc_stop()
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  - orangefs: fix out-of-bounds fsid access
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  - crypto: aead,cipher - zeroize key buffer after use
  - nilfs2: fix inode number range checks
  - USB: serial: mos7840: fix crash on resume
  - Revert "NFS: Don't interrupt file writeout due to fatal errors"
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace
  - ALSA: gus: fix null pointer dereference on pointer block
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  - tcp_metrics: validate source addr length
  - s390/pkey: Wipe sensitive data on failure
  - media: dvb-frontends: tda10048: Fix integer overflow
  - nilfs2: fix kernel bug on rename operation of broken directory
  - nilfs2: return the mapped address from nilfs_get_page()
  - nilfs2: Remove check for PageError
  - f2fs: Add inline to f2fs_build_fault_attr() stub
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
  - filelock: Remove locks reliably when fcntl/close race is detected
  - net/iucv: Avoid explicit cpumask var allocation on stack
  - jfs: don't walk off the end of ealist
  - x86: stop playing stack games in profile_pc()
  - ethernet: Fix error handling in xemaclite_of_probe
  - drm/amd/display: Skip finding free audio for unknown engine_id
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  - ocfs2: fix DIO failure due to insufficient transaction credits
  - inet_diag: Initialize pad field in struct inet_diag_req_v2
  - ASoC: fsl-asoc-card: set priv->pdev before using it
  - net: dsa: mv88e6xxx: Correct check for empty list
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  - hfsplus: fix uninit-value in copy_name
  - ata: libata-core: Fix double free on error
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  - ppp: reject claimed-as-LCP but actually malformed packets
  - ppp: ensure minimum packet size in ppp_write()
  - IB/core: Implement a limit on UMAD receive List
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  - net: ethernet: lantiq_etop: fix double free in detach
  - net: lantiq_etop: add blank line after declaration
  - ila: block BH in ila_output()
  - gpio: davinci: Validate the obtained number of IRQs
  - nilfs2: add missing check for inode numbers on directory entries
  - ftruncate: pass a signed offset
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  - xfs: add bounds checking to xlog_recover_process_data
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  - iio: chemical: bme680: Fix overflows in compensate() functions
  - jffs2: Fix potential illegal address access in jffs2_free_inode
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  - ALSA: emux: improve patch ioctl data validation
  - ASoC: topology: Fix route memory corruption
  - ASoC: topology: Fix references to freed memory
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  - filelock: Fix fcntl/close race recovery compat path
  - PCI/ROM: Fix PCI ROM header check bug
  - net/sched: initialize noop_qdisc owner
  - thermal: Fix NULL pointer dereferences in of_thermal_ functions
  - HID: core: remove unnecessary WARN_ON() in implement()
  - tty: fix hang on tty device with no_room set
  - net-memcg: Fix scope of sockmem pressure indicators
  - scsi: ps3: Change the return type of .eh_timed_out()
  - scsi: ps3: Stop using pci_enable_pcie_error_reporting
  - scsi: ps3: Stop using the SCSI pointer
  - config: x86: enable ps3 raid controller driver
  - scsi: Add ps3 raid controller


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb7
changelog:
  - tools: fix implicit declaration of function __ALIGN_KERNEL
  - arm64: cpufeature: Fix the visibility of compat hwcaps
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
  - irqchip/mbigen: Fix mbigen node address layout
  - sch/netem: fix use after free in netem_dequeue
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  - Input: MT - limit max slots
  - Squashfs: sanity check symbolic link size
  - x86/mm: Fix pti_clone_pgtable() alignment assumption
  - BMA: Fix edma driver initialization problem and change the version number.
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  - drm/amdgpu: fix ucode out-of-bounds read warning
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()"
  - block: fix kabi broken in struct request_queue
  - block: protect blk_mq_debugfs_register/unregister_hctx() with 'debugfs_mutex'
  - block: shutdown blktrace in blk_release_queue()
  - block: remove per-disk debugfs files in blk_unregister_queue
  - block: serialize all debugfs operations using q->debugfs_mutex
  - blk-mq: Fix spurious debugfs directory creation during initialization
  - block: create the request_queue debugfs_dir on registration
  - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created
  - blk-mq: fix up placement of debugfs directory of queue files
  - blk-mq: no need to check return value of debugfs_create functions
  - blktrace: annotate required lock on do_blk_trace_setup()
  - blktrace: Avoid sparse warnings when assigning q->blk_trace
  - blktrace: break out of blktrace setup on concurrent calls
  - mmc: mmc_test: Fix NULL dereference on allocation failure
  - Input: uinput - reject requests with unreasonable number of slots
  - gtp: pull network headers in gtp_dev_xmit()
  - mm/ksm: fix possible UAF of stable_node
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  - s390/cio: rename bitmap_size() -> idset_bitmap_size()
  - bitmap: introduce generic optimized bitmap_size()
  - media: dvb-usb-v2: af9035: fix missing unlock
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
  - usb: gadget: core: Check for unset descriptor
  - ipv6: prevent UAF in ip6_send_skb()
  - x86/mtrr: Check if fixed MTRRs exist before saving them


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb8
changelog:
  - net: sxe: add volatile constrain for readl/writel
  - net: sxevf: add volatile constrain for readl/writel
  - Input: i8042: remove request_region for phytium
  - config: arm64: enable leds gpio and hy8563 rtc
  - ASoC: phytium: fix depends
  - hda: phytium: add dma configure for DT
  - mtd: spi-nor: Add support for XM25QH256A
  - usb: phytium: Add missing MODULE_DEVICE_TABLE
  - drm: phytium: Add missing MODULE_DEVICE_TABLE for device tree
  - phytium: update compatible string for e2000
  - net: bonding: Update alarms according to kedong requirements
  - net: bonding: fix modules parameters permission
  - net: bonding: fix drop packet by bond3+
  - bonding: support macvlan
  - bonding: support TCP filter by bond3+ and fix problem in gateway learn
  - x86/perf: Add uncore performance events support for Zhaoxin CPU
  - i2c/zhaoxin: I2C controller driver enhancement and optimization
  - net: sxevf: add wrapper for readl/writel
  - net: sxe: add wrapper for readl/writel


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb11
changelog:
  - config: arm64: enable SND_SEQUENCER
  - firmware: arm_scpi: Add check for dvfs_info.opp_count
  - ACPI: processor: Fix memory leaks in error paths of processor_add()
  - ntp: Safeguard against time_constant overflow
  - ntp: Clamp maxerror and esterror to operating range
  - Revert "ntp: Avoid undefined behaviour in second_overflow()"
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
  - hrtimer: Prevent queuing of hrtimer without a function callback
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
  - selinux: fix potential counting error in avc_add_xperms_decision()
  - ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
  - ELF: fix kernel.randomize_va_space double read
  - md/raid1: don't free conf on raid0_run failure
  - acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
  - btrfs: clean up our handling of refs == 0 in snapshot delete
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
  - ASoC: meson: axg-card: fix 'use-after-free'
  - rtmutex: Drop rt_mutex::wait_lock before scheduling
  - sched/smt: Fix unbalance sched_smt_present dec/inc
  - sched/smt: Introduce sched_smt_present_inc/dec() helper
  - sched: Revert fix unbalance sched_smt_present dec/inc
  - drm/amdgpu: fix mc_data out-of-bounds read warning
  - nilfs2: protect references to superblock parameters exposed in sysfs
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  - dhugetlb: make free_huge_page_to_dhugetlb_pool irq safe
  - dhugetlb: avoid lockdep warning with spin_lock_nested
  - dhugetlb: Use helper function to lock/unlock
  - scsi: aacraid: Fix double-free on probe failure
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  - PCI: Add missing bridge lock to pci_bus_lock()
  - usb: dwc3: st: fix probed platform device ref count on probe error path
  - memcg_write_event_control(): fix a user-triggerable oops
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  - udf: Avoid excessive partition lengths
  - udf: Define EFSCORRUPTED error code
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  - can: bcm: Remove proc entry when dev is unregistered.
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  - apparmor: fix possible NULL pointer dereference
  - nilfs2: fix missing cleanup on rollforward recovery error
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
  - ALSA: line6: Fix racy access to midibuf
  - perf/x86: Serialize set_attr_rdpmc()
  - blktrace: fix blktrace is disabled when CONFIG_BLK_DEBUG_FS is disabled
  - binder: fix UAF caused by offsets overwrite
  - net: USB: Fix wrong-direction WARNING in plusb.c


author: Liu Dalin <liudalin@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb12
changelog:
  - mm:vmscan: add CONFIG_MEMORY_RELIABLE check
  - perf cs-etm: Move definition of 'traceid_list' global variable from header file
  - config: arm64: enable spidev
  - libtraceevent: Fix build with binutils 2.35
  - perf tests bp_account: Make global variable static
  - perf bench: Share some global variables to fix build with gcc 10


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb13
changelog:
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  - ext4: explicitly exit when ext4_find_inline_entry returns an error
  - ext4: return error on ext4_find_inline_entry
  - ext4: ext4_search_dir should return a proper error
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  - resource: fix region_intersects() vs add_memory_driver_managed()
  - mm/resource: Use resource_overlaps() to simplify region_intersects()
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  - Bluetooth: Return whether a connection is outbound
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  - ext4: update orig_path in ext4_find_extent()
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  - net: mvneta: Fix an out of bounds check
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  - ext4: fix double brelse() the buffer of the extents path
  - ext4: aovid use-after-free in ext4_ext_insert_extent()
  - ext4: avoid use-after-free in ext4_ext_show_leaf()
  - nfs: maintain nfs_server in the reclaim process
  - nfs: fix memory leak in error path of nfs4_do_reclaim
  - Bluetooth: Fix not cleanup led when bt_init fails
  - igb: Initialize mailbox message for VF reset
  - tipc: guard against string buffer overrun
  - net/9p: Fix a potential socket leak in p9_socket_open
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - ACPI: sysfs: validate return type of _STR method
  - NFSv4: release seqid when open failed for nfs4.0
  - media: venus: fix use after free bug in venus_remove due to race condition
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  - ext4: fix slab-use-after-free in ext4_split_extent_at()
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - slip: make slhc_remember() more robust against malicious packets
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - selinux: add the processing of the failure of avc_add_xperms_decision()
  - smack: tcp: ipv4, fix incorrect labeling
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  - usb: gadget: uvc: Prevent buffer overflow in setup handler
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
  - net: phy: fix null-ptr-deref while probe() failed
  - ppp: fix ppp_async_encode() illegal access
  - fbdev: pxafb: Fix possible use after free in pxafb_task()
  - nilfs2: fix state management in error path of log writing function
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  - net: do not delay dst_entries_add() in dst_release()
  - NFC: nci: Bounds check struct nfc_target arrays
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - init: Initialize noop_backing_dev_info early
  - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
  - swap: stop add to avail list if swap is full
  - pinctrl: single: fix potential NULL dereference in pcs_get_function()
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  - gpio: amd8111: Fix PCI device reference count leak
  - media: pci: cx23885: check cx23885_vdev_init() return
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - jfs: Fix uninit-value access of new_ea in ea_buffer
  - firmware_loader: Block path traversal
  - svm: fix UAF/Double Free in svm
  - nbd: fix race between timeout and normal completion
  - gtp: fix a potential NULL pointer dereference
  - gtp: make sure only SOCK_DGRAM UDP sockets are accepted
  - mm/swapfile: skip HugeTLB pages for unuse_vma
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - udf: Fix preallocation discarding at indirect extent boundary
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  - usb: dwc3: core: Prevent USB core invalid event buffer address access
  - usb: dwc3: core: Skip setting event buffers for host only controllers
  - cgroup: Protect css->cgroup write under css_set_lock
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
  - ida: Fix crash in ida_free when the bitmap is empty
  - net: busy-poll: use ktime_get_ns() instead of local_clock()
  - SUNRPC: Fix a race to wake a sync task
  - net: linkwatch: use system_unbound_wq
  - ext4: avoid deadlock in fs reclaim with page writeback
  - kabi: deduplication friendly structs
  - kabi: Generalize naming of kabi helper macros
  - kabi: add kabi helper macros


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb14
changelog:
  - config: arm64: enable ps3 raid controller driver
  - scsi: ps3: Don't use compiler builtins
  - scsi: ps3stor: Don't use compiler builtins


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb16
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  - USB: serial: io_edgeport: fix use after free in debug printk
  - usb: typec: altmode should keep reference to parent
  - HID: core: zero-initialize the report buffer
  - media: v4l2-tpg: prevent the risk of a division by zero
  - dm cache: fix potential out-of-bounds access on the first resume
  - dm cache: optimize dirty bit checking with find_next_bit when resizing
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
  - wifi: ath10k: Fix memory leak in management tx
  - ath10k: Remove msdu from idr when management pkt send fails
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
  - nfs: ignore SB_RDONLY when mounting nfs
  - nfs: pass flags to second superblock
  - bpf: Fix out-of-bounds write in trie_get_next_key()
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  - sctp: properly validate chunk size in sctp_sf_ootb()
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
  - nilfs2: fix kernel bug due to missing clearing of checked flag
  - vfs: fix race between evice_inodes() and find_inode()&iput()
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  - NFS: make sure open context mode have FMODE_EXEC when file open for exec
  - media: s5p-jpeg: prevent buffer overflows
  - btrfs: reinitialize delayed ref list after deleting it from the list
  - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  - irqchip/gic-v3: Force propagation of the active state with a read-back
  - ceph: remove the incorrect Fw reference check when dirtying pages
  - nilfs2: propagate directory read errors from nilfs_find_entry()
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
  - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  - drm/amd: Guard against bad data for ATIF ACPI method
  - Revert "sched/dynamic_affinity: fix preffered_cpu offline problem"
  - sched/dynamic_affinity: fix preffered_cpu offline problem
  - mm: split critical region in remap_file_pages() and invoke LSMs in between
  - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  - mm/mmap.c: don't unlock VMAs in remap_file_pages()
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
  - serial: core: Fix atomicity violation in uart_tiocmget
  - sched: smart_grid: Prevent double-free in sched_grid_qos_free
  - security/keys: fix slab-out-of-bounds in key_task_permission
  - net: fix data-races around sk->sk_forward_alloc
  - fs: call fsnotify_sb_delete after evict_inodes
  - nfs: fix rpc_task use-after-free when open and close different files concurrently
  - locking/osq_lock: Avoid false sharing in optimistic_spin_node
  - security: ksimc: fix error check return value of d_path
  - security: ksimc: fix error check return value of dentry_path_raw


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb17
changelog:
  - config: arm64: enable sxevf ethernet driver
  - net: sxevf: bump to 1.5.0.19
  - Revert "net: sxevf: add wrapper for readl/writel"
  - Revert "net: sxevf: add volatile constrain for readl/writel wrapper"
  - config: arm64: enable sxe ethernet driver
  - net: sxe: bump to 1.5.0.19
  - Revert "net: sxe: add wrapper for readl/writel"
  - Revert "net: sxe: add volatile constrain for readl/writel wrapper"
  - scsi: ps3stor: bump to 2.5.0.30
  - Revert "scsi: Add ps3 raid controller"
  - Revert "scsi: ps3: Stop using the SCSI pointer"
  - Revert "scsi: ps3: Stop using pci_enable_pcie_error_reporting"
  - Revert "scsi: ps3: Change the return type of .eh_timed_out()"
  - Revert "scsi: ps3: Don't use compiler builtins"
  - Revert "config: x86: enable ps3 raid controller driver"
  - Revert "config: arm64: enable ps3 raid controller driver"
  - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages
  - mm/compaction: correctly return failure with bogus compound_order in strict mode
  - mm: shmem: don't truncate page if memory failure happens
  - signal: Replace BUG_ON()s
  - printk: Fix the qspinlock deadloop caused by zap_locks()
  - ACPI: PMIC: fix compile error
  - dhugetlb: keep refcount to 0 while page is actually free in pool
  - ACPI: battery: Fix possible crash when unregistering a battery hook
  - ACPI: battery: Simplify battery hook locking
  - ACPICA: iasl: handle empty connection_node
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
  - ACPI: EC: Do not release locks during operation region accesses
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
  - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
  - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
  - x86/apic: Always explicitly disarm TSC-deadline timer
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  - cgroup: Fix potential overflow issue when checking max_depth
  - smb: client: Fix use-after-free of network namespace.
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
  - arm64: probes: Fix uprobes for big-endian kernels
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian
  - selinux: improve error checking in sel_write_load()
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  - block, bfq: fix possible UAF for bfqq->bic with merge chain
  - nfs: fix the loss of superblock's initialized flags
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  - net: Fix icmp host relookup triggering ip_rt_bug
  - padata: make padata_do_parallel find alternate callback CPU
  - btrfs: fix the length of reserved qgroup to free
  - btrfs: fix qgroup reserve leaks in cow_file_range
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
  - be2net: fix potential memory leak in be_xmit()
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout
  - Bluetooth: call sock_hold earlier in sco_conn_del
  - initramfs: avoid filename buffer overrun
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  - scsi: smartpqi: add no_write_same for logical volumes
  - /dev/mem: Add option to allow unlimited access to /dev/mem for arm64
  - net: stmmac: add a fallback method to get MAC address from EEPROM
  - config: arm64: enable phytmac driver
  - net/phytmac: Support WOL interaction with BIOS
  - net/phytmac: Adapt interface type 2500BASE-x
  - net/phytmac: Bugfix MAC 10/100M speed does't work problem
  - net/phytmac: Bugfix MAC address change when rmmod and insmod module
  - net/phytmac: Bugfix about dma conflict problem
  - net/phytmac: Add version display for phytmac driver
  - net/phytmac: Round down rx_buf_len to 64 bytes
  - net/phytmac: Override rx_skb allocation function
  - net/phytmac: Roll back rx_clean version
  - net/phytmac: Add support for usxgmii wol
  - net/phytmac: Add the pause state to change operation
  - net/phytmac: Modify the method of obtaining the link status
  - net/phytmac: Get device type error fixed
  - net/phytmac: Adjust the code style
  - net/phytmac: Added high address check
  - net/phytmac: Adapt interface type 1000BASE-x
  - net/phytmac: Fixed the issue of pxe startup failure.
  - net/phytmac: Bugfix MDIO registration failure problem
  - net:phytmac: Bugfix 2.5G speed can not work problem
  - net:phytmac: Bugfix wol cann't work problem
  - net:phytmac: Bugfix MAC cann't work when queues have different high addr
  - net:phytmac: Bugfix iperf3 udp stop in half deplux mode
  - net: Phytim: Add support for 10G port link check and PTP feature
  - net: phytium: Add support for phytium gmac


author: Liu Dalin <liudalin@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb18
changelog:
  - perf/x86/zhaoxin/uncore: Remove the uncore support for special processor
  - perf/x86/zhaoxin/uncore: Add support for processors with irregular core numbers
  - cpufreq: acpi-cpufreq: add ITMT support when CPPC enabled


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb19
changelog:
  - net: wangxun: change netdev uc addr num maxmium
  - net: wangxun: fix resolving ipv6 pakets extension header errors
  - net: wangxun: fix tx csum by soft except tcp udp sctp
  - quota: flush quota_release_work upon quota writeback
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  - sched: Replace WARN_ON_ONCE to printk_deferred_once
  - sched/rt: Fix rt_runtime leaks with cpu hotplug
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  - fs: Filter specific inodes to prevent UAF issues
  - mm: hugetlb: independent PMD page table shared count
  - net: af_can: do not leave a dangling sk pointer in can_create()
  - tipc: fix NULL deref in cleanup_bearer()
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  - tipc: remove ub->ubsock checks
  - BMA: Fix Oops and spin lock deadlock problem, and change the version number.
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  - NFSv4: Fix deadlock during the running of state manager
  - etmem: fix use-after-free of mm in the scan release process
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  - fbdev/sh7760fb: Alloc DMA memory from hardware device
  - 9p/xen: fix release of IRQ
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  - memcg: fix soft lockup in the OOM process
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - tcp: check skb is non-NULL in tcp_rto_delta_us()
  - tcp: introduce tcp_skb_timestamp_us() helper
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  - PCI: Fix use-after-free of slot->bus on hot remove
  - vfio/pci: Properly hide first-in-list PCIe extended capability
  - um: net: Do not use drvdata in release
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
  - um: ubd: Do not use drvdata in release
  - selinux: ignore unknown extended permissions
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  - netlink: terminate outstanding dump on socket close
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  - ovl: Filter invalid inodes with missing lookup function
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  - crypto: bcm - add error check in the ahash_hmac_init function
  - sh: intc: Fix use-after-free bug in register_intc_controller()
  - sched/dynamic_affinity: Calculate cpu capacity in real time when realtime tasks are running on this cpu
  - ALSA: 6fire: Release resources at card release
  - NFSD: Prevent a potential integer overflow
  - printk: Skip log flush in NMI context when logbuf_lock is held
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  - NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
  - Revert "NFSv4: release seqid when open failed for nfs4.0"
  - Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
  - ALSA: usb-audio: Fix a DMA to stack memory bug
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
  - nfsd: restore callback functionality for NFSv4.0
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  - nfs: nfs4_callback_compound should put client with async mode
  - netfilter: ipset: add missing range check in bitmap_ip_uadt
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  - ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
  - hwmon/k10temp: Add support for Hygon family 18h model 10h
  - EDAC/amd64: Add support for Hygon family 18h model 10h
  - x86/amd_nb: Add support for Hygon family 18h model 10h
  - x86/cpu: Get LLC ID for Hygon family 18h model 10h
  - /dev/mem: Add missing "=" for setup param


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.2.0.0281
changelog:
  - !8895  net: fix out-of-bounds access in ops_init
  - !8694  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - !8858  PCI/PM: Drain runtime-idle callbacks before driver removal
  - !8626  fs/9p: only translate RWX permissions for plain 9P2000
  - !8490  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - !8777  memory: fsl_ifc: fix leak of IO mapping on probe failure
  - !8806  media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8664  mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - !8865  staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - !8888  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - !8825  watchdog: Fix possible use-after-free in wdt_startup()
  - !8654  nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8358  perf report: Fix memory leaks around perf_tip()
  - !8552  tipc: fix a possible memleak in tipc_buf_append
  - !8851  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8802  CVE-2021-47294
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8628  erspan: make sure erspan_base_hdr is present in skb->head
  - !8716  CVE-2024-35910
  - !8325  ocfs2: fix data corruption after conversion from inline format
  - !8729  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8636  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - watchdog: Fix possible use-after-free in wdt_startup()
  - !8773  sched: remove WARN_ON on checking rq->tmp_alone_branch
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8678  can: pch_can: pch_can_rx_normal: fix use after free
  - netrom: Fix use-after-free of a listening socket.
  - netrom: Decrease sock refcount when sock timers expire
  - !8676  net: tulip: de4x5: fix the problem that the array 'lp->phy[8
  - !8708  media: imon: fix access to invalid resource for the second interface
  - !8707  regmap: Fix possible double-free in regcache_rbtree_exit()
  - !8706  isdn: mISDN: Fix sleeping function called from invalid context
  - !8705  usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8357  nilfs2: fix underflow in second superblock position calculations
  - !8681  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - !8484  scsi: megaraid_sas: Fix resource leak in case of probe failure
  - memory: fsl_ifc: fix leak of IO mapping on probe failure
  - sched: remove WARN_ON on checking rq->tmp_alone_branch
  - !8620  CVE-2024-35896
  - !8526  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - !8336  tcp: fix page frag corruption on page fault
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8521  isofs: Fix out of bound access for corrupted isofs image
  - !7786  powerpc/powernv: Add a null pointer check in opal_event_init()
  - !8568  gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - tcp: properly terminate timers for kernel sockets
  - mptcp: add sk_stop_timer_sync helper
  - !8478  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !8366  net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - !8544  CVE-2021-47358
  - !8577  mmc: sdhci-msm: pervent access to suspended controller
  - !8579  net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - !8603  rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - media: imon: fix access to invalid resource for the second interface
  - regmap: Fix possible double-free in regcache_rbtree_exit()
  - isdn: mISDN: Fix sleeping function called from invalid context
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8516  CVE-2021-47409
  - !8465  drm/amd/display: Avoid NULL dereference of timing generator
  - !8500  pwm: Fix double shift bug
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - can: pch_can: pch_can_rx_normal: fix use after free
  - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
  - !8402  i40e: Fix freeing of uninitialized misc IRQ vector
  - !8398  comedi: ni_usb6501: fix NULL-deref in command paths
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8464  i2c: smbus: fix NULL function pointer dereference
  - !8434  iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - !8411  platform/x86: wmi: Fix opening of char device
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8307  s390/dasd: protect device queue against concurrent access
  - !8444  CVE-2021-47511
  - !8443 v2  ipack: ipoctal: fix module reference leak
  - !8611  smackfs: restrict bytes count in smk_set_cipso()
  - !8610  media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - !8609  can: peak_pci: peak_pci_remove(): fix UAF
  - !8430  drm/sched: Avoid data corruptions
  - !8557  net: cdc_eem: fix tx fixup skb leak
  - !8365  efi/capsule-loader: fix incorrect allocation size
  - !8333  soc: qcom: llcc: Handle a second device without data corruption
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: complete validation of user input
  - netfilter: validate user input for expected length
  - smackfs: restrict bytes count in smk_set_cipso()
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - can: peak_pci: peak_pci_remove(): fix UAF
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - mmc: sdhci-msm: pervent access to suspended controller
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - net: cdc_eem: fix tx fixup skb leak
  - tipc: fix a possible memleak in tipc_buf_append
  - staging: greybus: uart: fix tty use after free
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - isofs: Fix out of bound access for corrupted isofs image
  - usb: dwc2: Fix memory leak in dwc2_hcd_init
  - usb: dwc2: check return value after calling platform_get_resource()
  - pwm: Fix double shift bug
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - scsi: megaraid_sas: Fix resource leak in case of probe failure
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - drm/amd/display: Avoid NULL dereference of timing generator
  - i2c: smbus: fix NULL function pointer dereference
  - ALSA: pcm: oss: Fix negative period/buffer sizes
  - ALSA: pcm: oss: Fix a few more UBSAN fixes
  - ipack: ipoctal: fix module reference leak
  - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - drm/sched: Avoid data corruptions
  - platform/x86: wmi: Fix opening of char device
  - i40e: Fix freeing of uninitialized misc IRQ vector
  - comedi: ni_usb6501: fix NULL-deref in command paths
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - efi/capsule-loader: fix incorrect allocation size
  - perf report: Fix memory leaks around perf_tip()
  - nilfs2: fix underflow in second superblock position calculations
  - tcp: fix page frag corruption on page fault
  - soc: qcom: llcc: Handle a second device without data corruption
  - ocfs2: fix data corruption after conversion from inline format
  - s390/dasd: protect device queue against concurrent access
  - powerpc/powernv: Add a null pointer check in opal_event_init()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.3.0.0282
changelog:
  - !9086 v2  dhugetlb: use rcu lock to protect hpool
  - !8796  CVE-2023-52810
  - !8699  wifi: cfg80211: check A-MSDU format more carefully
  - !9123  staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - !9005  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !9113  IB/qib: Protect from buffer
  - !9119  PCI: aardvark: Fix kernel panic during PIO transfer
  - !9058  watchdog: Fix possible use-after-free by calling del_timer_sync()
  - !9053  soc: fsl: qbman: Use raw spinlock for cgr_lock
  - PCI: aardvark: Fix kernel panic during PIO transfer
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
  - PCI: aardvark: Don't rely on jiffies while holding spinlock
  - !9091  RDMA/cma: Fix rdma_resolve_route() memory leak
  - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
  - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
  - !9037  fix CVE-2021-47509
  - RDMA/cma: Fix rdma_resolve_route() memory leak
  - dhugetlb: use rcu lock to protect hpool
  - !8291 Fix CVE-2023-52836
  - !8574  net: ieee802154: fix null deref in parse dev addr
  - !9017  misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - !9045  ALSA: seq: Fix race of snd_seq_timer_open()
  - !9046  net: rds: fix memory leak in rds_recvmsg
  - !8632  phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - !8695  net: macb: fix use after free on rmmod
  - !4633 Add support for Hygon family 18h model 5h HD-Audio
  - !9057  CVE-2021-47261
  - !8637  dyndbg: fix old BUG_ON in >control parser
  - !8698  net: batman-adv: fix error handling
  - !8715  net/sched: act_skbmod: prevent kernel-infoleak
  - !8775  llc: verify mac len before reading mac header
  - watchdog: Fix possible use-after-free by calling del_timer_sync()
  - IB/mlx5: Fix initializing CQ fragments buffer
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9022  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - !8786  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - !8704  usb: fix various gadget panics on 10gbps cabling
  - !9013  net: encx24j600: check error in devm_regmap_init_encx24j600
  - net: rds: fix memory leak in rds_recvmsg
  - ALSA: seq: Fix race of snd_seq_timer_open()
  - !9036  IB/hfi1: Restore allocated resources on failed copyout
  - !4620 Some fixes for Hygon model 4h~6h processors
  - !4630 Add support for Hygon model 6h L3 PMU
  - ALSA: pcm: oss: Limit the period size to 16MB
  - ALSA: pcm: oss: Fix potential out-of-bounds shift
  - !8549  batman-adv: Avoid infinite loop trying to resize local TT
  - !8763  tipc: fix UAF in error path
  - IB/hfi1: Restore allocated resources on failed copyout
  - !8956  net: ti: fix UAF in tlan_remove_one
  - !8959  comedi: vmk80xx: fix bulk-buffer overflow
  - !8740  CVE-2024-36914
  - !8824  igb: Fix use-after-free error during reset
  - !8987  bna: ensure the copied buf is NUL terminated
  - !9026  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !8923  i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - !8961  nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - !8875  drm/vmwgfx: Fix invalid reads in fence signaled events
  - !8883  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - net: encx24j600: check error in devm_regmap_init_encx24j600
  - !8998  i2c: acpi: fix resource leak in reconfiguration device addition
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !8991  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - !8992  fix CVE-2024-36905
  - i2c: acpi: fix resource leak in reconfiguration device addition
  - !8868  ipv6: prevent NULL dereference in ip6_output()
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - !8737  ubifs: Set page uptodate in the correct place
  - !8668  phonet/pep: fix racy skb_queue_empty() use
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - bna: ensure the copied buf is NUL terminated
  - nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - comedi: vmk80xx: fix bulk-buffer overflow
  - net: ti: fix UAF in tlan_remove_one
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - ipv6: prevent NULL dereference in ip6_output()
  - igb: Fix use-after-free error during reset
  - fs/jfs: Add check for negative db_l2nbperpage
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - llc: verify mac len before reading mac header
  - tipc: fix UAF in error path
  - drm/amd/display: Skip on writeback when it's not applicable
  - ubifs: Set page uptodate in the correct place
  - net/sched: act_skbmod: prevent kernel-infoleak
  - usb: fix various gadget panics on 10gbps cabling
  - wifi: cfg80211: check A-MSDU format more carefully
  - net: batman-adv: fix error handling
  - net: macb: fix use after free on rmmod
  - phonet/pep: fix racy skb_queue_empty() use
  - dyndbg: fix old BUG_ON in >control parser
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - net: ieee802154: fix null deref in parse dev addr
  - batman-adv: Avoid infinite loop trying to resize local TT
  - locking/ww_mutex/test: Fix potential workqueue corruption
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.4.0.0283
changelog:
  - !9471  CVE-2021-47434
  - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
  - xhci: Fix command ring pointer corruption while aborting a command
  - !8935  wifi: nl80211: don't free NULL coalescing rule
  - !9444  CVE-2022-48737
  - !8493  rpmsg: virtio: Free driver_override when rpmsg_remove()
  - !8473  scsi: mpt3sas: Fix kernel panic during drive powercycle test
  - ASoC: ops: Fix bounds check for _sx controls
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
  - !9322  drm/amd/display: Fix potential index out of bounds in color transformation function
  - !9366  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9392  drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - !9232  batman-adv: Avoid WARN_ON timing related checks
  - !9351  Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - !9393  net: lts v4.311 backport
  - !9286  mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - !9206 v2  sched: smart_grid: fix potential NULL pointer dereference
  - !9314  spi: Fix deadlock when adding SPI controllers on SPI buses
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
  - ipv6: fib6_rules: flush route cache when rule is changed
  - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
  - !8360 v2  loop: use lo->lo_disk for kobject_uevent
  - !9343  firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  - !9326  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  - !9285  of: module: add buffer overflow check in of_modalias()
  - !9316  CVE-2022-48755
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - !9344  round lts patches
  - !8769  atl1c: Work around the DMA RX overflow issue
  - !9292  net: bridge: xmit: make sure we have at least eth header len bytes
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast
  - net: bridge: fix multicast-to-unicast with fraglist GSO
  - net: mark racy access on sk->sk_rcvbuf
  - net l2tp: drop flow hash on forward
  - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  - !9324 v2  Linux 4.19.312-313 LTS patches
  - vxlan: Fix regression when dropping packets due to invalid src addresses
  - udp: preserve the connected status if only UDP cmsg
  - vxlan: drop packets from invalid src-address
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm/amd/display: Fix potential index out of bounds in color transformation function
  - powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
  - spi: fix kabi breakage in struct spi_controller
  - spi: Fix deadlock when adding SPI controllers on SPI buses
  - !9278  CVE-2021-47231
  - !8783 v2  arm64 mpam fix patch
  - !9270  inet_diag: fix kernel-infoleak for UDP sockets
  - !9140 v2  CVE-2024-36971
  - !8847  wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  - !9260 v3  ftrace: Fix possible use-after-free issue in ftrace_location()
  - net: bridge: xmit: make sure we have at least eth header len bytes
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - of: module: add buffer overflow check in of_modalias()
  - !9061  iio: mma8452: Fix trigger reference couting
  - can: mcba_usb_start(): add missing urb->transfer_dma initialization
  - can: mcba_usb: fix memory leak in mcba_usb
  - inet_diag: fix kernel-infoleak for UDP sockets
  - ftrace: Fix possible use-after-free issue in ftrace_location()
  - !9227  kprobes: Fix possible use-after-free issue on kprobe registration
  - !9228  coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
  - !9225  can: sja1000: fix use after free in ems_pcmcia_add_card()
  - !8656  mm, slub: fix potential memoryleak in kmem_cache_open()
  - !8937  firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - !8691  Fix page corruption caused by racy check in __free_pages
  - batman-adv: Avoid WARN_ON timing related checks
  - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - can: sja1000: fix use after free in ems_pcmcia_add_card()
  - !9179  CVE-2021-47232
  - !9004  media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  - !8130 v2  CVE-2021-47493
  - !9006  media: tc358743: register v4l2 async device only after successful setup
  - !9144  serial: 8250_exar: Don't remove GPIO device on suspend
  - sched: smart_grid: fix potential NULL pointer dereference
  - can: j1939: fix Use-after-Free, hold skb ref while in use
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function
  - !8800  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - !8798  hid: cp2112: Fix duplicate workqueue initialization
  - !8799  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - serial: 8250_exar: Don't remove GPIO device on suspend
  - net: fix kabi breakage in struct dst_ops
  - net: fix __dst_negative_advice() race
  - iio: mma8452: Fix trigger reference couting
  - media: tc358743: register v4l2 async device only after successful setup
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half
  - wifi: nl80211: don't free NULL coalescing rule
  - wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  - hid: cp2112: Fix duplicate workqueue initialization
  - arm64/mpam: Fix softlockup when reading mondata
  - arm64/mpam: Fix wrong seconds to jiffies conversion
  - arm64/mpam: change allocation mode from GFP_KERNEL to GFP_NOWAIT
  - mpam/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
  - mpam/resctrl: Clean up resctrl_group_rmdir_[ctrl/mon]()
  - mpam/resctrl: Clean up unused function parameter in mkdir path
  - mpam/resctrl: Fix a deadlock due to inaccurate reference
  - atl1c: Work around the DMA RX overflow issue
  - Fix page corruption caused by racy check in __free_pages
  - mm, slub: fix potential memoryleak in kmem_cache_open()
  - rpmsg: virtio: Free driver_override when rpmsg_remove()
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test
  - loop: use lo->lo_disk for kobject_uevent
  - jbd2: export jbd2_journal_[grab|put]_journal_head
  - ocfs2: fix a deadlock when commit trans
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.1.0.0284
changelog:
  - !9629  stm class: Fix a double free in stm_register_device()
  - !9646  phonet: fix rtm_phonet_notify() skb allocation
  - !9628  m68k: Fix spinlock race in kernel thread creation
  - !9623 v2  net/nfc/rawsock.c: fix a permission check bug
  - !9648 backport two patches from 5.10 to fix some bugs for GuestOS
  - !9617  mac80211: track only QoS data frames for admission control
  - !9637  ipv6: sr: fix invalid unregister error path
  - !9607  enic: Validate length of nl attributes in enic_set_vf_port
  - !9606  drm/nouveau: fix off by one in BIOS boundary checking
  - !9605  scsi: bfa: Ensure the copied buf is NUL terminated
  - irqchip: gic-v3: Collection table support muti pages
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids
  - phonet: fix rtm_phonet_notify() skb allocation
  - ipv6: sr: fix invalid unregister error path
  - stm class: Fix a double free in stm_register_device()
  - m68k: Fix spinlock race in kernel thread creation
  - !9076  RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - net/nfc/rawsock.c: fix a permission check bug
  - mac80211: track only QoS data frames for admission control
  - enic: Validate length of nl attributes in enic_set_vf_port
  - drm/nouveau: fix off by one in BIOS boundary checking
  - !9600  CVE-2024-38597
  - scsi: bfa: Ensure the copied buf is NUL terminated
  - !9409  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - !9452  jffs2: prevent xattr node from overflowing the eraseblock
  - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  - net: fec: remove .ndo_poll_controller to avoid deadlocks
  - !8163 v2  mmc: sdio: fix possible resource leaks in some error paths
  - !9535  igbvf: fix double free in `igbvf_probe`
  - !9590  s390/ap: Fix crash in AP internal function modify_bitmap()
  - !9584  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9537  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9585  net/mlx5e: Avoid field-overflowing memcpy()
  - s390/ap: Fix crash in AP internal function modify_bitmap()
  - net/mlx5e: Avoid field-overflowing memcpy()
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  - !9534  rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
  - !9419  mm/migrate: set swap entry values of THP tail pages properly.
  - !9560  net: systemport: Add global locking for descriptor lifecycle
  - !9526  media: lgdt3306a: Add a check against null-pointer-def
  - !9539  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - net: systemport: Add global locking for descriptor lifecycle
  - !9340  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - !9330  ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  - !9382  serial: max3100: Update uart_driver_registered on driver removal
  - !9503 v2  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - !9464  quota: Fix rcu annotations of inode dquot pointers
  - !9530 v2  Backport LTS patches
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  - !9435  fix CVE-2024-38621
  - igbvf: fix double free in `igbvf_probe`
  - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
  - !9381  vfio/pci: fix potential memory leak in vfio_intx_enable()
  - !9497  netrom: fix possible dead-lock in nr_rt_ioctl()
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - media: lgdt3306a: Add a check against null-pointer-def
  - !9505  CVE-2024-38587
  - !9473  um: Add winch to winch_handlers before registering winch IRQ
  - !9407  drm/arm/malidp: fix a possible null pointer dereference
  - !9400  Fix CVE-2024-31076
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug
  - !9439  CVE-2022-48715
  - !9133  net: ethernet: fix potential use-after-free in ec_bhf_remove
  - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
  - netrom: fix possible dead-lock in nr_rt_ioctl()
  - !9265  ring-buffer: Fix a race between readers and resize checks
  - !9390  NFS: Fix an off by one in root_nfs_cat()
  - um: Add winch to winch_handlers before registering winch IRQ
  - quota: Fix rcu annotations of inode dquot pointers
  - fs/quota: erase unused but set variable warning
  - jffs2: prevent xattr node from overflowing the eraseblock
  - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
  - media: stk1160: fix bounds checking in stk1160_copy_video()
  - mm/migrate: set swap entry values of THP tail pages properly.
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  - drm/arm/malidp: fix a possible null pointer dereference
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  - NFS: Fix an off by one in root_nfs_cat()
  - serial: max3100: Update uart_driver_registered on driver removal
  - vfio/pci: fix potential memory leak in vfio_intx_enable()
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  - ring-buffer: Fix a race between readers and resize checks
  - net: ethernet: fix potential use-after-free in ec_bhf_remove
  - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
  - mmc: sdio: fix possible resource leaks in some error paths


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.3.0.0285
changelog:
  - !9803 v2  x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
  - x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
  - !9797  sch_cake: do not call cake_destroy() from cake_init()
  - sch_cake: do not call cake_destroy() from cake_init()
  - !9786  drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
  - !9777  CVE-2024-23848
  - media: cec: cec-api: add locking in cec_release()
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  - !9765  i40e: Fix queues reservation for XDP
  - !9760  CVE-2024-26816
  - !9754  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9367 v2  net: qcom/emac: fix UAF in emac_remove
  - !9512  drm: vc4: Fix possible null pointer dereference
  - !9755  wifi: ar5523: enable proper endpoint verification
  - i40e: Fix queues reservation for XDP
  - !9744  Fix CVE-2024-36949
  - !9741  scsi: qedf: Ensure the copied buf is NUL terminated
  - !9727  net: amd-xgbe: Fix skb data length underflow
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  - x86, relocs: Ignore relocations in .notes section
  - !9743  USB: core: Fix hang in usb_kill_urb by adding memory barriers
  - wifi: ar5523: enable proper endpoint verification
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6
  - !9674  ax25: Fix reference count leak issue of net_device
  - !9729  seg6: fix the iif in the IPv6 socket control block
  - !9725 v2  net: Fix CVE-2022-48757
  - !9737  net/9p: fix uninit-value in p9_client_rpc()
  - amd/amdkfd: sync all devices to wait all processes being evicted
  - drm/amdkfd: Rework kfd_locked handling
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers
  - scsi: qedf: Ensure the copied buf is NUL terminated
  - net/9p: fix uninit-value in p9_client_rpc()
  - !9710  CVE-2022-48738
  - !9568  media: mxl111sf: change mutex_init() location
  - !9570  net: ieee802154: ca8210: Stop leaking skb's
  - seg6: fix the iif in the IPv6 socket control block
  - !9700 v2  crypto: bcm - Fix pointer arithmetic
  - !9684  greybus: lights: check return of get_channel_from_mode
  - net: amd-xgbe: Fix skb data length underflow
  - !9666  ftrace: Fix rcu warn in ftrace_location()
  - net: fix kabi breakage in struct packet_type
  - net: fix information leakage in /proc/net/ptype
  - !9724  Fix CVE-2024-35915
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_rx_work
  - nfc: nci: Fix kcov check in nci_rx_work()
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - !9658  KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
  - !9698  Fix CVE-2021-47270
  - !9699  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - !9550  scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
  - !9707  nilfs2: fix use-after-free of timer for log writer thread
  - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
  - nilfs2: fix use-after-free of timer for log writer thread
  - !9655  nfc: fix segfault in nfc_genl_dump_devices_done
  - !9654  mac80211: validate extended element ID is present
  - !9653  ecryptfs: Fix buffer size for tag 66 packet
  - !9652  ALSA: timer: Set lower bound of start tick time
  - !9697 v3  Fix CVE-2024-38567
  - !9633  CVE-2024-38582
  - !9692  netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - crypto: bcm - Fix pointer arithmetic
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
  - usb: fix various gadgets null ptr deref on 10gbps cabling.
  - wifi: carl9170: add a proper sanity check for endpoints
  - USB: core: Add routines for endpoint checks in old drivers
  - !9597  ASoC: max9759: fix underflow in speaker_gain_control_put()
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  - !9626  fix uaf when proc_cpuset_show
  - !9660  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - greybus: lights: check return of get_channel_from_mode
  - ax25: Fix reference count leak issue of net_device
  - ftrace: Fix rcu warn in ftrace_location()
  - !9553  CVE-2024-37356
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  - KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
  - nfc: fix segfault in nfc_genl_dump_devices_done
  - mac80211: validate extended element ID is present
  - ecryptfs: Fix buffer size for tag 66 packet
  - ALSA: timer: Set lower bound of start tick time
  - nilfs2: fix potential hang in nilfs_detach_log_writer()
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  - cgroup: fix uaf when proc_cpuset_show
  - ASoC: max9759: fix underflow in speaker_gain_control_put()
  - net: ieee802154: ca8210: Stop leaking skb's
  - media: mxl111sf: change mutex_init() location
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  - params: lift param_set_uint_minmax to common code
  - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
  - drm: vc4: Fix possible null pointer dereference
  - net: qcom/emac: fix UAF in emac_remove


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.4.0.0286
changelog:
  - !9925  ocfs2: fix races between hole punching and AIO+DIO
  - !9874  crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - !9830  mmc: davinci: Don't strip remove function when driver is builtin
  - !9870  cifs: Fix deadlock in cifs_writepages during reconnect
  - !9895  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ocfs2: fix races between hole punching and AIO+DIO
  - !9891  ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9856  btrfs: fix memory ordering between normal and ordered work functions
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  - ipv6: sr: fix memleak in seg6_hmac_init_algo
  - !9492  netlabel: fix out-of-bounds memory accesses
  - !9868  usb: musb: tusb6010: check return value after calling platform_get_resource()
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  - cifs: Fix deadlock in cifs_writepages during reconnect
  - usb: musb: tusb6010: check return value after calling platform_get_resource()
  - !9858  khugepaged: fix null-pointer dereference due to race
  - !9819  kdb: Fix buffer overflow during tab-complete
  - khugepaged: fix null-pointer dereference due to race
  - btrfs: fix memory ordering between normal and ordered work functions
  - !9842  net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
  - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
  - mmc: davinci: Don't strip remove function when driver is builtin
  - kdb: Fix buffer overflow during tab-complete
  - netlabel: fix out-of-bounds memory accesses


author: chenyi <chenyi211@huawei.com> - 4.19.90-2407.5.0.0287
changelog:
  - !10125  nvme-rdma: fix possible use-after-free in transport error_recovery work
  - !10112  ftrace: Fix use-after-free for dynamic ftrace_ops
  - !10276  net: ieee802154: at86rf230: Stop leaking skb's
  - net: ieee802154: at86rf230: Stop leaking skb's
  - !9917  powerpc/pseries: Enforce hcall result buffer validity and size
  - !10240  CVE-2024-41007
  - !10251  sctp: fix kernel-infoleak for SCTP sockets
  - !10241  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - sctp: fix kernel-infoleak for SCTP sockets
  - !10229  staging: gdm724x: fix use after free in gdm_lte_rx()
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  - tcp: avoid too many retransmit packets
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  - net: tcp: fix unexcepted socket die when snd_wnd is 0
  - tcp: refactor tcp_retransmit_timer()
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit
  - staging: gdm724x: fix use after free in gdm_lte_rx()
  - !10137  NFSD: Fix ia_size underflow
  - !10183 v3  ima: Fix use-after-free on a dentry's dname.name
  - !10121  usb: f_fs: Fix use-after-free for epfile
  - !10016  drm/exynos/vidi: fix memory leak in .get_modes()
  - !10211  fix CVE-2022-48865
  - !10206  gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
  - tipc: fix kernel panic when enabling bearer
  - tipc: fix NULL pointer dereference in tipc_disc_rcv()
  - gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
  - !10186  vsock: remove vsock from connected table when connect is interrupted by a signal
  - !10190  Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
  - vsock: remove vsock from connected table when connect is interrupted by a signal
  - !10141  vt_ioctl: fix array_index_nospec in vt_setactivate
  - ima: Fix use-after-free on a dentry's dname.name
  - !10152  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - !10026  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - !10147  CVE-2022-48836
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  - Input: aiptek - properly check endpoint type
  - Input: aiptek - fix endpoint sanity check
  - vt_ioctl: fix array_index_nospec in vt_setactivate
  - !10095  CVE-2024-40968
  - !10130  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - NFSD: Fix ia_size underflow
  - !10123  CVE-2022-48838
  - !10122  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - !10081  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  - !10092  usb: host: ohci-tmio: check return value after calling platform_get_resource()
  - nvme-rdma: fix possible use-after-free in transport error_recovery work
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  - usb: f_fs: Fix use-after-free for epfile
  - !10094  net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - ftrace: Fix use-after-free for dynamic ftrace_ops
  - !10054  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - MIPS: Octeon: Add PCIe link status check
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  - usb: host: ohci-tmio: check return value after calling platform_get_resource()
  - !10033  ipv6: prevent possible NULL dereference in rt6_probe()
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c
  - !9996  netpoll: Fix race condition in netpoll_owner_active
  - !9948  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - vmci: prevent speculation leaks by sanitizing event in event_deliver()
  - ipv6: prevent possible NULL dereference in rt6_probe()
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  - drm/exynos/vidi: fix memory leak in .get_modes()
  - netpoll: Fix race condition in netpoll_owner_active
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  - powerpc/pseries: Enforce hcall result buffer validity and size


author: chenyi <chenyi211@huawei.com> - 4.19.90-2408.1.0.0288
changelog:
  - !10327  NFC: port100: fix use-after-free in port100_send_complete
  - !10325  kobject: Fix global-out-of-bounds in kobject_action_type()
  - !10337  drm/radeon: fix UBSAN warning in kv_dpm.c
  - !10368 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  - !10227  MIPS: smp: fill in sibling and core maps earlier
  - drm/radeon: fix UBSAN warning in kv_dpm.c
  - !10324  BMA: Fix iBMA bug and change
  - NFC: port100: fix use-after-free in port100_send_complete
  - kobject: Fix global-out-of-bounds in kobject_action_type()
  - !10315  jfs: xattr: fix buffer overflow for invalid xattr
  - BMA/cdev_veth_drv: Fix softlockup problem
  - BMA/kbox_drv: Change the version number.
  - BMA/veth_drv: Fix soft interrupt loops and change the version number
  - BMA/cdev_drv: Change the version number.
  - BMA/edma_drv: Fix DMA reset problem and change the version number.
  - !10173  netrom: Fix a memory leak in nr_heartbeat_expiry()
  - !10249  fbdev: savage: Handle err return when savagefb_check_var failed
  - !10306  mISDN: Fix memory leak in dsp_pipeline_build()
  - jfs: xattr: fix buffer overflow for invalid xattr
  - !10198  scsi: qedi: Fix crash while reading debugfs attribute
  - !10310  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - !10307  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - !10296  Backport dvb-usb bugfix
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  - mISDN: Fix memory leak in dsp_pipeline_build()
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  - USB: move snd_usb_pipe_sanity_check into the USB core
  - fbdev: savage: Handle err return when savagefb_check_var failed
  - MIPS: smp: fill in sibling and core maps earlier
  - scsi: qedi: Fix crash while reading debugfs attribute
  - netrom: Fix a memory leak in nr_heartbeat_expiry()


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb1
changelog:
  - iommu: clear all bits if zhaoxin p2cw patch enabled
  - mm: Fix guard zhaoxin_p2cw_patch_en for Zhaoxin KH-40000
  - efi: cper: Fix build error on arm64
  - sched/topology: Fix build error on arm64
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - USB: UAS: fix disconnect by unplugging a hub
  - x86/cpu: Remove pointless evaluation of x86_coreid_bits
  - PCI: Extend PCI root port device IDs for Zhaoxin platforms
  - i2c: smbus: Add support for Zhaoxin SMBUS controller
  - efi: cper: Add Zhaoxin/Centaur ZDI/ZPI error decode
  - ata: ahci: Add support for AHCI SGPIO Enclosure Management
  - Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
  - KVM: x86: Fix APIC page invalidation race
  - Add support Zhaoxin GPIO pinctrl
  - crypto: x86/sm2 -add Zhaoxin SM2 algorithm implementation
  - Update HDAC support for Zhaoxin KX-7000
  - xhci: guard accesses to ep_state in xhci_endpoint_reset()
  - xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed
  - Add support for Zhaoxin GMI SM4 Block Cipher Algorithm
  - Add support for Zhaoxin GMI SM3 Secure Hash algorithm
  - Fix coherent DMA writes disorder issue for Zhaoxin KH-40000 platform
  - Fix streaming DMA writes disorder issue for Zhaoxin KH-40000 platform
  - Turning off Zhaoxin ahci controller runtime pm from sysfs
  - HDAC: Update support for Zhaoxin NB HDAC codec
  - HDAC: Update support for Zhaoxin NB HDAC
  - xhci: avoid race between disable slot command and host runtime suspend
  - x86/perf/zhaoxin: Add stepping check for ZXC
  - igc: fix build for coalesce params
  - config: enable ocfs2
  - igc: use gettime64 instead of gettimex64
  - igc: Update I226_K device ID
  - igc: fix page fault when thunderbolt is unplugged
  - igc: Increase timeout value for Speed 100/1000/2500
  - igc: Fix an error handling path in 'igc_probe()'
  - igc: Fix use-after-free error during reset
  - igc: Remove phy->type checking
  - igc: Remove _I_PHY_ID checking
  - igc: Remove unused argument from igc_tx_cmd_type()
  - igc: Fix prototype warning
  - igc: Assign boolean values to a bool variable
  - igc: Remove unused MII_CR_LOOPBACK
  - igc: Remove unused MII_CR_SPEED
  - igc: Remove unused MII_CR_RESET
  - igc: Fix igc_ptp_rx_pktstamp()
  - igc: Fix Supported Pause Frame Link Setting
  - igc: Fix Pause Frame Advertising
  - igc: reinit_locked() should be called with rtnl_lock
  - igc: Fix TDBAL register show incorrect value
  - igc: Remove unused FUNC_1 mask
  - igc: Remove unused local receiver mask
  - igc: Prefer strscpy over strlcpy
  - igc: Expose the gPHY firmware version
  - igc: Expose the NVM version
  - igc: Add Host Good Packets Transmitted Count
  - igc: Remove MULR mask define
  - igc: Remove igc_set_fw_version comment
  - igc: Clean up nvm_operations structure
  - igc: check return value of ret_val in igc_config_fc_after_link_up
  - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
  - igc: Report speed and duplex as unknown when device is runtime suspended
  - igc: fix link speed advertising
  - igc: Add new device ID
  - igc: Fix returning wrong statistics
  - igc: Clean up nvm_info structure
  - igc: Export a way to read the PTP timer
  - igc: Remove reset disable flag
  - igc: Save PTP time before a reset
  - igc: Remove references to SYSTIMR register
  - igc: Expose LPI counters
  - igc: Clean RX descriptor error flags
  - igc: Remove timeout check from ptp_tx work
  - igc: Don't reschedule ptp_tx work
  - igc: Rename IGC_TSYNCTXCTL_VALID macro
  - igc: Add new device ID's
  - igc: Fix not considering the TX delay for timestamps
  - igc: Fix wrong timestamp latency numbers
  - igc: Fix PTP initialization
  - igc: Fix static checker warning
  - igc: Clean up the hw_stats structure
  - igc: Clean up the mac_info structure
  - igc: Remove ledctl_ fields from the mac_info structure
  - igc: Fix registers definition
  - igc: Remove unneeded ICTXQMTC register
  - igc: Add Receive Descriptor Minimum Threshold Count to clear HW counters
  - igc: Remove unneeded variable
  - igc: Remove checking media type during MAC initialization
  - igc: Remove unneeded check for copper media type
  - igc: Refactor the igc_power_down_link()
  - igc: Remove TCP segmentation TX fail counter
  - igc: Add LPI counters
  - igc: Fix Rx timestamp disabling
  - igc: Refactor igc_ptp_set_timestamp_mode()
  - igc: Remove UDP filter setup in PTP code
  - igc: Check __IGC_PTP_TX_IN_PROGRESS instead of ptp_tx_skb
  - igc: Remove duplicate code in Tx timestamp handling
  - igc: Clean up Rx timestamping logic
  - igc: Add initial LTR support
  - igc: Add initial EEE support
  - igc: Fix wrong register name
  - igc: Remove Sequence Error Counter
  - igc: Add Receive Error Counter
  - igc: Remove symbol error counter
  - igc: Fix IGC_MAX_RXNFC_RULES
  - igc: Reject NFC rules with multiple matches
  - igc: Remove unused flags
  - igc: Remove unused descriptor's flags
  - igc: Remove igc_nfc_rule_exit()
  - igc: Change adapter->nfc_rule_lock to mutex
  - igc: Change return type from igc_disable_nfc_rule()
  - igc: Fix NFC rule validation
  - igc: Fix NFC rules leak when driver is unloaded
  - igc: Refactor igc_ethtool_update_nfc_rule()
  - igc: Fix NFC rules restoration
  - igc: Fix NFC rules with multicast addresses
  - igc: Fix NFC rule overwrite cases
  - igc: Fix locking issue when retrieving NFC rules
  - igc: Fix 'sw_idx' type in struct igc_nfc_rule
  - igc: Refactor igc_ethtool_add_nfc_rule()
  - igc: Change byte order in struct igc_nfc_filter
  - igc: Align terms used in NFC support code
  - igc: Add 'igc_ethtool_' prefix to functions in igc_ethtool.c
  - igc: Early return in igc_get_ethtool_nfc_entry()
  - igc: Cleanup _get|set_rxnfc ethtool ops
  - igc: Get rid of igc_max_channels()
  - igc: Remove unused field from igc_nfc_filter
  - igc: Remove per queue good transmited counter register
  - igc: Remove header redirection register
  - igc: Remove obsolete circuit breaker registers
  - igc: Enable NFC rules based source MAC address
  - igc: Add support for source address filters in core
  - igc: Remove mac_table from igc_adapter
  - igc: Remove IGC_MAC_STATE_SRC_ADDR flag
  - igc: Remove unused registers
  - igc: Remove unused IGC_ICS_DRSTA define
  - igc: Dump ETQF registers
  - igc: Refactor ethertype filtering code
  - igc: Fix MAX_ETYPE_FILTER value
  - igc: Remove ethertype filter in PTP code
  - igc: Remove duplicated IGC_RXPBS macro
  - igc: Refactor VLAN priority filtering code
  - igc: Return -EOPNOTSUPP when VLAN mask doesn't match
  - igc: Dump VLANPQF register
  - igc: Rename IGC_VLAPQF macro
  - igc: Clean up obsolete NVM defines
  - igc: remove IGC_REMOVED function
  - igc: Remove PCIe Control register
  - igc: Remove unneeded register
  - igc: Remove unneeded definition
  - igc: Use netdev log helpers in igc_base.c
  - igc: Use netdev log helpers in igc_dump.c
  - igc: Use netdev log helpers in igc_ptp.c
  - igc: Use netdev log helpers in igc_ethtool.c
  - igc: add support to eeprom, registers and link self-tests
  - igc: Use netdev log helpers in igc_main.c
  - igc: Add ECN support for TSO
  - igc: Add debug messages to MAC filter code
  - igc: Refactor igc_del_mac_filter()
  - igc: Refactor igc_mac_entry_can_be_used()
  - igc: Remove igc_*_mac_steering_filter() wrappers
  - igc: Remove IGC_MAC_STATE_QUEUE_STEERING
  - igc: Remove 'queue' check in igc_del_mac_filter()
  - igc: Improve address check in igc_del_mac_filter()
  - igc: Refactor igc_rar_set_index()
  - igc: Fix igc_uc_unsync()
  - igc: Change igc_add_mac_filter() returning value
  - igc: Check unsupported flag in igc_add_mac_filter()
  - igc: Remove duplicate code in MAC filtering logic
  - igc: Add new device IDs for i225 part
  - igc: Fix default MAC address filter override
  - igc: Remove dead code related to flower filter
  - igc: Fix NFC queue redirection support
  - igc: Remove copper fiber switch control
  - igc: Enable NETIF_F_HW_TC flag
  - igc: Fix double definition
  - igc: Fix overwrites when dumping registers
  - igc: Remove forward declaration
  - igc: Remove unused CTRL_EXT_LINK_MODE_MASK
  - igc: Remove unused MDIC_DEST mask
  - igc: Add GSO partial support
  - net: igc: let core reject the unsupported coalescing parameters
  - igc: Add comment
  - igc: Add WOL support
  - igc: Add pcie error handler support
  - igc: Complete to commit Add basic skeleton for PTP
  - igc: Fix the typo in comment
  - igc: Add dump options
  - igc: Complete to commit Add legacy power management support
  - igc: make non-global functions static
  - igc: Add PHY power management control
  - igc: Add support for TSO
  - igc: Add SKU for i225 device
  - igc: Remove unused definition
  - igc: Fix typo in a comment
  - igc: Use Start of Packet signal from PHY for timestamping
  - igc: Add support for ethtool GET_TS_INFO command
  - igc: Add support for TX timestamping
  - igc: Add support for RX timestamping
  - igc: Add basic skeleton for PTP
  - igc: Remove no need declaration of the igc_sw_init
  - igc: Remove no need declaration of the igc_write_itr
  - igc: Remove no need declaration of the igc_assign_vector
  - igc: Remove no need declaration of the igc_free_q_vector
  - igc: Remove no need declaration of the igc_free_q_vectors
  - igc: Remove no need declaration of the igc_irq_disable
  - igc: Remove no need declaration of the igc_irq_enable
  - igc: Remove no need declaration of the igc_configure_msix
  - igc: Remove no need declaration of the igc_set_rx_mode
  - igc: Remove no need declaration of the igc_set_interrupt_capability
  - igc: Remove no need declaration of the igc_alloc_mapped_page
  - igc: Remove no need declaration of the igc_configure
  - igc: Remove no need declaration of the igc_set_default_mac_filter
  - igc: Remove no need declaration of the igc_power_down_link
  - igc: Remove no need declaration of the igc_clean_tx_ring
  - igc: Remove serdes comments from a description of methods
  - igc: Add legacy power management support
  - igc: Add 64 bit DMA access support
  - igc: Fix parameter descriptions for a several functions
  - igc: Fix the parameter description for igc_alloc_rx_buffers
  - igc: Remove excess parameter description from igc_is_non_eop
  - igc: Prefer to use the pci_release_mem_regions method
  - igc: Improve the DMA mapping flow
  - igc: Add scatter gather support
  - igb/igc: use ktime accessors for skb->tstamp
  - net: ethernet: intel: Demote MTU change prints to debug
  - igb/igc: Don't warn on fatal read failures when the device is removed
  - igc: Clean up unused shadow_vfta pointer
  - igc: Add Rx checksum support
  - igc: Add set_rx_mode support
  - igc: Add SCTP CRC checksumming functionality
  - igc: Add tx_csum offload functionality
  - igc: Remove unneeded PCI bus defines
  - igc: Add NVM checksum validation
  - igc: Remove useless forward declaration
  - igc: Add more SKUs for i225 device
  - igc: Update the MAC reset flow
  - igc: Remove the unused field from a device specification structure
  - igc: Remove the polarity field from a PHY information structure
  - igc: Prefer pcie_capability_read_word()
  - igc: Cleanup the redundant code
  - igc: Add flow control support
  - igc: Remove the obsolete workaround
  - igc: Clean up unused pointers
  - igc: Fix double definitions
  - igb/igc: warn when fatal read failure happens
  - ASoC: hdmi-codec: Fix return value in hdmi_codec_set_jack()
  - ASoC: hdmi-codec: Use set_jack ops to set jack
  - xfrm: update definitions for SM1/3/4
  - xfrm: SM4: set alg_maxbits to 128
  - xfrm: Add support for SM1 symmetric cipher algorithm
  - xfrm: SM4: remove geniv
  - xfrm: SM3: set truncbits to 96
  - config: arm64: make i2c chardev builtin
  - config: increase maximum number of 8250 serial ports
  - performace: optimize unixbench context1/spawn performance
  - arm64: syscall: unmask DAIF for tracing status
  - sched: Add affinity wake-up code
  - lse atomic performance optimization
  - arm64: add SMID register copy_page
  - pipe performance optimization
  - Revert "arm64: zero GPRs upon entry from EL0"
  - kpti: KASLR does not force KPTI to be turned on
  - topology: Represent clusters of CPUs within a die
  - firmware: dmi: fix kabi for enum dmi_field
  - PCI: vmd: Add DID 8086:7D0B and 8086:AD0B for Intel MTL SKUs
  - PCI: vmd: Add DID 8086:A77F for all Intel Raptor Lake SKU's
  - PCI: vmd: Offset Client VMD MSI-X vectors
  - PCI: vmd: Create IRQ allocation helper
  - PCI: vmd: Create bus offset configuration helper
  - PCI: vmd: Create physical offset helper
  - PCI: vmd: Use Shadow MEMBAR registers for QEMU/KVM guests
  - PCI: vmd: Filter resource type bits from shadow register
  - PCI: vmd: Add two VMD Device IDs
  - PCI: vmd: Add device id for VMD device 8086:9A0B
  - PCI: vmd: Add bus 224-255 restriction decode
  - PCI/VMD: Configure MPS settings before adding devices
  - e1000e: Add support for the next LOM generation
  - e1000e: Add support for the next LOM generation
  - e1000e: Separate MTP board type from ADP
  - e1000e: Separate ADP board type from TGP
  - e1000e: Separate TGP board type from SPT
  - e1000e: Add support for the next LOM generation
  - e1000e: Add support for Lunar Lake
  - e1000e: Add support for Meteor Lake
  - e1000e: Add support for Tiger Lake device
  - e1000e: Add support for Alder Lake
  - e1000e: Add support for Tiger Lake
  - e1000e: Add support for Comet Lake
  - e1000e: Increase pause and refresh time
  - libsubcmd: Fix use-after-free for realloc(..., 0)
  - tools lib: Fix builds when glibc contains strlcpy()
  - mfd: Select MFD_CORE for Phytium Px210 I2S MMD MFD driver
  - kconfig: Make phytium SoC drivers depend on ARCH_PHYTIUM
  - config: arm64: enable eeprom at24
  - config: arm64: enable bluetooth support
  - acpi: Add ACPI CIDs for phytium SoC device drivers
  - config: arm64: enable mucse ethernet driver
  - net: mucse: add rnpm ethernet driver
  - net: mucse: add rnpvf ethernet driver
  - net: mucse: add rnp ethernet driver
  - config: arm64: enable zhaoxin sata controller
  - config: arm64: enable zhaoxin ethernet driver
  - net: add support of zhaoxin gigabyte network interface controller driver
  - config: arm64: enable DVFS
  - cpufreq: scpi: add acpi support
  - clk: scpi: add soft dependenciy on scpi-cpufreq
  - clk: scpi: Use fwnode_property_match_string
  - clk: scpi: add acpi support
  - hwmon: scpi: add acpi support
  - firmware: arm_scpi: Add error handling for reading mem resource
  - firmware: arm_scpi: add acpi support
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
  - KVM: arm/arm64: disable WARN_ON for non-hisi cpu
  - libata/ahci: fix DMA with ZX-200 SATA controller under FT2000+
  - wdt: add wdt resource name
  - mailbox: add acpi support
  - optee: Refuse to load the driver under the kdump kernel
  - serial: pl011: Add dynamic baud rate for sbsa uart
  - Input: i8042: Fix build error
  - Input: i8042: Fix depends for arm64
  - Input: i8042: Simplify implementation for phytium
  - Input: i8042: Remove useless architecture-related code
  - Input: i8042: Remove hardcoded acpi match
  - Input: i8042: Add support for phytium
  - i2c: designware: Fix i2c controler timeout after S3
  - acpi: Add ACPI HIDs for phytium SoC device drivers
  - platform/phytium/power: fix invalid free of input device in phytium_power
  - platform/phytium/ec: fix ft2004 machine hang after S3/S4
  - platform/phytium/backlight: fix the problem of backlight get dark after S3
  - platform/phytium/ec: fix ec gpio interrupt
  - platform/phytium: add power button sci event handling
  - platform/phytium: phytium-power: fix some D2000 laptop's hardware or EC firmware bugs
  - platform/phytium: rename phytium_battery.c to phytium_power.c
  - platform/phytium: phytium-battery: refactor phytium battery driver
  - platform: add phytium platform support
  - bus: phytium_lpc: register as module platform driver
  - bus: add phytium_lpc support
  - net: bonding: Replace do_gettimeofday() with ktime_get_real_ts64()
  - bonding: enhanced bond3 support
  - config: arm64: don't filter access to /dev/mem
  - pci: add workaround for phytium laptops
  - net: stmmac: Add workaround for dwmac-phytium
  - serial: phytium-uart: rename device name
  - config: arm64: enable Cadence MACB/GEM support
  - net: macb: add support for high speed interface
  - net: macb: Switch NCSI device in the link state callback
  - net: macb: Add ACPI support for Phytium XMAC
  - net: macb: add clock selection support to match the speed
  - net: macb: Add support for USXGMII
  - net: macb: Add compatible string for Phytium SoCs
  - dt-bindings: net: macb: Add compatible string for Phytium SoCs
  - net: macb: Support NCSI mode
  - net: macb: restart tx after tx used bit read for multiqueue
  - net: phy: Fix kabi for phy_interface_t
  - net: phy: Add 5GBASER interface mode
  - net: phy: add interface mode PHY_INTERFACE_MODE_USXGMII
  - cadence: force nonlinear buffers to be cloned
  - net: macb: fix error format in dev_err
  - net: macb: Support clock management for tsu_clk
  - net: macb: Limit maximum GEM TX length in TSO
  - net: macb: remove unnecessary code
  - mtd: rawnand: phytium: fix read and write page memory leaks
  - mmc: phytium: Add clock phase adjustment logic
  - mmc: phytium: Fix emmc abnormal issue during S3 resume
  - mmc: phytium: Fix the phase problem of emmc at high temperature
  - mtd: rawnand: phytium: Add software error correction for ECC
  - dt-bindings: mmc: phytium: Add bindings for MCI phase adjustment
  - mtd: rawnand: phytium: Modified wait queue and completion
  - config: arm64: enable phytium USB support
  - usb: phytium: Improving USB controller write performance
  - usb: phytim: Fix the defect of endpoint request loss after DMA reset
  - usb: phytium: Repair stall error handling process
  - usb: phytium: Add usb_hcd_link_urb_to_ep return value judgment
  - usb: phytium: usb power manager use SET_SYSTEM_SLEEP_PM_OPS
  - usb: phytium: Add get_endpoint_interval function
  - usb: phytium: ignore DMA abnormal interrupt
  - usb: phytium: fixed the encoding error that disable epvalid bit
  - w1: phytium: Support ACPI table
  - media: phytium-jpeg: support the same resolution
  - media: phytium-jpeg: support the resolution is zero
  - usb: phytium: Fix double free chainNode crash
  - arm64: dts: phytium: Bind DMA channels to SPI2/UART1 on Pe2202 board
  - arm64: dts: phytium: Add DDMA node to Pe220x SoC
  - dmaengine: phytium: Add DDMA controller driver support
  - dt-bindings: dma: phytium,ddma: Add bindings for Phytium DDMA
  - config: arm64: enable Phytium Pe220x EDAC driver
  - arm64: dts: phytium: Add EDAC node to Pe220x SoC
  - EDAC/phytium: Add Phytium Pe220x EDAC driver
  - dt-bindings: edac: phytium-pe220x-edac: Add Phytium Pe220x support
  - arm64: dts: phytium: Add dts for Phytium Pe220x demo boards
  - arm64: dts: phytium: Add dts for Phytium Pe220x SoCs
  - irqchip/irq-gic-v3-its: Fix interrupt missing after resume from S3
  - mtd: spi-nor: add support for GD25Q128E
  - watchdog: dw: Add ACPI support to dw-wdt
  - config: arm64: enable Phytium ASoC support
  - config: arm64: enable hda codecs
  - ASoC: es8388: unmute by default
  - ASoC: phytium: Add support for platform driver model
  - mfd: Add support for Phytium Px210 I2S controller on MMD
  - mfd: Add support for Phytium Px210 I2S controller on LSD
  - ASoC: phytium: Add phytium machine with px210 DP support
  - ASoC: phytium: Add phytium machine with es8336 support
  - ASoC: phytium: Add phytium machine with es8388 support
  - ASoC: phytium: Add phytium I2S support
  - ASoC: codecs: Add everest es8336 codec support
  - ASoC: codecs: Add everest es8388 codec support
  - dt-bindings: Add bindings for Phytium I2S controller
  - usb: xhci: xhci-plat: Add XHCI_RESET_ON_RESUME quirk for Phytium Pe220x
  - xHCI: Add XHCI_SLOWDOWN_QUIRK quirk for phytium xHCI controller
  - xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  - dt-bindings: usb-xhci: Add Phytium Pe220x support
  - usb: phytium: Add support for Phytium USB controller
  - pci: phytium: Add PCIe endpoint controller support
  - dt-bindings: PCI: phytium: Add DT bindings for PCIe endpoint controller
  - kabi: acpi: fix kabi broken
  - config: arm64: enable Phytium INTx controller
  - irqchip/ixic: Add support for Phytium INTx controller
  - dt-bindings: phytium,ixic: Add bindings for Phytium IXIC
  - ACPI: irq: Add workaround for phytium PCI Interrupt Link
  - ACPI: irq: Fix incorrect return value in acpi_register_irq
  - PCI/ACPI: Add stacked IRQ domain support to PCI Interrupt Link
  - acpi/irq: Implement helper to create hierachical domains
  - config: arm64: enable fan tacho driver support
  - hwmon: (tacho-phytium) Add fan tacho driver support
  - dt-bindings: Add a binding for Phytium tachometer
  - config: arm64: enable Phytium BT BMC driver support
  - ipmi: Add Phytium BT BMC driver support
  - dt-bindings: ipmi: Add bindings for Phytium BT
  - config: arm64: enable Phytium KCS IPMI BMC driver
  - ipmi: Add Phytium KCS IPMI BMC driver support
  - dt-bindings: ipmi: Add bindings for Phytium KCS
  - config: arm64: enable Phytium PWM controller
  - pwm: phytium: Add Phytium SoC PWM support
  - dt-bindings: pwm: Add bindings for Phytium PWM controller
  - config: arm64: enable Phytium hwspinlock
  - hwspinlock/phytium: Add support for Phytium hardware semaphore
  - dt-bindings: hwspinlock: Add binding documentation for Phytium hwspinlock
  - mtd: rawnand: Add Phytium NAND flash controller support
  - config: arm64: Make phytium ps2 driver modular
  - Input: Add a new serio driver for Phytium PCI PS/2 controller
  - serial: phytium: Add a new driver for Phytium PCI UART
  - usb: host: xhci-plat: add quirks member into struct xhci_plat_priv
  - tee: optee: fix return type mismatch build warning
  - config: arm64: enable i3c
  - i3c: cdns: Fix phytium workaround
  - i3c: master: Use fallthrough comment
  - i3c: cdns: Fix DAA fail at high frequency
  - i3c: cdns: Add GETMXDS format 1 retransmission
  - i3c: cdns: add support for Phytium workaround
  - i3c: Make remove callback return void
  - i3c: Handle drivers without probe or remove callback
  - i3c: master: Fix error return in cdns_i3c_master_probe()
  - i3c: master: fix for SETDASA and DAA process
  - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
  - i3c master: GETMRL's 3rd byte is optional even with BCR_IBI_PAYLOAD
  - i3c: master: Replace zero-length array with flexible-array member
  - i3c: Simplify i3c_device_match_id()
  - i3c: Add a modalias sysfs attribute
  - i3c: Fix MODALIAS uevents
  - i3c: master: no need to iterate master device twice
  - i3c: master: make i3c_bus_set_mode static
  - i3c: master: cdns: add data hold delay support
  - i3c: Spelling s/dicovered/discovered/
  - i3c: master: use i3c_dev_get_master()
  - i3c: master: Use dev_to_i3cmaster()
  - i3c: master: fix a memory leak bug
  - i3c: add addr and lvr to i2c_dev_desc structure
  - i3c: master: cdns: Use for_each_set_bit()
  - i3c: master: Add of_node_put() before return
  - i3c: move i3c_device_match_id to device.c and export it
  - i3c: master: Use struct_size() helper
  - i3c: add mixed limited bus mode
  - i3c: fix i2c and i3c scl rate by bus mode
  - i3c: Drop support for I2C 10 bit addresing
  - i3c: Fix a shift wrap bug in i3c_bus_set_addr_slot_status()
  - i3c: Fix the verification of random PID
  - i3c: fix missing detach if failed to retrieve i3c dev
  - i3c: master: Fix an error checking typo in 'cdns_i3c_master_probe()'
  - i3c: master: cdns: fix I2C transfers in Cadence I3C master driver
  - ic3: off by one in mode_show()
  - i3c: fix an error code in i3c_master_add_i3c_dev_locked()
  - i3c: master: Remove set but not used variable 'old_i3c_scl_lim'
  - i3c: master: Add driver for Cadence IP
  - i3c: Add core I3C infrastructure
  - config: arm64: enable motorcom phy driver
  - net: phy: abort loading yt8511 driver in unsupported modes
  - net: phy: fix yt8511 clang uninitialized variable warning
  - net: phy: add driver for Motorcomm yt8511 phy
  - net: phy: add macros for PHYID matching
  - config: enable igc ethernet driver
  - igc: Remove unneeded hw_dbg prints
  - igc: Fix the typo in igc_base.h header definition
  - igc: Add support for the ntuple feature
  - igc: Add support for statistics
  - igc: Extend the ethtool supporting
  - igc: Add multiple receive queues control supporting
  - igc: Use struct_size() helper
  - igc: Add ethtool support
  - igc: Remove the 'igc_get_phy_id_base' method
  - igc: Remove the 'igc_read_mac_addr_base' method
  - igc: Remove unneeded code
  - igc: Remove unused code
  - igc: Fix code redundancy
  - igc: Remove unreachable code from igc_phy.c file
  - igc: Remove obsolete IGC_ERR define
  - ethernet/intel: consolidate NAPI and NAPI exit
  - igc: Clean up code
  - igc: Tidy up some white space
  - igc: fix error return handling from call to netif_set_real_num_tx_queues
  - igc: Remove set but not used variable 'pci_using_dac'
  - igc: Remove set but not used variables 'ctrl_ext, link_mode'
  - intel-ethernet: software timestamp skbs as late as possible
  - igc: Add watchdog
  - igc: Add setup link functionality
  - igc: Add code for PHY support
  - igc: Add NVM support
  - igc: Add HW initialization code
  - igc: Add transmit and receive fastpath and interrupt handlers
  - igc: Add support for Tx/Rx rings
  - igc: Add interrupt support
  - igc: Add netdev
  - igc: Add support for PF
  - igc: Add skeletal frame for Intel(R) 2.5G Ethernet Controller support
  - config: x86: enable SM3 and SM4 algorithms
  - config: arm64: enable SM3 algorithm
  - xfrm: Add support for SM4 symmetric cipher algorithm
  - xfrm: Add support for SM3 secure hash
  - driver core: platform: return -ENXIO for missing GpioInt
  - driver: platform: Support parsing GpioInt 0 in platform_get_irq()
  - nvme-fc: Fix kabi for struct nvme_fc_port_template
  - nvme-fc: Revert "add module to ops template to allow module references"
  - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
  - drm/nouveau/kms: fix a crash on arm64
  - drm/radeon: fix bad DMA from INTERRUPT_CNTL2
  - drm/radeon: take the mode_config mutex when dealing with dp
  - radeon: insert 10ms sleep in dce5_crtc_load_lut
  - radeon: insert 10ms sleep in avivo_crtc_load_lut
  - rtc: class: hctosys after registering rtc with rtc_device_register
  - rtc: class: remove redundant assignment to variable err
  - rtc: class: avoid unnecessary lookup in hctosys
  - rtc: class: add debug message when registration fails
  - rtc: class: support hctosys from modular RTC drivers
  - config: arm64: enable renesas xhci controller
  - usb: xhci: fix USB_XHCI_PCI depends
  - usb: renesas-xhci: Remove renesas_xhci_pci_exit()
  - usb: xhci: avoid renesas_usb_fw.mem when it's unusable
  - usb: xhci: Add support for Renesas controller with memory
  - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
  - usb: renesas-xhci: remove version check
  - usb: xhci: make symbols static
  - usb: renesas-xhci: include correct header for get_unaligned_le16()
  - usb: renesas-xhci: Add ROM loader for uPD720201
  - usb: renesas-xhci: Add the renesas xhci driver
  - usb: hci: add hc_driver as argument for usb_hcd_pci_probe
  - hwmon: (scpi-hwmon) shows the negative temperature properly
  - sched/rt: Disable RT_RUNTIME_SHARE by default
  - scsi: sr: get rid of sr global mutex
  - drm/phytium: Replace default efi fb0 with dc fb
  - drm/phytium: Bugfix Xorg startup for ps23xx when using pe2201 bmc card
  - config: enable mwv207 driver
  - drm: Add mwv207 driver
  - config: enable mwv206 driver
  - drm/mwv206: Bump to 2.1.6-20220310.1700
  - drm/mwv206: Fix depends
  - drm: Add mwv206 driver
  - config: enable smifb drm driver
  - drm: Add smifb drm driver
  - arm64: cpuinfo: Add model name
  - firmware: dmi: Save processor information
  - arm64: kpti: Add phytium CUPs to the KPTI whitelist
  - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
  - arm64: Add cpu part definitions for E2000 and S5000C
  - arm64: add uImage build rule
  - config: enable console cjk font
  - vt: fix depend issue
  - vt: add cjk font that has 65536 chars
  - vt: diable setfont if we have cjk font in kernel
  - vt: fix 255 glyph limit, prepare for CJK font support
  - video/logo: replace logo
  - kbuild: disable -Wmaybe-uninitialized
  - gcc-10: disable 'stringop-overflow' warning for now
  - gcc-10: disable 'array-bounds' warning for now
  - gcc-10: disable 'zero-length-bounds' warning for now
  - cpupower: avoid multiple definition with gcc -fno-common
  - .gitignore: ignore *.mod files
  - ci: Add gitlab ci


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb2
changelog:
  - config(x86/arm64): enable CONFIG_KSIMC option
  - config(x86/arm64): enable CONFIG_SECONDARY_SECURITY option
  - security: add kylinsec integrity measurement module for containers
  - lsm: add secondary lsm hook register


author: Liu Dalin <liudalin@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb20
changelog:
  - drm/amdgpu: fix usage slab after free
  - xsk: fix OOB map writes when deleting elements
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  - netfilter: x_tables: fix LED ID check in led_tg_check()
  - net: Fix kabi breakage in struct net
  - net: defer final 'struct net' free in netns dismantle
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
  - EDAC/amd64: Add support for Hygon family 18h model 7h
  - x86/amd_nb: Add support for Hygon family 18h model 7h
  - net: let net.core.dev_weight always be non-zero
  - brd: fix AA deadlock for concurrent brd_probe()
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  - nbd: don't allow reconnect after disconnect
  - spi: mpc52xx: Add cancel_work_sync before module remove
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  - mm/compaction: fix UBSAN shift-out-of-bounds warning
  - ALSA: seq: oss: Fix races at processing SysEx messages
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  - Bluetooth: Consolidate code around sk_alloc into a helper function
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  - ocfs2: correct return value of ocfs2_local_free_info()
  - scsi: sg: Fix slab-use-after-free read in sg_release()
  - bpf: fix OOB devmap writes when deleting elements
  - ceph: prevent use-after-free in encode_cap_msg()
  - stmmac: intel: Adding ref clock 1us tic for LPI cntr
  - net: mdiobus: add APIs for modifying a MDIO device register
  - stmmac: intel: Enable SERDES PHY rx clk for PSE
  - stmmac: intel: Add PSE and PCH PTP clock source selection
  - stmmac: intel: Fixes clock registration error seen for multiple interfaces
  - config: arm64: enable arm scmi driver
  - config: x86: enable stmmac pci&intel ethernet driver
  - stmmac: intel: restore MDIO bus reset
  - stmmac: intel: use PCI_DEVID instead of pci_dev_id() helper
  - stmmac: intel: restore PCI_STD_RESOURCE_END for the number of standard BARS
  - stmmac: intel: restore pci platform data to use interface
  - stmmac: intel: Add ADL-S 1Gbps PCI IDs
  - stmmac: intel: Add PCI IDs for TGL-H platform
  - stmmac: intel: Fix indentation to put on one line affected code
  - stmmac: intel: change all EHL/TGL to auto detect phy addr
  - stmmac: fix pointer check after utilization in stmmac_interrupt
  - stmmac: intel: Fix kernel crash due to wrong error path
  - net: stmmac: Enable SERDES power up/down sequence
  - net: stmmac: add EHL 2.5Gbps PCI info and PCI ID
  - net: stmmac: add EHL PSE0 & PSE1 1Gbps PCI info and PCI ID
  - net: stmmac: create dwmac-intel.c to contain all Intel platform
  - net: stmmac: Get rid of custom STMMAC_DEVICE() macro
  - net: stmmac: pci: Add HAPS support using GMAC5
  - net: stmmac: depend on COMMON_CLK
  - net: stmmac: setup higher frequency clk support for EHL & TGL
  - net: stmmac: add EHL RGMII 1Gbps PCI info and PCI ID
  - net: stmmac: add TGL SGMII 1Gbps PCI info and PCI ID
  - net: stmmac: add EHL SGMII 1Gbps PCI info and PCI ID
  - xhci: make sure TRB is fully written before giving it to the controller


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb21
changelog:
  - rtc: mt6397: check return value after calling platform_get_resource()
  - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  - jffs2: fix memory leak in jffs2_do_fill_super
  - jffs2: fix memory leak in jffs2_do_mount_fs
  - jffs2: fix memory leak in jffs2_scan_medium
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
  - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  - ASoC: mediatek: mt8173: fix device_node leak
  - mm: fix unexpected zeroed page mapping with zram swap
  - media: venus: hfi: avoid null dereference in deinit
  - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
  - be2net: Fix buffer overflow in be_get_module_eeprom
  - sfc: fix kernel panic when creating VF
  - vrf: use RCU protection in l3mdev_l3_out()
  - i40e: Fix call trace in setup_tx_descriptors
  - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  - rxrpc: Restore removed timer deletion
  - rxrpc: fix a race in rxrpc_exit_net()
  - cpufreq: governor: Use kobject release() method to free dbs_data
  - cpufreq: Move to_gov_attr_set() to cpufreq.h
  - tracing/histograms: Fix memory leak problem
  - nfs: ignore SB_RDONLY when remounting nfs
  - nfs: clear SB_RDONLY before getting superblock
  - hfsplus: don't query the device logical block size multiple times
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
  - RDMA/hfi1: Prevent use of lock before it is initialized
  - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  - ARM: hisi: Add missing of_node_put after of_find_compatible_node
  - crypto: qat - add param check for DH
  - iio: trigger: sysfs: fix use-after-free on remove
  - can: gs_usb: gs_usb_open/close(): fix memory leak
  - xtensa: Fix refcount leak bug in time.c
  - pinctrl: ralink: Check for null return of devm_kcalloc
  - md/bitmap: don't set sb values if can't pass sanity check
  - drm/amdkfd: Check for potential null return of kmalloc_array()
  - rtl818x: Prevent using not initialized queues
  - dm integrity: fix memory corruption when tag_size is less than digest size
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  - ipw2x00: Fix potential NULL dereference in libipw_xmit()
  - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
  - net: tipc: fix possible refcount leak in tipc_sk_create()
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  - net_sched: sch_fifo: implement lockless __fifo_dump()
  - net: sched: Disallow replacing of child qdisc from one parent to another
  - media: usb: go7007: s2250-board: fix leak in probe()
  - extcon: Modify extcon device to be created after driver data is set
  - extcon: Fix error handling in extcon_dev_register
  - net: altera: Fix refcount leak in altera_tse_mdio_create
  - md/raid1: fix bitmap update when all write requests fail
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  - md: bypass block throttle for superblock update
  - md/raid1: fix memory leak in raid1_run() if no active rdev
  - af_packet: avoid erroring out after sock_init_data() in packet_create()
  - bpf, arm64: Clear prog->jited_len along prog->jited
  - tcp: Defer ts_recent changes until req is owned
  - RDMA/hfi1: Fix potential integer multiplication overflow errors
  - scsi: libfc: Fix use after free in fc_exch_abts_resp()
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference
  - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
  - ata: sata_dwc_460ex: Fix crash due to OOB write
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free
  - smb: client: fix TCP timers deadlock after rmmod
  - cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0
  - Revert "nfs: ignore SB_RDONLY when mounting nfs"
  - Revert "nfs: pass flags to second superblock"
  - Revert "nfs: fix the loss of superblock's initialized flags"
  - cifs: Fix UAF in cifs_demultiplex_thread()


author: Tan Jun <tanjun@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb22
changelog:
  - scsi: megaraid_sas: Fix potential mutex deadlock between reset and event handling thread
  - net: bonding: Treat packets with a multicast destination address and IGMP protocol as transparent packets


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb24
changelog:
  - tty: goldfish: Use tty_port_destroy() to destroy port
  - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - dm raid: fix accesses beyond end of raid member array
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - HID: betop: check shape of output reports
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - ftrace: Avoid potential division by zero in function_stat_show()
  - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  - phy: qcom-qmp: fix reset-controller leak on probe errors
  - nfc: nci: add flush_workqueue to prevent uaf
  - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
  - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  - drbd: Fix five use after free bugs in get_initial_state
  - f2fs: fix dereference of stale list iterator after loop body
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - trace_events_hist: add check for return value of 'create_hist_field'
  - fs/dcache: fix bad unlock balance in shrink_dentry_list()
  - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings
  - tty: fix deadlock caused by calling printk() under tty_port->lock
  - media: uvcvideo: Fix double free in error path
  - usb: usbip: fix a refcount leak in stub_probe()
  - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
  - geneve: Fix use-after-free in geneve_find_dev().
  - ARM: versatile: Add missing of_node_put in dcscb_init
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  - Revert "smb: client: fix TCP timers deadlock after rmmod"
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free"
  - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  - tty: goldfish: Fix free_irq() on remove
  - media: uvcvideo: Remove dangling pointers
  - nilfs2: do not force clear folio if buffer is referenced
  - tipc: check attribute length for bearer name
  - tipc: add extack messages for bearer/media failure
  - net_sched: sch_sfq: don't allow 1 packet limit
  - ALSA: oss: Fix PCM OSS buffer allocation overflow
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  - macsec: fix UAF bug for real_dev
  - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  - partitions: mac: fix handling of bogus partition table
  - mm/hugetlb: fix surplus pages in dissolve_free_huge_page()
  - rtc: Fix race when disable/enable UIE in rtc_set_time()
  - rtc: Cleanup for UIE timer/polling emulation support
  - vfio/platform: check the bounds of read/write syscalls
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
  - block: fix error unwinding in blk_register_queue
  - HID: elan: Fix potential double free in elan_input_configured
  - HID: elan: Fix memleak in elan_input_configured
  - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
  - scsi: target: tcmu: Fix possible page UAF
  - drm/plane: Move range check for format_count earlier
  - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug
  - ath9k_htc: fix uninit value bugs
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  - phy: qcom-qmp: fix struct clk leak on probe errors
  - net: sfp: fix memory leak in sfp_probe()
  - um: Fix out-of-bounds read in LDT setup
  - wifi: mac80211: fix use-after-free in chanctx code
  - cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
  - dlm: fix plock invalid read
  - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  - net: mdio: unexport __init-annotated mdio_bus_init()
  - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  - drm/msm/mdp5: Fix global state lock backoff
  - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
  - media: cx25821: Fix the warning when removing the module
  - virtio_console: eliminate anonymous module_init & module_exit
  - nfsd: clear acl_access/acl_default after releasing them
  - can: m_can: m_can_tx_handler(): fix use after free of skb
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  - NFSD: prevent underflow in nfssvc_decode_writeargs()
  - net: bonding: bond3+ adds the aging time of link state table and whether to send alarm to user mode and update the alarm content
  - amd-xgbe: Add device IDs for Hygon 10Gb ethernet controller
  - security: ksimc: optimize and remove redundant code
  - security: ksimc: add path_xxx hooks to protect directories
  - security: ksimc: Add ksimc prefix


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb25
changelog:
  - security: ksimc: add runtime disable feature
  - Revert "lsm: add secondary lsm hook register"
  - Revert "config(x86/arm64): enable CONFIG_SECONDARY_SECURITY option"
  - config: arm64: enable platform device drivers for desktop
  - platform/phytium/power: add module param to set poll mode
  - platform/phytium/power: cancel work when removing driver
  - bus: phytium_lpc: clear phytium lpc irq mask
  - driver: base: fix UAF when driver_attach failed
  - scsi: pm8001: Fix abort all task initialization
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  - can: peak_usb: fix use after free bugs
  - ipv6: mcast: extend RCU protection in igmp6_send()
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - net: nfc: Fix use-after-free in local_cleanup()
  - NFC: NULL out the dev->rfkill to prevent UAF
  - Bluetooth: Fix use after free in hci_send_acl
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: openvswitch: fix leak of nested actions
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ndisc: extend RCU protection in ndisc_send_skb()
  - mpage: fix softlockup in mpage_readahead()
  - arp: use RCU protection in arp_xmit()
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
  - neighbour: use RCU protection in __neigh_notify()
  - neighbour: delete redundant judgment statements
  - qede: confirm skb is allocated before using
  - md/raid1,raid10: don't ignore IO flags
  - mm/khugepaged: fix ->anon_vma race
  - can: dev: can_restart: fix use after free bug
  - can: dev: can_restart(): post buffer from the right context
  - RDMA/hfi1: Prevent panic when SDMA is disabled
  - sfc: fix use after free when disabling sriov
  - sfc: error code if SRIOV cannot be disabled
  - net/smc: fix restoring of fallback changes
  - net/smc: fix closing of fallback SMC sockets
  - net/smc: propagate file from SMC to TCP socket
  - net: fix geneve_opt length integer overflow
  - ndisc: use RCU protection in ndisc_alloc_skb()
  - net: add dev_net_rcu() helper
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
  - udp: Fix memory accounting leak.
  - jfs: add check read-only before truncation in jfs_truncate_nolock()
  - net: atm: fix use after free in lec_send()
  - cgroup: fix kabi for css_set
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration
  - ext4: fix OOB read when checking dotdot dir
  - ext4: optimize __ext4_check_dir_entry()
  - vlan: enforce underlying device type
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
  - loop: loop_set_status_from_info() check before assignment
  - Revert "loop: loop_set_status_from_info() check before assignment"
  - block: fix resource leak in blk_register_queue() error path
  - smb: client: Update IO sizes after reconnection
  - smb: client: Store original IO parameters and prevent zero IO sizes
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks
  - Revert "cifs: Prevent NULL pointer dereference caused by cifs_sb->rsize is 0"
  - ASoC: rt5645: Fix errorenous cleanup order
  - io_uring: prevent opcode speculation
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  - staging: rtl8712: fix uninit-value in r871xu_drv_init()
  - ALSA: jack: Fix mutex call in snd_jack_report()
  - ALSA: jack: Access input_dev under mutex
  - proc: fix use-after-free in proc_get_inode()
  - security: ksimc: fix the setting of port id
  - security: ksimc: add inode integrity cache to file protection
  - security: ksimc: add the ksimc prefix to the kernel log
  - security: ksimc: add inode integrity cache to process whitelist check
  - security: ksimc: add host whitelist check
  - config: enable r8125
  - net: realtek: add support for RTL8125
  - ima: process_measurement() needlessly takes inode_lock() on MAY_READ


author: Hongjian Dai <daihongjian@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb26
changelog:
  - mm/vmscan: don't try to reclaim hwpoison folio
  - memcg: always call cond_resched() after fn()
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - dm-bufio: don't schedule in atomic context
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - net_sched: sch_sfq: move the limit validation
  - net_sched: sch_sfq: use a temporary work area for validating configuration
  - gfs2: Check sb_bsize_shift after reading superblock
  - gfs2: add validation checks for size of superblock
  - fs/jfs: Prevent integer overflow in AG size calculation
  - Revert "pipe performance optimization"
  - drm: smifb: lower print level of ddc
  - drm: smifb: Fix screen flickering for sm750
  - drm: smifb: add missing objs for 770
  - drm: smifb: bump to 1.5.1
  - bpf: Fix WARN() in get_bpf_raw_tp_regs
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: fix kabi broken in struct netns_xfrm
  - xfrm: state: fix out-of-bounds read during lookup
  - net: xfrm: Localize sequence counter per network namespace
  - scsi: core: Clear driver private data when retrying request
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - x86: Enhanced copy capabilities for Hygon processor
  - kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - jbd2: remove wrong sb->s_sequence check
  - ext4: update s_journal_inum if it changes after journal replay
  - ext4: fix off-by-one error in do_split
  - drm/amdkfd: Fix an illegal memory access
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - mISDN: fix possible memory leak in mISDN_register_device()
  - EDAC/amd64: Add support for Hygon family 18h model 8h
  - x86/amd_nb: Add support for Hygon family 18h model 8h
  - iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
  - EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
  - x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h


author: Tan Jun <tanjun@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb27
changelog:
  - timekeeping/ntp: add sysctl to control leap second mode
  - mm/vmscan: fix hwpoisoned THP handling in shrink_page_list
  - pci:vga fix race condition in vga_arb_write
  - vgacon: Add check for vc_origin address range in vgacon_scroll()
  - module: ensure that kobject_put() is safe for module type kobjects
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - scsi: target: Fix WRITE_SAME No Data Buffer crash
  - scsi: libsas: Abort all in-flight requests when device is gone
  - dm crypt: add cond_resched() to dmcrypt_write()
  - KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb28
changelog:
  - platform/phytium/power: add the interrupts type configuration
  - HID: i2c-hid: fix the GPIO configuration issue of the touch panel
  - ext4: add bounds checking in get_max_inline_xattr_value_size()
  - mm: Fix possible deadlock in console_trylock_spinning
  - net: vlan: Fix kabi breakage of struct vlan_info
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
  - md/raid1: Fix stack memory use after return in raid1_reshape
  - vsock/vmci: Clear the vmci transport packet properly when initializing it
  - ACPICA: Refuse to evaluate a method if arguments are missing
  - EDAC/amd64: Fix the calculation of umc base for Hygon family 18h model 4h
  - bcache: fix NULL pointer in cache_set_flush()
  - usb: net: sierra: check for no status endpoint
  - Squashfs: check return result of sb_min_blocksize
  - atm: clip: Fix infinite recursive call of clip_push().
  - ext4: inline: fix len overflow in ext4_prepare_inline_data
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  - ovl: fix general protection fault in security_inode_getattr
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  - nfs: do not unlock when no lock is held
  - nfs: fix the race of lock/unlock and open
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
  - ipc: fix to protect IPCS lookups using RCU
  - smb: client: fix use-after-free in cifs_oplock_break
  - net: ch9200: fix uninitialised access during mii_nway_restart
  - perf: Fix sample vs do_exit()
  - Bluetooth: btrtl: Prevent potential NULL dereference
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
  - Revert "dm-bufio: don't schedule in atomic context"
  - media: cxusb: no longer judge rbuf when the write fails
  - sch_cbq: make cbq_qlen_notify() idempotent
  - net/sched: Always pass notifications when child class becomes empty
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
  - sch_qfq: make qfq_qlen_notify() idempotent
  - sch_hfsc: make hfsc_qlen_notify() idempotent
  - sch_drr: make drr_qlen_notify() idempotent
  - dm raid: fix address sanitizer warning in raid_status
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  - ipvlan: Fix out-of-bounds caused by unclear skb->cb in I2e mode
  - sch_htb: make htb_deactivate() idempotent
  - sch_htb: make htb_qlen_notify() idempotent
  - PCI/GPU: fix hard lockup in vga_arb_release
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  - usbnet: Fix linkwatch use-after-free on disconnect
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  - RDMA/rxe: Fix error unwind in rxe_create_qp()
  - iavf: Fix reset error handling
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - net: tun: Fix memory leaks of napi_get_frags
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - dm raid: fix address sanitizer warning in raid_resume
  - usb: host: ohci-ppc-of: Fix refcount leak bug
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  - md: call __md_stop_writes in md_stop
  - md-raid10: fix KASAN warning
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - PM: hibernate: defer device probing when resuming from hibernation
  - net: tunnels: annotate lockless accesses to dev->needed_headroom
  - net: atlantic: fix aq_vec index out of range error
  - nfs: handle failure of nfs_get_lock_context in unlock path
  - drm/amd/display: clear optc underflow before turn off odm clock
  - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  - crypto: algif_hash - fix double free in hash_accept
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
  - xen/privcmd: Corrected error handling path
  - mtd: maps: Fix refcount leak in ap_flash_init
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing
  - vt: Clear selection before changing the font
  - drivers:md:fix a potential use-after-free bug
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  - do_umount(): add missing barrier before refcount checks in sync case
  - erspan: do not use skb_mac_header() in ndo_start_xmit()
  - kcm: close race conditions on sk_receive_queue
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - net: usb: smsc95xx: Limit packet length to skb->len
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
  - net: usb: smsc75xx: Limit packet length to skb->len
  - smb: client: Reset all search buffer pointers when releasing buffer
  - smb: client: Fix use-after-free in cifs_fill_dirent
  - cifs: fix small mempool leak in SMB2_negotiate()
  - HID: hidraw: fix a problem of memory leak in hidraw_release()
  - HID: hidraw: fix memory leak in hidraw_release()
  - ARM: OMAP2+: display: Fix refcount leak bug
  - tee: fix compiler warning in tee_shm_register()
  - tee: add overflow check in register_shm_helper()
  - tty: vt: initialize unicode screen buffer
  - media: pvrusb2: fix memory leak in pvr_probe
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
  - video: fbdev: amba-clcd: Fix refcount leak bugs
  - PCI: Supplement ACS quirk for more Zhaoxin Root Ports
  - PCI: Add ACS quirk for more Zhaoxin Root Ports
  - ima: prevent concurrent list operations in ima_lsm_update_rules
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - net: sched: Fix use after free in red_enqueue()
  - firmware: arm_scpi: don't error out if devm_device_add_groups fails
  - Revert "PCI: Extend PCI root port device IDs for Zhaoxin platforms"
  - hwmon: scmi: Scale values to target desired HWMON units
  - firmware: arm_scmi: fetch and store sensor scale
  - firmware: arm_scmi: update rate_discrete in clock_describe_rates_get
  - firmware: arm_scmi: fix bitfield definitions for SENSOR_DESC attributes
  - arm64: cpuinfo: refactor model name


author: Luo Qiu <luoqiu@kylinsec.com.cn> - 4.19.90-2408.1.0.0288.kb29
changelog:
  - security/ksimc: optimize locking for policy usage
  - security/ksimc: add inode free handling
  - security/ksimc: add network access control for processes
  - config: x86: enable DRM_HISI_HIBMC
  - config: enable RTC_DRV_SD3078
  - rtc: sd3078: quiet maybe-unused variable warning
  - rtc: sd3078: fix platform_no_drv_owner.cocci warnings
  - rtc: sd3078: make symbol 'sd3078_driver' static
  - rtc: sd3078: new driver.
  - ftrace: Also allocate and copy hash for reading of filter files
  - x86/smp: ignore reboot IPI when stopping_cpu contains value
  - wifi: mac80211: reject TDLS operations when station is not associated
  - use uniform permission checks for all mount propagation changes
  - do_change_type(): refuse to operate on unmounted/not ours mounts
  - blk-cgroup: Use cond_resched() when destroy blkgs
  - NFSv4: Fail mounts if the lease setup times out
  - ipv6: reject malicious packets in ipv6_gso_segment()
  - vsock: Do not allow binding to VMADDR_PORT_ANY
  - net/packet: fix a race in packet_set_ring() and packet_notifier()
  - iwlwifi: Add missing check for alloc_ordered_workqueue
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  - net: bridge: fix soft lockup in br_multicast_query_expired()
  - mm/smaps: fix race between smaps_hugetlb_range and migration
  - tracing: Limit access to parser->buffer when trace_get_user failed
  - tracing: Remove unneeded goto out logic
  - mm/dpool: mark dpool hugetlb page as dirty in free_huge_page()
  - net: atm: fix /proc/net/atm/lec handling
  - net: atm: add lec_mutex
  - HID: core: do not bypass hid_hw_raw_request
  - drm/sched: Increment job count before swapping tail spsc queue
  - EDAC/amd64: Do not warn when removing instances
  - sched: Fix sched tunable parameter range overflow
  - Revert "scsi: hisi_sas: fix a issue related to timer of internal IO and SMP IO"
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
  - perf/zhaoxin/uncore: Enhance uncore support and fix related bugs
  - Revert "x86/perf/zhaoxin: Add stepping check for ZXC"
  - Revert "x86/perf: Add uncore performance events support for Zhaoxin CPU"
  - Revert "perf/x86/zhaoxin/uncore: Add support for processors with irregular core numbers"
  - Revert "perf/x86/zhaoxin/uncore: Remove the uncore support for special processor"
  - net: stmmac: power up/down serdes in stmmac_open/release
  - USB: core: Disable remote wakeup for freeze/quiesce
  - USB: hcd-pci: Fully suspend across freeze/thaw cycle
  - usb: hub: avoid warm port reset during USB3 disconnect
  - PCI: pciehp: Prevent deadlock on disconnect
  - ACPICA: Drop port I/O validation for some regions
  - USB: Fix ehci infinite suspend-resume loop issue in zhaoxin
  - Revert "EHCI: Clear wakeup signal locked in S0 state when device plug in"
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
  - Revert "xhci: Adjust the UHCI Controllers bit value"
  - Revert "Fix mouse enumeration issue after wakeup from s4"


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-10
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: xiechengliang<xiechengliang1@huawei.com> - 1:1.31.1-13
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC: fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386


author: liuxu <liuxu156@huawei.com> - 1:1.31.1-21
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: xinghe <xinghe2@h-partners.com> - 1.16.1-7
changelog:
  - Type:cves
  - CVE:CVE-2023-31130 CVE-2023-31124 CVE-2023-31147
  - SUG:NA
  - DESC:fix CVE-2023-31130 CVE-2023-31124 CVE-2023-31147


author: chixinze <xmdxcxz@gmail.com> - 1:12.2.8-13
changelog:
  - fix CVE-2020-27781
  - ceph-volume-client: allow atomic updates for RADOS objects
  - qa: make test_volume_client.py py3 compatible


author: Li Qiang <liqiang64@huawei.com> - 1:12.2.8-16
changelog:
  - Synchronize the performance optimization of the pick_a_shard
  - function in the upstream community.


author: xiewenhao <xiewenhao@kylinos.com.cn> - 2:12.2.8-22.kb1
changelog:
  - KYOS-F: change BuildRequire from openEuler-rpm-config to kylin-rpm-config
  - KYBD: rebuidl for KY3.4-SA(#56930)


author: xiongjinzhou <xiongjinzhou@kylinos.com.cn>- 2:12.2.8-23.kb2
changelog:
  - rebuild for KY3.4-SA
  - KYOS-B: Modify Buildrequire from openEuler-rpm-config to kylin-rpm-config(#47770)


author: haowenchao <haowenchao@huawei.com> - 6.10-3
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-CVE-2021-20208.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1001-cifs.upcall-update-the-cap-bounding-set-only-when-CA.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/1002-mount.cifs-update-the-cap-bounding-set-only-when-CAP.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-CVE-2022-27239.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-CVE-2022-29869.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. check task list to avoid unnecessary cleanup.
         2. fix dead loop
         3. cleanup dangling shim by brand new context
         4. fix potential panic for task in unknown state


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-201
changelog:
  - Type:bugfix                                          
  - ID:NA                                                   
  - SUG:NA
  - DESC:reduce permissions for bundle dir to fix CVE-2021-41103


author: xiadanni<xiadanni1@huawei.com> - 1.2.0-202
changelog:
  - Type:bugfix
  - ID:NA 
  - SUG:NA
  - DESC:Use fs.RootPath when mounting volumes for bundle dir to fix CVE-2022-23648


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: lijian<lijian2@kylinos.cn> - 1:1.1.0-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang cvefix: CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: Jianmin <jianmin@iscas.ac.cn> - 1:1.1.0-13
changelog:
  - Type:bugfix
  - CVE:CVE-2023-39325 CVE-2023-44487 CVE-2025-27144
  - SUG:NA
  - DESC: fix CVE-2023-39325 CVE-2023-44487 CVE-2025-27144


author: jiangchuangang<jiangchuangang@huawei.com> - 8.32-9
changelog:
  - sync patches from community
  - add backport-pr-fix-infinite-loop-when-double-spacing.patch
    backport-wc-ensure-we-update-file-offset.patch


author: jiangchuangang <jiangchuangang@huawei.com> - 8.32-10
changelog:
  - sync patches from community
  - add backport-who-fix-only-theoretical-overflow.patch
        backport-tac-handle-short-reads-on-input.patch
        backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
        backport-who-don-t-crash-if-clock-gyrates.patch
        backport-doc-od-strings-clarify-operation.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 8.32-12
changelog:
  - sync patches from community
  - add backport-coverity-utimens.patch
        backport-fuse-portal.patch
        backport-expr-unmatched-par.patch


author: wangjiang <app@cameyan.com> - 8.32-14
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: Funda Wang <fundawang@yeah.net> - 8.32-17
changelog:
  - fix upstream bug#72445: Fill the ISAAC buffer instead of storing at most
    BYTES_BOUND bytes into it.


author: xiewenhao <xiewenhao@kylinos.com.cn> - 7.3.0-2020033101.59.kb1
changelog:
  - KYOS-F: add safe compilation options
  - KYOS-F: delete rpath
  - KYOS-F: add "global build_libquadmath 0" to Fix build error for target noarch(#73179)


author: yanglongkang <yanglongkang@huawei.com> - 2.3.3-4
changelog:
  - add buildrequire gcc
    add make check
    backport upstream patches to solve several problems -epoch2


author: chenyanpanHW <chenyanpan@huawei.com> - 2.3.3-5
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-cryptsetup-add-system-library-paths.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-fix-compat-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Check-segment-gaps-regardless-of-heap-space.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Fix-posible-buffer-overflows-in-LUKS-conversion.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-Fix-a-memleak-in-blockwise-test.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-CVE-2021-4122.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-4
changelog:
  - Type:cves
  - ID:CVE-2020-27840 CVE-2021-20277 CVE-2021-20254
  - SUG:NA
  - DESC:fix CVE-2020-27840 CVE-2021-20277 CVE-2021-20254


author: zengwefeng <zwfeng@huawei.com> - 4.11.12-5
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-7
changelog:
  - Type:cves
  - ID:CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25717,CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: gaihuiying <gaihuiying1@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2021-43566
  - SUG:NA
  - DESC:backport patches to fix CVE-2021-43566:
         s3/lib: add parent_smb_fname function
         smbd: use parent_smb_fname in check_parent_access
         smbd: use parent_smb_fname in inherit_new_acl
         s3/VFS: Add SMB_VFS_MKDIRAT
         vfs_full_audit: pass conn to smb_fname_str_do_log
         s3/VFS: change connection_struct cwd_fname to cwd_fsp
         s3/smbd: Change mkdir_internal to call SMB_VFS_MKDIRAT
         smbd: use parent_smb_fname in mkdir_internal
         fix CVE-2021-43566


author: chxssg <chxssg@qq.com> - 4.11.12-6
changelog:
  - Type:cves
  - ID:CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 
  - SUG:NA
  - DESC:fix CVE-2020-14318 CVE-2020-14323 CVE-2020-14383


author: xihaochen <xihaochen@huawei.com> - 4.11.12-8
changelog:
  - Type:cves
  - ID:CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738
  - SUG:NA
  - DESC:fix CVE-2020-25718,CVE-2020-25719,CVE-2020-25721,CVE-2020-25722,CVE-2016-2124,CVE-2021-3738


author: xinghe <xinghe@h-partners.com> - 4.11.12-13
changelog:
  - Type:cves
  - CVE:CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742
  - SUG:NA
  - DESC:fix CVE-2022-32746 CVE-2022-32744 CVE-2022-2031 CVE-2022-32742


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: xiewenhao <xiewenhao@kylinos.com.cn> 2.2.13-12.kb1
changelog:
  - KYOS-F: change spec from generic-hardened-ld to kylin-hardened-ld
  - KYBD： rebuild for KY3.4-SA(#56925)


author: Funda Wang <fundawang@yeah.net> - 1:2.2.13-22
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: gaoxingwang<gaoxingwang@huawei.com> - 7.71.1-12
changelog:
  - Type:CVE
  - CVE:CVE-2021-22922 CVE-2021-22923
  - SUG:NA
  - DESC:disable metalink to fix CVE-2021-22922 and CVE-2021-22923


author: gaihuiying <eaglegai@163.com> - 7.71.1-13
changelog:
  - Type:cves
  - CVE:CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776
  - SUG:NA
  - DESC:fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27775 CVE-2022-27776


author: gaihuiying <eaglegai@163.com> - 7.71.1-15
changelog:
  - Type:cves
  - CVE:CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208
  - SUG:NA
  - DESC:fix CVE-2022-32205 CVE-2022-32206 CVE-2022-32207 CVE-2022-32208


author: yanglu <yanglu72@huawei.com> - 7.71.1-11
changelog:
  - Type:CVE
  - CVE:CVE-2021-22945 CVE-2021-22946 CVE-2021-22947
  - SUG:NA
  - DESC:fix CVE-2021-22945 CVE-2021-22946 CVE-2021-22947


author: gaihuiying <eaglegai@163.com> - 7.71.1-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix build error when add --disable-http-auth configure option


author: xingwei <xingwei14@h-partners.com> - 7.71.1-23
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-34
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dynbuf: provide curlx_ names for reuse by the curl tool
         curl: use curlx_dynbuf for realloc when loading config files
         curl: make file2string use dynbuf
         paramhlp: fix CRLF-stripping files with "-d @file"
         libssh2: set length to 0 if strdup failed
         openldap: create ldap URLs correctly for IPv6 addresses
         multi: avoid memory-leak risk
         tool_cb_rea: limit rate unpause for -T . uploads
         tool_cfgable: free {proxy_}cipher13_list on exit


author: zhouyihang <zhouyihang3@h-partners.com> - 7.71.1-38
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:multi: check that the multi handle is valid in curl_multi_assign


author: xingwei <xingwei14@h-partners.com> - 7.71.1-41
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:altsvc: avoid integer overflow in expire calculation
         test391: verify --path-as-is with redirect
         urlapi: fix redirect to a new fragment or query (only)


author: xinghe <xinghe2@h-partners.com> - 7.71.1-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:curl_path: bring back support for SFTP path ending in /~
         curl_path: make SFTP handle a path like /~ properly


author: liyanan <liyanan32@huawei.com> - 2.1.27-13
changelog:
  - Split cyrus-sasl-ldap cyrus-sasl-gs2 cyrus-sasl-scram cyrus-sasl-gssapi
    cyrus-sasl-md5 cyrus-sasl-ntlm cyrus-sasl-plain sub-package


author: zhoushuiqing <zhoushuiqing2@huawei.com> - 3.6.2-5
changelog:
  - Type:CVE
  - CVE:CVE-2005-1849,CVE-2016-9840,CVE-2016-9841,CVE-2016-9843,CVE-2018-25032,CVE-2022-37434
  - SUG:NA
  - DESC:backport patchs fix zlib cves: CVE-2005-1849 CVE-2016-9840
         CVE-2016-9841 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434
         backport-fix-CVE-2005-1849.patch
         backport-fix-CVE-2016-9840.patch
         backport-fix-CVE-2016-9841.patch
         backport-fix-CVE-2016-9843.patch
         backport-fix-CVE-2018-25032.patch
         backport-fix-CVE-2022-37434-1.patch
         backport-fix-CVE-2022-37434-2.patch


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-10
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-8
changelog:
  - Type:cves
  - ID:CVE-2021-25214, CVE-2021-25215, CVE-2021-25219, CVE-2021-25220
  - SUG:restart
  - DESC: Fix CVE-2021-25214 CVE-2021-25215 CVE-2021-25219 CVE-2021-25220


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.2-9
changelog:
  - Type:cves
  - ID:CVE-2022-2928, CVE-2022-2929
  - SUG:restart
  - DESC: Fix CVE-2022-2928 and CVE-2022-2929


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix errors when use "yum module remove --all per:common" command
         fix test test_mode_tty failed


author: gaihuiying <gaihuiying1@huawei.com> - 4.2.23-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:remove recommends rpm-plugins-systemd-inhibit
         backport community patches and fix CVE-2021-3445
         delete duplicate python3-libdnf dependency


author: caoyuanji <caoyuanji@kylinos.com.cn>
changelog:
  - KYOS-B: KY3.4-5 patch migration (#48759)
  - KYOS-F: Add-fastestmirror-True-in-the-etc-dnf-dnf.conf-file
  - KYOS-F: The default execution time of dnf makecache is changed to once a day.(Related: #42697)


author: caoyuanji<caoyuanji@kylinos.com.cn> - 4.2.23-6.kb4
changelog:
  - KYOS-F: Fix the problem that the package list is incorrect when centos7 is upgraded to 3.4-5(#60382)


author: liulong <liulong20@huawei.com> - 2.82-4
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 
  CVE-2020-25687


author: zengwefeng <zwfeng@huawei.com> - 2.82-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Add missing check for NULL return from allocate_rfd
         Fix DNS reply when asking for DNSSEC and a validated


author: gaihuiying <gaihuiying1@huawei.com> - 2.82-8
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC: Handle caching with EDNS options better
          Fix to 75e2f0aec33e58ef5b8d4d107d821c215a52827c
          Fix for 12af2b171de0d678d98583e2190789e544440e02
          Fix problem with DNS retries in 2.83 2.84 version
          Simplify preceding fix
          Update to new struct frec fields in conntrack code
          Use the values of min port and max port in TCP connection
          Correct occasional bind dynamic synchronization
          Move fd into frec_src fixes 15b60ddf935a531269bb8c68
          fix CVE-2021-3448


author: renmingshuai <renmingshuai@huawei.com> - 2.82-14
changelog:
  - Type:bugfix
  - Id:
  - SUG:NA
  - DESC:Reduce code duplication, reuse existing functions
         Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: jingrui<jingrui@huawei.com> - 18.09.0-105
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix include
    1. fix image cleanup failed.
    2. cleanup load tmp files.
    3. kill residual container process.
    4. resume suspend dm device.
    5. dont kill containerd during dockerd starting.
    6. handle exit event for restore failed container.
    7. wait io with timeout when start failed.
    8. support hostname mirror registry.
    9. mask unused proc files.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. fix execCommands leak in health-check.
         2. check containerd pid before kill it.


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-201
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)


author: xiadanni<xiadanni1@huawei.com> - 18.09.0-202
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:prevent an invalid image from crashing docker daemon(CVE-2021-21285)


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-229
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change log level when containerd return "container not found" err


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-230
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix container exited after docker restart when processEvent hang


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-231
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "endpoint with name container_xx already exists in network none" error


author: chenjiankun <chenjiankun1@huawei.com> - 18.09.0-240
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Add an ExitPid field for State struct to record exit process id


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-253
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-256
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-209
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Make sure signalAllProcesses is invoked in the function of destroy when container shares pid namespace


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: wuchangsheng <wuchangsheng2@huawei.com> - 19.11-15
changelog:
  - backport pathes from community
  - net/softnic fix memory leak as profile is freed
  - net/virtio fix interrupt handle leak
  - vhost fix crash on reconnect
  - net/virtio report maximum MTU in device info
  - bus/dpaa fix freeing in FMAN interface destructor
  - distributor fix 128 bit write alignment


author: chendingjian <chendingjian@kylinos.com.cn> - 050-5.kb5
changelog:
  - KYOS-B: refactor-dracut-simplify-grub-rescue-system-title.
  - KYOS-F: change-gob-runing-time-for-device-live-rw.
  - KYOS-F: fix-resume-function-bug-in-ky3.4-4 
  - Related: #48640


author: wuguanghao<wuguanghao3@huawei.com> - 1.45.6-4
changelog:
  - DESC: delete -Sgit from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-e2fsprogs-set-hugefile-from-4T-to-1T-in-hugefile-tes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-e2fsck-fix-off-by-one-check-when-validating-depth-of.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-mke2fs-fix-up-check-for-hardlinks-always-false-if-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-add-device-check-in-ismount-process.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libss-add-newer-libreadline.so.8-to-dlopen-path.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-e2fsck-fix-indexed-dir-rehash-failure-with-metadata_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-libext2fs-retry-reading-superblock-on-open-when-chec.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-libext2fs-fix-potential-buffer-overrun-in-__get_dire.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-tune2fs-reset-MMP-state-on-error-exit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-e2fsck-use-size_t-instead-of-int-in-string_copy.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-libext2fs-fix-incorrect-negative-error-return-in-uni.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-debugfs-fix-double-free-in-realloc-error-path-in-rea.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0013-tune2fs-fix-resource-leak-in-handle_quota_options.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0014-libext2fs-fix-UBSAN-warning-in-ext2fs_mmp_new_seq.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0015-libext2fs-fix-segault-when-setting-an-xattr-with-an-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0016-mke2fs-fix-a-importing-a-directory-with-an-ACL-and-i.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0017-mke2fs-fix-resource-leak-on-error-path-when-creating.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0018-libext2fs-fix-incorrect-error-code-return-in-ext2fs_.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0019-debugfs-fix-memory-allocation-failures-when-parsing-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0020-debugfs-fix-logdump-on-file-systems-with-block-sizes.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0021-libext2fs-fix-crash-when-ext2fs_mmp_stop-is-called-b.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0022-debugfs-fix-dump_metadata_block-for-block-sizes-8192.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0023-debugfs-fix-memory-leak-problem-in-read_list.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0024-debugfs-fix-rdump-and-ls-to-handle-uids-and-gids-655.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0025-e2image-fix-overflow-in-l2-table-processing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0026-e2fsck-fix-last-mount-write-time-when-e2fsck-is-forc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0027-profile_create_node-set-magic-before-strdup-name-to-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0028-tdb_transaction_recover-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0029-zap_sector-fix-memory-leak.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0030-misc-fix-potential-segmentation-fault-problem-in-sca.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0031-ext2ed-fix-potential-NULL-pointer-dereference-in-dup.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0032-ss_add_info_dir-fix-error-handling-when-memory-alloc.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0033-ss_create_invocation-fix-error-handling-when-memory-.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0034-ss_create_invocation-fix-potential-unititalized-refe.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0035-libext2fs-fix-unexpected-NULL-variable.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0036-libsupport-fix-potental-NULL-pointer-dereferences-in.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0037-libext2fs-fix-coverity-nits-in-tdb.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0038-e2fsck-exit-journal-recovery-when-find-EIO-ENOMEM-er.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0039-e2fsck-exit-journal-recovery-when-jounral-superblock.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0040-e2fsck-add-env-param-E2FS_UNRELIABLE_IO-to-fi.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0041-e2fsck-do-not-clean-up-file-acl-if-the-inode-is-trun.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0042-e2fsck-handle-level-is-overflow-in-ext2fs_extent_get.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0043-libext2fs-add-sanity-check-to-extent-manipulation.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequire git


author: Zhiqiang Liu <liuzhiqiang26@huawei.com> - 1.45.6-8
changelog:
  - DESC: fix three issues:
    - e2fsck: exit journal recovery when find EIO, ENOMEM errors
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZUT?from=project-issue
    - e2fsck: exit journal recovery when jounral superblock fails to update
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4S0SD?from=project-issue
    - e2fsck: add env param E2FS_UNRELIABLE_IO to fix unreliable io case
      Fix issue: https://gitee.com/src-openeuler/e2fsprogs/issues/I4RZVX?from=project-issue


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: xinghe <xinghe2@h-partners.com> - 2.0.11-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: yexiao<yexiao7@huawei.com> - 202002-17
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202002-19
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: Jiabo Feng<fengjiabo1@huawei.com> - 202002-21
changelog:
  - update release. commit(2723c0159f0f84e2169b124dca9f4eb0dc6863f9) has been merged into commit(a8c3711f01ae9a152f0e8cede2547b4c54712400)


author: panxiaohe <panxh.life@foxmail.com> - 0.185-10
changelog:
  - Get instance correctly for eu-ar -N option
  - Use make macros
  - Use upstream patch for no stdin flag


author: fuanan <fuanan3@h-partners.com> - 0.185-11
changelog:
  - Fix "/usr/lib64/libdebuginfod.so.1" not found when uninstall elfutils-debuginfod-client-devel
  - Fix Obsoletes in spec


author: hubin <hubin73@huawei.com> - 0.185-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:change permission to 750 and move debug tools into extra package


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j8 V=1 VERBOSE=1 instead of make for building bootstrap


author: yangcheng <yangcheng87@huawei.com> - 1:27.1-6
changelog:
  - fixed the upgrade error caused by the info file in the emacs-common software package being repackaged


author: wangkerong <wangkerong@huawei.com> - 1:27.1-5
changelog:
  - Type: improvement
  - DESC: use /usr/bin/make -O -j4 V=1 VERBOSE=1 instead of make for building bootstrap


author: caoyuanji <caoyuanji@kylinos.com.cn> - 1.24.1-1.kb3
changelog:
  - rebuild for KY3.4-5-mate-desktop-1.22
  - The ImageMagick library has been upgraded and needs to be recompiled.(Related: #53589)


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-6
changelog:
  - Type:CVE
  - CVE:CVE-2022-3064
  - SUG:NA
  - DESC: backport fix CVE-2022-3064 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-7
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723
  - SUG:NA
  - DESC: backport fix CVE-2022-41723 for openEuler-20.03-LTS-SP4


author: lvxiangcong<lvxiangcong@kylinos.cn> - 3.4.14-9
changelog:
  - Type:CVE
  - CVE:CVE-2023-32082 CVE-2021-28235
  - SUG:NA
  - DESC: backport fix CVE-2023-32082 and CVE-2021-28235


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-11
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2022-1962 CVE-2022-41725 CVE-2022-2880
       CVE-2024-24785 CVE-2023-45290 CVE-2022-32148 CVE-2023-29406 CVE-2023-39326
       CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: dillon chen <dillon.chen@gmail.com> - 2.4.5-5
changelog:
  - CVE-2020-18651,CVE-2020-18652
  - CVE-2021-36048,CVE-2021-39847,CVE-2021-42530,CVE-2021-36046,CVE-2021-36055
  - CVE-2021-40716,CVE-2018-12648,CVE-2021-36054,CVE-2021-36047,CVE-2021-36052
  - CVE-2021-36058,CVE-2021-36045,CVE-2021-42531,CVE-2021-36064,CVE-2021-42529
  - CVE-2021-42528,CVE-2021-36050,CVE-2021-40732
  - CVE-2021-36056,CVE-2021-42532,CVE-2021-36053,CVE-2021-36051


author: wangkerong <wangkerong@huawei.com> - 0.26-26
changelog:
  - Type:cves
  - ID:CVE-2021-29463 CVE-2021-29464 CVE-2021-29473
  - SUG:NA
  - DESC:fix CVE-2021-29463,CVE-2021-29464,CVE-2021-29473


author: wangjie <wangjie375@huawei.com> - 2.2.9-4
changelog:
  - Type:CVE
  - ID:CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827
  - SUG:NA
  - DESC:fix CVE-2021-45960 CVE-2021-46143
         CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: yangzhuangzhuang <yangzhuangzhuang1@h-partners.com> - 2.2.9-6
changelog:
  - Type:CVE
  - ID:CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315
  - SUG:NA
  - DESC:Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: happyworker <208suo@208suo.com> - 4.2.4-23
changelog:
  - Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043


author: happyworker <208suo@208suo.com> - 4.2.4-24
changelog:
  - Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919


author: lvfei <lvfei@kylinos.cn> - 79.0-12
changelog:
  - Fix for expat CVE-2021-45960 CVE-2021-46143
    CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: wangyucheng<wangyucheng@kylinsec.com.cn> - 79.0-16.kb2
changelog:
  - KYOS-B: sync patch from KY3.4-5: Change the official website address of the first startup.(Related: #49674)
  - KYOS-T: sync patch from KY3.4-5: Change the logo of openeuler to KylinSec.(Related: #39662)
  - KYOS-B: sync patch from KY3.4-5: Solve the problem that there are two firefox icons in the taskbar.(Related: #39548)
  - KYOS-B: sync patch from KY3.4-5: KY3.4-5 patch migration (#48706)
  - KYOS-F: sync patch from KY3.4-5: Modify the new page to KylinSec
  - KYOS-B: sync patch from KY3.4-5: This version fixes the problem that the video web page cannot be opened.(Related: #46503)
  - KYOS-T: sync patch from KY3.4-5: New translation of open the profile manager.(Related: #47784)


author: xiewenhao <xiewenhao@kylinos.com.cn> - 79.0-21.kb1
changelog:
  - KYOS-F: patch migration(#38532)
  - Rename from generic-hardened-cc1 to kylin-hardened-cc1
  - Modify the main page
  - Change the logo from openeuler to KylinSec
  - Change the official website address of the first startup


author: xiejieping <xiejieping01@kylinsec.com.cn> - 79.0-30.kb1
changelog:
  - KYOS-F: patch migration(#46698)
  - Rename from generic-hardened-cc1 to kylin-hardened-cc1
  - Modify the main page
  - Change the logo from openeuler to KylinSec
  - Change the official website address of the first startup


author: liuqinfei <liuqinfei@kylinsec.com.cn> - 79.0-31.kb1
changelog:
  - KYOS-F: patch migration(#49045)
  - Rename from generic-hardened-cc1 to kylin-hardened-cc1
  - Modify the main page
  - Change the logo from openeuler to KylinSec
  - Change the official website address of the first startup


author: liuqinfei <liuqinfei@kylinsec.com.cn> - 79.0-32.kb2
changelog:
  - KYOS-F: patch migration(#53591)
  - Rename from generic-hardened-cc1 to kylin-hardened-cc1
  - Modify the main page
  - Change the logo from openeuler to KylinSec
  - Change the official website address of the first startup


author: wangxiao <wangxiao65@huawei.com> - 79.0-4
changelog:
  - Fix CVE-2020-15664 CVE-2020-15665 CVE-2020-15666 CVE-2020-15667
    CVE-2020-15668 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678


author: wangxiao <wangxiao65@huawei.com> - 79.0-5
changelog:
  - Fix CVE-2020-15969 CVE-2020-15999 CVE-2020-16012 CVE-2020-26951
    CVE-2020-26953 CVE-2020-26956 CVE-2020-26957 CVE-2020-26958
    CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26963
    CVE-2020-26965 CVE-2020-25966 CVE-2020-26967


author: xiewenhao <xiewenhao@kylinos.com.cn> - 79.0-8.kb1
changelog:
  - KYOS-F: Rename from generic-hardened-cc1 to kylin-hardened-cc1
  - KYOS-F: Change the logo from openEuler to KylinSec
  - KYOS-F: Change the official website address of the first startup
  - KYBD: Rebuild for KY3.4-SA


author: zhouyihang <zhouyihang3@h-partners.com> - 0.6.6-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: wangkai <13474090681@163.com> - 3.18.0-7
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.2.5-3
changelog:
  - bug fix: add create time attribute of workflow, fix assign model bug of aops-check default mode
  - update agent get host info interface and some test cases
  - fix gala-ragdoll return code issue
  - web fine-tuning for workflow and agent info.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-51
changelog:
  - cleancode: refactor sys_now and lwip_ioctl
  - add sem post when update event
  - cleancode: refactor lwipgz_hlist.h
  - fix EPOLLIN event dropd
  - cleancode: refactor lwipgz_list.h
  - cleancode: refactor posix_api
  - fix some error of NULL pointer
  - cleancode: refactor posix type and get_socket
  - cleancode: refactor lwipsock.h


author: yangchen555 <yangchen145@huawei.com> - 1.0.2-52
changelog:
  - fix redis coredump when hugetlbs pagesize is 1024M
  - vitio_user: modify mbuf index for bond4
  - Check the return of lwip_init
  - support kernel connect
  - POSIX: fix select timeout disable and build failed in openEuler 2003


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-53
changelog:
  - virtio_user: modify mbuf index for bond4
  - fix issue: create virtio_user based on bond4 main network card
  - virtio: fix dfx error with multiple cpus
  - dfx: optimize gazellectl -x for bond


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-54
changelog:
  - refector fill udp sendring
  - virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
  - virtio_user: add vlan info for kernerl packets when vlan switch is on
  - WRAP:fix double connect lead posix api disable


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-55
changelog:
  - virtio: mod virtio_user_name when multi process is on
  - WRAP: fix bind log error
  - WRAP:fix ltran mode did not bind kernel while open kni
  - virtio_user: The program establishes a network connection when network card status is up
  - fix redis coredump ctrl-c during the pressure test


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-59
changelog:
  - epoll: fix wild pointer detected by cooddy
  - tools: fix sync patch script date wrong and update the way get patchnum
  - cfg: modify maximum tcp_conn_count to 2w
  - fix mbuf_total calculation error


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-64
changelog:
  - cleancode: declare different cfg_params types
  - cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
  - cleancode: move some API from stack to rpc and rtw
  - cleancode: refactor rtc_api rtw_api and dummy_api


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-66
changelog:
  - af_xdp: set rlimit unlimit when gazelle init
  - add interrupt mode support
  - add pingpong dfx support


author: yinbin6 <jiangheng14@huawei.com> - 1.0.2-67
changelog:
  - bugfix: fix gazelle init failed while setup by non-root user
  - rpc: fix rpc_sync_call spinlock block when msg be recalled
  - rtw: fix send length exceeding send_ring_size
  - fix stack null when register interrupt


author: yinbin <yinbin8@huawei.com> - 1.0.2-77
changelog:
  - openGauss: support kernel connnect
  - xdp: support stack bind numa
  - CFG: fix xdp iface check error
  - fix build error in 2003SP4
  - cfg: show dpdk args after dpdk_adjust_args
  - fix free null pointer when no matching device is found
  - update test/unitest/ltran/ltran_param_test.c.
  - Fix the wrong spelling description in the notes and logs
  - LWIP: adjust position of shutdown in callback of connect
  - fix socket of control thread is overwirtten due to another primary process start


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: panxiaohe <panxiaohe@huawei.com> - 2.27.0-4
changelog:
  - Fix CVE-2021-29468
  - Add gcc and gettext to BuildRequires
    - necessary for building and msgfmt command


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.27.0-25
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
  - SUG:NA 
  - DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.27.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolved the problem that a failure message is displayed when the git-daemon package is uninstalled


author: cuiping <cuiping@kylinsec.com.cn> - 2.66.8-19.kb2
changelog:
  - add safe compilation options and dbus-daemon as a build requirement, and also set the standard environment.


author: chengyechun <chengyechun1@huawei.com> - 2.28-99
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.28-101
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: Liu Dalin <liudalin@kylinsec.com.cn> - 2.28-101.kb2
changelog:
  - x86: Rename get_common_indeces to get_common_indices
  - x86: Add CPU Vendor ID detection support for Zhaoxin processors
  - x86: Add Hygon Dhyana support


author: Feifei Wang <wangfeifei@hygon.cn> - 2.28-102
changelog:
  - x86: Reversing calculation of __x86_shared_non_temporal_threshold
    x86: Optimizing memcpy for AMD Zen architecture
    x86: Add Hygon Dhyana support
    https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=d3c57027470b
    https://sourceware.org/git/?p=glibc.git;a=commit;h=59803e81f96b479c17f583b31eac44b57591a1bf
    https://sourceware.org/git/?p=glibc.git;a=commit;h=ade8b817fead73b302d08c88cd44ea2ea56793d4


author: xiewenhao <xiewenhao@kylinos.com.cn> - 2.28-104.kb1
changelog:
  - Add safe compilation options
  - add GB18030-2022 charmap
  - x86: Rename get_common_indeces to get_common_indices
  - x86: Add CPU Vendor ID detection support for Zhaoxin processors(#74879)


author: liumingran <liumr1@chinatelecom.cn> 2.28-108
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fnmatch: Fix memory leak problem by backport from glibc 2.35
    https://sourceware.org/git/?p=glibc.git;a=commit;h=252864544afa45feb28f8ef505056f17eccd3073
    https://sourceware.org/git/?p=glibc.git;a=commit;h=d7ee6bd8c217a4deb756739039fa9c165d26ec43
    https://sourceware.org/git/?p=glibc.git;a=commit;h=a79328c745219dcb395070cdcd3be065a8347f24
    https://sourceware.org/git/?p=glibc.git;a=commit;h=4e32c8f5682004d0571395fe9fa1bc1b73b40f4c


author: xiewenhao <xiewenhao@kylinos.com.cn> - 2.28-112.kb1
changelog:
  - KYOS-F: Add safe compilation options
  - add GB18030-2022 charmap
  - x86: Rename get_common_indeces to get_common_indices


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1.15.7-13.kb2
changelog:
  - KYOS-B: Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch(#52392 #53373)


author: hanchao<hanchao47@huawei.com> - 1.15.7-14
changelog:
  - fix CVE-2022-32148,CVE-2022-1962,CVE-2022-1705,CVE-2022-30633,
    CVE-2022-30635,CVE-2022-30632,CVE-2022-28131,
    CVE-2022-30631,CVE-2022-30629,CVE-2022-30634


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1.15.7-16.kb1
changelog:
  - KYOS-F： Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch
  - KYBD： rebuild for KY3.4-SA


author: hanchao<hanchao47@huawei.com> - 1.15.7-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: golang: modify the golang.spec to remove unnecessary files
  	from golang-help package


author: hanchao<hanchao47@huawei.com> - 1.15.7-20
changelog:
  - Type:CVE
  - CVE:CVE-2022-41715,CVE-2022-2880,CVE-2022-2879
  - SUG:NA
  - DESC:fix CVE-2022-41715,CVE-2022-2880,CVE-2022-2879


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1.15.7-21.kb1
changelog:
  - KYOS-F: Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch(#62205)


author: hanchao <hanchao47@huawei.com> - 1.15.7-24
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC:fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.15.7-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC:fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.15.7-27
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.15.7-39
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1.15.7-43.kb1
changelog:
  - KYOS-B: Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch (#36078)


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1.15.7-45.kb1
changelog:
  - KYOS-F: Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch(#42377)


author: wujichao <wujichao1@huawei.com> - 1.15.7-50
changelog:
  - Type:CVE
  - CVE:CVE-2024-45336
  - SUG:NA
  - DESC:remove 0001-drop-hard-code-cert.patch and modify CVE-2024-45336


author: cuiping <cuiping@kylinos.com.cn> - 1.15.7-53.kb1
changelog:
  - KYOS-F: delete help package arch(#79121)
  - KYOS-F: Change dependency from openEuler-rpm-config to kylin-rpm-config and delete help package arch(#42377)


author: chenjiankun <chenjiankun1@huawei.com> - 1.15.7-5
changelog:
  - fix CVE-2021-33195,CVE-2021-33196,CVE-2021-33197,CVE-2021-33198,CVE-2021-34558,CVE-2021-29923,CVE-2021-38297,CVE-2021-36221


author: xiewenhao <xiewenhao@kylinos.com.cn> - 7.5.15-1.kb2
changelog:
  - KYOS-F: change spec file generic-hardened-ld to kylin-hardened-ld(#56314)
  - KYBD: rebuild for KY3.4-SA


author: ouyangminxiang <ouyangminxiang@kylinos.com.cn> - 7.5.15-3.kb2
changelog:
  - KYOS-F: change spec from generic-hardened-ld to kylin-hardened-ld
  - KYBD: rebuild for KY3.4-SA(#56927)


author: gaihuiying <eaglegai@163.com> - 1.31.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix adjust to abseil-cpp 20210324,since it dont provides absl_dynamic_annotations library anymore


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the patches that upstream community released on
         March 2, 2021


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport some patches from upstream community and fix incorrect
         author names in patches


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages


author: xiewenhao <xiewenhao@kylinos.com.cn> - 1:2.04-23.kb2
changelog:
  - KYOS-B: Change the operator logo to KylinSecOS
  - KYOS-F: format backup grub
  - KYOS-F: notes terminal_output for aarch64
  - KYOS-B: Modify the problem that the grub2 theme cannot be loaded (#52398)


author: chenjirong<chenjirong@huawei.com> - 2.04-24
changelog:
  - Type:CVE
  - CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
  - SUG:NA
  - DESC:fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696


author: ouyangminxiang <ouyangminxiang@kylinos.com.cn> - 1:2.04-24.kb2
changelog:
  - KYOS-B: Change the operator logo to KylinSecOS
  - KYOS-F: format backup grub
  - KYOS-F: notes terminal_output for aarch64
  - KYOS-B: Modify the problem that the grub2 theme cannot be loaded (#57582)


author: wanglu<wanglu210@huawei.com> - 1:2.04-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:tests: Disable blkid cache usage
         disk/efi/efidisk: Pass buffers with higher ailgnment


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-36
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: quzesheng <quzesheng@kylinsec.com.cn> - 1:2.04-36.kb2
changelog:
  - KYOS-B: Change the operator logo to KylinSecOS
  - KYOS-F: format backup grub
  - KYOS-F: notes terminal_output for aarch64
  - KYOS-B: Modify the problem that the grub2 theme cannot be loaded (#69736)


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhongqianyi <zhongqianyi@kylinsec.com.cn> - 1:2.04-39.kb2
changelog:
  - KYOS-B: Modify the problem that the grub2 theme cannot be loaded.(#49477)
  - KYOS-F: format backup grub.(#17490)


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-40
changelog:
  - Type:CVE
  - CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
  24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
  25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
  -0678,CVE-2025-1125
  - SUG:NA
  - DESC:fix the vulnerabilities announced on February 18th, 2025


author: cuiping <cuiping@kylinsec.com.cn> - 1:2.04-41.kb1
changelog:
  - KYOS-B: Modify the problem that the grub2 theme cannot be loaded.(#80245)
  - KYOS-F: format backup grub.(#80245)


author: Funda Wang <fundawang@yeah.net> - 1.16.2-6
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.16.2-7
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
    CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
    CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
    CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
    CVE-2024-47546


author: luoxiangwen<luoxiangwen@kylinos.com.cn> - 3.24.21-6.kb1
changelog:
  - KYOS-F: repatch those patches for KY3.4-5 (#45419)
  - KYOS-F: Fix the problem that the prompt information of network icon volume icon is not displayed (#39562) 
  - KYOS-F: update xscreen size when x11 screen size change(#24840) 
  - KYOS-F: always send the monitors changed signal when screen size change (#26300) 
  - KYOS-F: add the scale with offset when draw shadow (#28615) 
  - KYOS-F: Add function definition of gtk_image_set_from_pixbuf_with_scale (#38372)


author: xiexing <xiexing4@hisilicon.com> - 3.3.3-1
changelog:
  - update version to fix CVE-2021-37404 CVE-2022-26612
    CVE-2021-33036 CVE-2022-25168 
    and  add chrpath to solve check_rpath warning


author: xiongjinzhou <xiongjinzhou@kylinos.com.cn> - 3.3.4-1.kb2
changelog:
  - rebuild for KY3.4-SA
  - Lock triple-beam to the version compatible with node.js 12 to avoid compilation error
  - fix download problem


author: xinghe <xinghe2@h-partners.com> - 2.2.16-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: caodongxia <caodongxia@huawei.com> - 1.8.20-12
changelog:
  - add sub packages hdf5-openmpi-static, hdf5-openmpi-devel, hdf5-openmpi,
  - hdf5-mpich-static, hdf5-mpich-devel, hdf5-mpich


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-8
changelog:
  - Type:cves
  - ID:CVE-2021-26690
  - SUG:NA
  - DESC:fix CVE-2021-26690
         modify version number in changelog


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-9
changelog:
  - Type:cves
  - ID:CVE-2021-34798 CVE-2021-36160 CVE-2021-40438
  - SUG:restart
  - DESC:fix CVE-2021-34798 CVE-2021-36160 CVE-2021-40438


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-10
changelog:
  - Type:cves
  - ID:CVE-2021-40438 CVE-2021-39275
  - SUG:restart
  - DESC:fix CVE-2021-40438 fully and correctly
         fix CVE-2021-39275


author: gaihuiying <gaihuiying1@huawei.com> - 2.4.43-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:fix int overflow in ap_timeout_parameter_parse
         Improve fix to please a fuzzer int overflow


author: gaihuiying <eaglegai@163.com> - 2.4.43-14
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-22719 CVE-2022-22720 CVE-2022-22721 CVE-2022-23934


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:NA
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-25
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: jiangheng <jiangheng14@huawei.com> - 5.5.0-11
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp: fix typo in AF_INET6 checksum JSON print
         bridge: fix memory leak when doing fdb get
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device


author: liubo <liubo335@huawei.com> - 5.5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: fix socket leak in rtnl_open_byproto()
         lnstat: fix strdup leak in -w argument parsing
         tc_util: Fix parsing action control with space and slash
         remove libcap dependency


author: liubo <liubo335@huawei.com> - 5.5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:nexthop: fix error reporting in filter dump
         bridge: report correct version
         q_cake: Make fwmark uint instead of int
         tc: m_action: check cookie hex string len
         iproute2: fix MPLS label parsing
         tc_util: detect overflow in get_size
         Revert "bpf: replace snprintf with asprintf when dealing with long buffers"
         tc/m_estimator: Print proper value for estimator interval in raw.
         iproute2: ip maddress: Check multiaddr length
         iproute2: ip addr: Organize flag properties structurally
         addr: Fix noprefixroute and autojoin for IPv4
         devlink: fix memory leak in cmd_dev_flash()
         tipc: bail out if algname is abnormally long
         tipc: bail out if key is abnormally long
         utils: Fix BIT() to support up to 64 bits on all architectures
         ipmonitor: Fix recvmsg with ancillary data
         devlink: fix infinite loop on flash update for drivers without status
         tc: u32: Fix key folding in sample option
         lnstat: fix buffer overflow in header output
         nstat: print useful error messages in abort() cases


author: wangyue <wangyue92@huawei.com> - 2.9.8-6
changelog:
  - fix CVE-2020-36179 CVE-2020-36180 CVE-2020-36181
    CVE-2020-36182 CVE-2020-36188 CVE-2020-36189
    CVE-2020-36187 CVE-2020-36186 CVE-2020-36184 CVE-2020-36183


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.332-b09.0
changelog:
  - deleted Support-Git-commit-ID-in-the-SOURCE-field-of-the-release.patch
  - deleted 8167014-jdeps-failed-with-Missing-message-warn-skippen-entry.patch
  - deleted fix-wrong-commitID-in-release-file.patch
  - deleted recreate-.java_pid-file-when-deleted-for-attach-mechanism.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8194154.patch
  - modified add-missing-test-case.patch
  - add fix-make-bugs-when-git-and-hg-not-exist.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.342-b07.0
changelog:
  - del 8168926.patch
  - del 8194154.patch
  - del 8202142-jfr-event-io-TestInstrumentation-is-unstable.patch
  - del 8266187_Memory_leak_in_appendBootClassPath.patch
  - del debuginfo.diz-should-not-contain-the-path-after-unzip.patch
  - del fix-make-bugs-when-git-and-hg-not-exist.patch
  - modified 7092821-java.security.Provider.getService-is-synchro.patch
  - modified 8268819-SA-Remove-libthread_db-dependency-on-Linux.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: tangshenghong<tangshenghong@kylinos.com.cn> - 1:1.8.0.392.b08-2.kb1
changelog:
  - KYOS-F:cve (#69791)
  - KYOS-F:support noarch for srpm build(#50650)
  - KYOS-F:add some translation(#51652)


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.422-b05.rolling
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8136577_Make_AbortVMOnException_available_in_product_builds.patch
  - modified Dynamic-CDS-Archive.patch
  - modified add-safe-compilation-flags.patch
  - modified fix-log-bug-enhance-aes-hmac-performance.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified openjdk-1.8.0.spec
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - Add Backport-6956385-URLConnection.getLastModified-leaks-file-han.patch
  - Add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch
  - Add Backport-8068864-C2-failed-modified-node-is-not-on-IGVN._work.patch
  - Add Backport-8151845-Comment-in-globals.hpp-for-MetaspaceSize-is-.patch
  - Add Backport-8209362-sun-security-ssl-SSLSocketImpl-ReuseAddr.jav.patch
  - Add Backport-8210706-G1-may-deadlock-when-starting-a-concurrent-c.patch
  - Add Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - Add Huawei-Add-Aggressive-CDS.patch
  - Add Huawei-Keep-objects-when-remove-unshareable-info.patch
  - Add Huawei-improve-GCTR-performance.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.422-b05.6
changelog:
  - let support-KAE-zip.patch not install libz.so on loongarch64
  - update LoongArch64 port to 8u422
  - fix changelog date error


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.432.b06-1
changelog:
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
  - modified GCC-12-reports-some-compiler-warnings.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add Backport-8057910-G1-BOT-verification-should-not-pass.patch
  - add Backport-8069330-and-adapt-G1GC-related-optimization.patch
  - add SA-redact-support-password.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.432.b06-2
changelog:
  - modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8253072-XERCES-version-is-displayed-incorrect.patch
  - add 8159461-8288556-getComponentType.patch
  - add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
  - add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.15.10-0
changelog:
  - modified 8231441-3-AArch64-Initial-SVE-backend-support.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: kuenking111 <wangkun49@huawei.com> - 1:11.0.16.8-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified ZGC-Redesign-C2-load-barrier-to-expand-on-th.patch
  - modified fast-serializer-jdk11.patch
  - modified dfx-enhancement-of-FastSerializer.patch
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified src-openeuler-openjdk-11-resolve-code-inconsistencies.patch
  - modified add-missing-inline.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - delete fix_X509TrustManagerImpl_symantec_distrust.patch
  - add fix_Internal_and_external_code_inconsistency.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.6-0
changelog:
  - update to 11.0.17+5
  - modified NUMA-Aware-Implementation-humongous-region.patch
  - modified Add-KAE-implementation.patch
  - modified fast-serializer-jdk11.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.17.8-0
changelog:
  - update to 11.0.17+8(GA)
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified PS-introduce-UsePSRelaxedForwardee-to-enable-using-r.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.19.7-0
changelog:
  - update to 11.0.19+7(GA)
  - deleted 8225648-TESTBUG-java-lang-annotation-loaderLeak-Main.patch
  - modified Add-KAE-implementation.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch
  - modified delete_expired_certificates.patch
  - modified 8205921-Optimizing-best_of_2-work-stealing-queue-selection.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: yangyingqing <yangyingqing@h-partners.com> - 1:11.0.27.6-0
changelog:
  - update to 11.0.27+6(GA)
  - delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
  - add fix-potential-build-fail-in-jbolt.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: songliyang <songliyang@kylinos.cn> - 1:17.0.12.7-1
changelog:
  - update Loongarch support patch to fix the error while applying in prep stage
  - delete redundant symbols while viewing spec file with vim that make it strange on highlight


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.12.7-2
changelog:
  - add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
  - add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.12.7-5
changelog:
  - Add Backport-of-JDK-8305680.patch
  - Add Backport-of-JDK-8305937.patch
  - Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
  - Add 8337982-Remove-dead-undef-assrt0n.patch
  - Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
  - Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
  - Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
  - Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
  - Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
  - Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch


author: Benshuai5D <zhangyunbo7@huawei.com> - 1:17.0.13.11-0
changelog:
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8264806-Backport-Graal-Compiler.patch
  - modify Add-JBooster-Lazy-AOT-module.patch
  - modify Apply-TBI-to-ZGC-of-JDK17.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify KAE-zip-Features.patch
  - modify add-version-txt.patch
  - add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
  - update to 17.0.13+11(ga)


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-4
changelog:
  - add Add-jbolt-feature.patch
  - add Enable-TLS-to-communciation-between-JBooster-Server-.patch
  - add SA-redact-support-password.patch
  - add Add-specialized-hashmap-version-of-the-long-type.patch
  - add Implement-JBooster-RPC-byte-alignment.patch
  - add Optimize-LazyAOT-klasses-sending-strategy.patch
  - add Add-KAE-zip-GzipKAEBenchmark-Benchmark.patch
  - add Add-Fix-clear-mark-for-NativeGotJump.patch
  - add 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.13.11-7
changelog:
  - modify Add-jbolt-feature.patch
  - modify Add-specialized-hashmap-version-of-the-long-type.patch
  - modify Enable-TLS-to-communciation-between-JBooster-Server-.patch


author: Benshuai5D <benshuai5d@huawei> - 1:17.0.14.7-0
changelog:
  - update to 17.0.14
  - modify 8264805-Backport-Ahead-of-Time-Compiler.patch
  - modify 8280872-Reorder-code-cache-segments-to-improv.patch
  - modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
  - modify Backport-Important-Fixed-Issues.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 1.6-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.0.20-14
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix issue about iomem file that contains too many contens.As a result,the kdump service failed


author: snoweay <snoweay@163.com> - 2.0.20-15
changelog:
  - Add support for quick kexec
    kexec: Add quick kexec support
    arm64: Quick kexec implementation for arm64


author: ouyangminxiang <ouyangminxiang@kylinos.com.cn> - 2.0.20-18.kb1
changelog:
  - KYOS-F: Fixed build error in koji;support backuprestore.(Related:#48538)
  - KYOS-R: Rebuild for KY3.4-SA(#59818)


author: wxq <wangxiaoqing@kylinsec.com.cn> - 2.2.7-7
changelog:
  - KYOS-B: Not let the system tray request focus.(#50395)
  - KYOS-B: Fix the coredump because of access a null pointer in lambda function.
  - KYOS-B: Fix coredump when the kiran-system-daemon is restart or stop.


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.2.7-12
changelog:
  - KYOS-B: Fix some possible crash problems caused by sigc::slot.
  - KYOS-B: Fix the coredump problem caused by RecentFilesListBox::load


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.2.7-17
changelog:
  - KYOS-B: Fix the coredump caused by firefox upgrade.(#7523)
  - KYOS-B: Fix crash when clicking on the power option button in vnc
  - KYOS-B: Fix memory leak due to notification area.(#I63Q6H)


author: yuanxing <yuanxing@kylinos.com.cn> - 2.2.5-1
changelog:
  - KYOS-F: solve the problem of garbled code in EULA and version license when locale is GB18030(#55533)
  - KYOS-F: add judgment activation code and machine code and expiry time are empty


author: yuanxing <yuanxing@kylinos.com.cn> - 2.2.5-7
changelog:
  - KYOS-F: remove time out of setHostName so don't popup error msg if normal user don't authorize brefore the authorization dialog close(#20041)


author: tangjie02 <tangjie02@kylinsec.com.cn> - 2.2.1-6
changelog:
  - KYOS-F: Fix scss warning "Compound selectors may no longer be extended".
  - KYOS-B: Delete transition-duration for flat button.


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.1-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:kpatch: update sympos for duplicate symbols in vmlinux
         create-diff-object: fix segment fault when sec2->rela is NULL


author: Zhipeng Xie<xiezhipeng1@huawei.com> -1:0.9.5-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix "ERROR: util.o: find_local_syms: 185: found duplicate matches for util.c"


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.2-22
changelog:
  - KYOS-B: Add some langurage translation
  - KYOS-F: Delete drawcut service file to prevent system log errors


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.2-27
changelog:
  - KYOS-F: Modify KylinSec telephone get by ksl-daemon
  - KYOS-F: Fix activation state changes caused by kernel changes(#14275 #18259)


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.2-12
changelog:
  - KYOS-F: Modify inactivate state hw_joint notify describe (66104)
  - KYOS-F: Modify the case of company name letters


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.3-1
changelog:
  - KYOS-B: Change the technical support contact information for system version 3.4-3
  - KYOS-B: Delete input box right click popup list


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.4-1
changelog:
  - KYOS-F: Modify get telephone by DBus method,fix USBKey active timeout error(#16872 #16952)
  - KYOS-F: fix some icon can't transfrom color whith kiran style, fix copatible problem(#18143)


author: xiaowen <xiaowen@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-F: Fix the issue of qrcode icons can't to convert colors with kiran style when inactive(#18143)


author: zhaoxiaohu <zhaoxiaohu@kuaishou.com> - 1.20.2-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix cpu share issues on systems with large amounts of cpu(when cpucore>256)


author: caoyuanji <caoyuanji@kylinos.com.cn> - 3.4-5.kb3
changelog:
  - KYOS-F: modify the os-release file(Related: #38373)
  - KYOS-F: modify the /etc/kylin-release file(Related: #38373)
  - change the name of EULA
  - KYOS-D: KY3.4-5 patch migration(Related: #48669)


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.8-9
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:add macro to adapt musl libc and add add-gids option for exec


author: fuanan <fuanan3@huawei.com> - 551-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] backport patches from upstream
         Minor memory leak.
         Remove unnecessary and incorrectly used variable same_pos_bell.
         Fix erroneous EOF calculation when F command is interrupted.
         Create only one ifile when a file is opened under different names.
         Remove extraneous frees, associated with removed call to lrealpath.
         Fix crash when call set_ifilename with a pointer to the name that is
         Remove unnecessary call to pshift in pappend.
         Reset horizontal shift when opening a new file.
         Protect from buffer overrun.
         Make histpattern return negative value to indicate error.
         Lesskey: don't translate ctrl-K in an EXTRA string.
         Ignore SIGTSTP in secure mode.
         Fix "Tag not found" error while looking for a tag's location
         Fix minor memory leak with input preprocessor.


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: liuxingxiang <liuxingxiang@kylinos.com.cn> - 2.35.2-10.kb1
changelog:
  - KYOS-B: Remove help rpm arch
  - KYOS-T: delete the chinese translate for entering the root maintenance password


author: zhangyao<zhangyao108@huawei.com> - 2.35.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: heyuxiang <heyuxiang@kylinsec.com.cn> - 2.35.2-16.kb2
changelog:
  - KYOS-B: Remove help rpm arch(#47770)
  - KYOS-T: delete the chinese translate for entering the root maintenance password(#49636)
  - KYOS-B: add safe compilation options(#59593)


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: capsh better error handling for integer parsing
          setcap clean up error handling of the ns rootid argument


author: yixiangzhike <yixiangzhike007@163.com> - 2.32-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: If needed search PATH for capsh (==) self-execution
          Guarantee sufficient memory for scratch pathname


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
changelog:
  - fix heap-use-after-free in cil_yy_switch_to_buffer
  - fix heap-use-after-free in __class_reset_perm_values()
  - fix heap-buffer-overflow in cil_print_recursive_blockinherit


author: xingxing <xingxing9@h-partners.com> - 0.7.14-6
changelog:
  - Type:cves
  - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-20
  21-44576-CVE-2021-44577
  - SUG:NA
  - DESC:fix CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-C
  VE-2021-44576-CVE-2021-44577


author: xinghe <xinghe2@h-partners.com> - 2.71.0-4
changelog:
  - Type:cves
  - ID:CVE-2024-52530 CVE-2024-52531 CVE-2024-52532
  - SUG:NA
  - DESC:fix CVE-2024-52530 CVE-2024-52531 CVE-2024-52532


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-5
changelog:
  - Type:cves
  - ID:CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784
  - SUG:NA
  - DESC:fix CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-2784


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-6
changelog:
  - Type:cves
  - ID:CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913
  - SUG:NA
  - DESC:fix CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913


author: zhangpan <zhangpan103@h-partners.com> - 2.71.0-9
changelog:
  - Type:cves
  - ID:CVE-2025-4476 CVE-2025-4948 CVE-2025-4969
  - SUG:NA
  - DESC:fix CVE-2025-4476 CVE-2025-4948 CVE-2025-4969


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: gaihuiying <eaglegai@163.com> - 0.9.4-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-4877 CVE-2025-4878 CVE-2025-5372
  - SUG:NA
  - DESC:fix CVE-2025-4877 CVE-2025-4878 CVE-2025-5372


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-9
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: yezengruan <yezengruan@huawei.com> - 0.7.3-7
changelog:
  - tpm2: Reset TPM2B buffer sizes after test fails for valid buffer size
  - tpm2: Add maxSize parameter to TPM2B_Marshal for sanity checks
  - tpm2: Restore original value if unmarsalled value was illegal
  - fix CVE-2021-3623


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  - security: fix SELinux label generation logic


author: Euler Robot <euler.robot@huawei.com>
changelog:
  - virDevMapperGetTargets: Don't ignore EBADF
  - virdevmapper: Don't cache device-mapper major
  - virdevmapper: Handle kernel without device-mapper support


author: ouyangminxiang <ouyangminxiang@kylinos.com.cn> - 6.2.0-19.kb2
changelog:
  - KYOS-F: remove arbitrary limit on socket and core id.(Related:#57185)
  - KYBD: Rebuild for KY3.4-SA


author: ouyangminxiang <ouyangminxiang@kylinos.com.cn> - 6.2.0-20.kb1
changelog:
  - KYOS-F: remove arbitrary limit on socket and core id.(Related:#57185)
  - KYBD: Rebuild for KY3.4-SA(#60579)


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


