# changelog

author: wangkai <wangkai385@huawei.com> - 2.5.5-5
changelog:
  - Fix CVE-2019-3828 and hostname module support openEuler
  - and add defination of is_subpath and remove module_response_deepcopy


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2311.3.0.0248
changelog:
  - config: arm64: Enable dubugfs config of hisi sas
  - scsi: hisi_sas_v3_hw: Remove extra function calls for runtime pm
  - scsi: hisi_sas_v3_hw: Don't use PCI helper functions
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Work around build failure in suspend function
  - scsi: hisi_sas: Block requests before take debugfs snapshot
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - scsi: hisi_sas: Configure the initialization registers according to HBA model
  - scsi: hisi_sas: Increase debugfs_dump_index after dump is completed
  - scsi: hisi_sas: Ensure all enabled PHYs up during controller reset
  - scsi: hisi_sas: Exit suspending state when usage count is greater than 0
  - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id
  - Revert "scsi: hisi_sas: Disable SATA disk phy for severe I_T nexus reset failure"
  - scsi: hisi_sas: Disable-SATA-disk-phy-for-severe-I_T-nexus reset failure
  - scsi: hisi_sas: Use abort task set to reset SAS disks when discovered
  - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW
  - scsi: hisi_sas: Fix rescan after deleting a disk
  - scsi: hisi_sas: Modify v3 HW SSP underflow error processing
  - scsi: hisi_sas: Fix phyup timeout on FPGA
  - scsi: hisi_sas: Prevent parallel controller reset and control phy command
  - scsi: hisi_sas: Limit users changing debugfs BIST count value
  - scsi: hisi_sas: Use autosuspend for the host controller
  - scsi: hisi_sas: Keep controller active between ISR of phyup and the event being processed
  - scsi: hisi_sas: Add more logs for runtime suspend/resume
  - scsi: hisi_sas: Wait for phyup in hisi_sas_control_phy()
  - scsi: hisi_sas: Initialise devices in .slave_alloc callback
  - scsi: hisi_sas: Speed up error handling when internal abort timeout occurs
  - scsi: hisi_sas: Reset controller for internal abort timeout
  - scsi: hisi_sas: Include HZ in timer macros
  - scsi: hisi_sas: Run I_T nexus resets in parallel for clear nexus reset
  - scsi: hisi_sas: Put a limit of link reset retries
  - scsi: hisi_sas: Print SATA device SAS address for soft reset failure
  - scsi: hisi_sas: Warn in v3 hw channel interrupt handler when status reg cleared
  - scsi: hisi_sas: Directly snapshot registers when executing a reset
  - scsi: hisi_sas: Call sas_unregister_ha() to roll back if .hw_init() fails
  - scsi: hisi_sas: Print SAS address for v3 hw erroneous completion print
  - scsi: hisi_sas: Add trace FIFO debugfs support
  - scsi: hisi_sas: Enable debugfs support by default
  - scsi: hisi_sas: Remove deferred probe check in hisi_sas_v2_probe()
  - scsi: hisi_sas: use threaded irq to process CQ interrupts
  - scsi: hisi_sas: Remove preemptible()
  - scsi: hisi_sas: Move debugfs code to v3 hw driver
  - scsi: hisi_sas: Reduce some indirection in v3 hw driver
  - scsi: hisi_sas: Fix up probe error handling for v3 hw
  - scsi: hisi_sas: Recover PHY state according to the status before reset
  - scsi: hisi_sas: Add device link between SCSI devices and hisi_hba
  - scsi: hisi_sas: Add check for methods _PS0 and _PR0
  - scsi: hisi_sas: Add controller runtime PM support for v3 hw
  - scsi: hisi_sas: Switch to new framework to support suspend and resume
  - scsi: hisi_sas: Code style cleanup
  - scsi: hisi_sas: Add missing newlines
  - scsi: hisi_sas: Add BIST support for fixed code pattern
  - scsi: hisi_sas: Add BIST support for phy FFE
  - scsi: hisi_sas: Make phy index variable name consistent
  - scsi: hisi_sas: Do not modify upper fields of PROG_PHY_LINK_RATE reg
  - scsi: hisi_sas: Modify macro name for OOB phy linkrate
  - scsi: hisi_sas: Remove one kerneldoc comment
  - scsi: hisi_sas: Do not reset phy timer to wait for stray phy up
  - scsi: hisi_sas: Stop returning error code from slot_complete_vX_hw()
  - scsi: hisi_sas: Add SAS_RAS_INTR0 to debugfs register name list
  - scsi: hisi_sas: Modify the commit information for DSM method
  - scsi: hisi_sas: Display proc_name in sysfs
  - scsi: hisi_sas: Fix build error without SATA_HOST
  - scsi: hisi_sas: Use dev_err() in read_iost_itct_cache_v3_hw()
  - scsi: hisi_sas: Add prints for v3 hw interrupt converge and automatic affinity
  - scsi: hisi_sas: Modify the file permissions of trigger_dump to write only
  - scsi: hisi_sas: Replace magic number when handle channel interrupt
  - scsi: hisi_sas: Stop converting a bool into a bool
  - scsi: hisi_sas: Return directly if init hardware failed
  - scsi: hisi_sas: Record the phy down event in debugfs
  - scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails
  - scsi: hisi_sas: Add ability to have multiple debugfs dumps
  - scsi: hisi_sas: Add module parameter for debugfs dump count
  - scsi: hisi_sas: Allocate memory for multiple dumps of debugfs
  - scsi: hisi_sas: Add debugfs file structure for ITCT cache
  - scsi: hisi_sas: Add debugfs file structure for IOST cache
  - scsi: hisi_sas: Add debugfs file structure for ITCT
  - scsi: hisi_sas: Add debugfs file structure for IOST
  - scsi: hisi_sas: Add debugfs file structure for port
  - scsi: hisi_sas: Add debugfs file structure for registers
  - scsi: hisi_sas: Add debugfs file structure for DQ
  - scsi: hisi_sas: Add debugfs file structure for CQ
  - scsi: hisi_sas: Add timestamp for a debugfs dump
  - scsi: hisi_sas: Don't create debugfs dump folder twice
  - scsi: hisi_sas: Make three functions static
  - scsi: hisi_sas: fix spelling mistake "digial" -> "digital"
  - scsi: hisi_sas: Add hisi_sas_debugfs_alloc() to centralise allocation
  - scsi: hisi_sas: Remove some unused function arguments
  - scsi: hisi_sas: Remove redundant work declaration
  - scsi: hisi_sas: Remove hisi_sas_hw.slot_complete
  - scsi: hisi_sas: add debugfs auto-trigger for internal abort time out
  - scsi: hisi_sas: use devm_platform_ioremap_resource() to simplify code
  - scsi: hisi_sas: remove set but not used variable 'irq_value'
  - scsi: hisi_sas: Remove some unnecessary code
  - scsi: hisi_sas: Modify return type of debugfs functions
  - scsi: hisi_sas: Drop free_irq() when devm_request_irq() failed
  - scsi: hisi_sas: Drop SMP resp frame DMA mapping
  - scsi: hisi_sas: Drop kmap_atomic() in SMP command completion
  - scsi: hisi_sas: Snapshot AXI and RAS register at debugfs
  - scsi: hisi_sas: Snapshot HW cache of IOST and ITCT at debugfs
  - scsi: hisi_sas: Fix pointer usage error in show debugfs IOST/ITCT
  - scsi: hisi_sas: Make max IPTT count equal for all hw revisions
  - scsi: hisi_sas: Some misc tidy-up
  - scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental
  - scsi: hisi_sas: Fix losing directly attached disk when hot-plug
  - scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code
  - scsi: hisi_sas: No need to check return value of debugfs_create functions


author: Luo Shengwei <luoshengwei@huawei.com> - 4.19.90-2311.4.0.0249
changelog:
  - !1935 [openEuler-1.0-LTS] Add Phytium optee driver support
  - !2895  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2873 Fix SAS start error with maxcpus=1
  - genirq: Take the proposed affinity at face value if force==true
  - optee: add phytium optee driver
  - optee: model OP-TEE as a platform device/driver
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - irqchip/gic-v3: Always trust the managed affinity provided by the core code
  - genirq: Always limit the affinity to online CPUs
  - genirq/msi: Shutdown managed interrupts with unsatifiable affinities
  - !2508 [openEuler-1.0-LTS] jpeg: Add a Phytium JPEG Engine driver
  - !2522 [openEuler-1.0-LTS] Add support for Phytium SoC RNG
  - !2877  Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - !2693 [openEuler-1.0-LTS] Add support for Phytium QSPI
  - !2402 [openEuler-1.0-LTS] Add Phytium w1 driver support
  - !2403 [openEuler-1.0-LTS] Add Phytium adc driver support
  - !1874 [openEuler-1.0-LTS] Add Phytium mailbox driver support
  - !2024 [openEuler-1.0-LTS] Add Phytium RTC driver support
  - !2682 [openEuler-1.0-LTS] Add support for Phytium MMC
  - !2671 [openEuler-1.0-LTS] phytium dwmac net driver
  - !2676 [openEuler-1.0-LTS] Add Phytium gpio driver support
  - !2604 [openEuler-1.0-LTS] Add support for Phytium SPI
  - !2540 [openEuler-1.0-LTS] Driver for the Phytium keypad port.
  - Revert "tcp: fix delayed ACKs for MSS boundary condition"
  - hwrng: Add support for Phytium SoC RNG
  - jpeg: Add a Phytium JPEG Engine driver
  - !2818  Fix memleak in disassociate_ctty()
  - !2810 drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - drivers/gmjstcm: import CVE-2011-1160 CVE-2011-1162 fixes to tcm.c
  - rtc: add phytium rtc driver document
  - rtc: add rtc drivers for Phytium SOCs
  - gpio: add phytium gpio driver
  - dwmac:add phytium dwmac driver
  - mailbox:add phytium mailbox driver document
  - mailbox: add phytium mailbox driver
  - mmc: add phytium mmc driver DT binding docs
  - mmc: add support for Phytium MMC
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
  - Revert "tty: fix pid memleak in disassociate_ctty()"
  - spi: add phytium spi driver DT binding docs
  - spi: add phytium spi support
  - qspi: add phytium qspi driver DT binding docs
  - qspi: add support for Phytium QSPI controller
  - gpio: add phytium gpio driver document
  - dwmac:add phytium dwmac driver DT binding docs
  - adc: add phytium adc driver
  - adc: add phytium adc driver document
  - w1: add phytium w1 driver
  - w1: add phytium w1 driver document
  - KEYPAD: Driver for the Phytium keypad port.
  - KEYPAD: Document for the Phytium keypad port.


author: Li Xiaodong <lixiaodong67@huawei.com> - 4.19.90-2311.5.0.0252
changelog:
  - !3000 [openEuler-1.0-LTS] add Phytium drivers CONFIG
  - arm64: config: add config for Phytium drivers
  - !2908  mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - !2869  mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - !2805  sched/fair: Refill bandwidth before scaling
  - !2804  signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal
  - !2960  Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - kbuild: ensure full rebuild when the compiler is updated
  - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page()
  - mm, memory_hotplug: update pcp lists everytime onlining a memory block
  - sched/fair: Refill bandwidth before scaling
  - signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal


author: Yuan Zhang <zhangyuan162@huawei.com> - 4.19.90-2311.5.0.0253
changelog:
  - arm64: cpufeature: Extract capped perfmon fields
  - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.1.0.0255
changelog:
  - !3158  mm: don't let userspace spam allocations warnings
  - mm: don't let userspace spam allocations warnings
  - !2781  cpufreq: Abort show()/store() for half-initialized policies
  - !3118  sched: smart grid: check is active in affinity timer
  - sched: smart grid: check is active in affinity timer
  - !2977  Backport crypto bugfix
  - !3071  perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
  - !3038  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3031  x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - !3030  x86/mce/inject: Fix a wrong assignment of i_mce.status
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - x86/mce/amd: Publish the bank pointer only after setup has succeeded
  - x86/mce/inject: Fix a wrong assignment of i_mce.status
  - crypto: fix kabi broken in struct crypto_instance
  - crypto: api - Use work queue in crypto_destroy_instance
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.3.0.0256
changelog:
  - !3347  tun: avoid double free in tun_free_netdev
  - tun: avoid double free in tun_free_netdev
  - !3239  net: hns: fix fake link up
  - !3113 KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - !3281  LTS patch backport
  - !3122  nvme: retain split access workaround for capability reads
  - !3262  icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: fix kabi broken in struct netns_xfrm
  - xfrm: fix a data-race in xfrm_gen_index()
  - !3276  linux-4.19.y inclusion
  - !3263  workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - !3267  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
  - can: dev: can_restart(): don't crash kernel if carrier is OK
  - can: dev: move driver related infrastructure into separate subdir
  - ipv6: avoid atomic fragment on GSO packets
  - tcp_metrics: do not create an entry from tcp_init_metrics()
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
  - tcp_metrics: add missing barriers on delete
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  - ext4: move 'ix' sanity check to corrent position
  - vfs: fix readahead(2) on block devices
  - overlayfs: set ctime when setting mtime and atime
  - quota: Fix slow quotaoff
  - mcb: remove is_added flag from mcb_device struct
  - sched,idle,rcu: Push rcu_idle deeper into the idle path
  - cgroup: Remove duplicates in cgroup v1 tasks file
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
  - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
  - net: hns: update hns version to 23.12.1
  - net: hns: fix fake link up on xge port
  - !3021  fix CFS bandwidth vs. hrtimer self deadlock
  - !3202  regmap: fix NULL deref on lookup
  - regmap: fix NULL deref on lookup
  - KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
  - arm64: cpufeature: Extract capped perfmon fields
  - nvme: retain split access workaround for capability reads
  - cpu/hotplug: fix kabi breakage in enum cpuhp_state
  - hrtimers: Push pending hrtimers away from outgoing CPU earlier


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.4.0.0257
changelog:
  - !3426  Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
  - Revert "cpu/hotplug: fix kabi breakage in enum cpuhp_state"


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2312.6.0.0258
changelog:
  - !3607  Fix CVE-2023-6546
  - !3606  perf/core: Fix CVE-2023-6931
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - tty: n_gsm: fix restart handling via CLD command
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()
  - !3417  SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers
  - !3531 Fix kernel panic occurs during ISO installation on the 20.03 SP3/SP4
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - i2c: hisi: Only use the completion interrupt to finish the transfer
  - i2c: hisi: Avoid redundant interrupts
  - !3483  net: Remove acked SYN flag from packet in the transmit queue correctly
  - net: Remove acked SYN flag from packet in the transmit queue correctly
  - SCSI: hisi_raid: support SPxxx serial RAID/HBA controllers


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.1.0.0259
changelog:
  - !3660  atm: Fix Use-After-Free in do_vcc_ioctl
  - !3687  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - !3672  smb: client: fix potential OOB in smb2_dump_detail()
  - !3671  smb: client: fix OOB in smbCalcSize()
  - !3627  jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - !3189  fs: don't audit the capability check in simple_xattr_list()
  - smb: client: fix potential OOB in smb2_dump_detail()
  - smb: client: fix OOB in smbCalcSize()
  - !3555  net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - atm: Fix Use-After-Free in do_vcc_ioctl
  - !3592  CVE-2023-35827 patchset
  - !3449  Fix data-races around
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers()
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
  - ip: Fix data-races around sysctl_ip_no_pmtu_disc.
  - ip: Fix data-races around sysctl_ip_fwd_update_priority.
  - fs: don't audit the capability check in simple_xattr_list()


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.3.0.0260
changelog:
  - !3768  iomap: add support to track dirty state of sub pages
  - !3845  netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3847  nvmet: nul-terminate the NQNs passed in the connect command
  - !3863 linux-4.19.y inclusion(4.19.299..4.19.303) part2
  - team: Fix use-after-free when an option instance allocation fails
  - packet: Move reference count in packet_sock to atomic_long_t
  - tcp: do not accept ACK of bytes we never sent
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
  - ipv6: fix potential NULL deref in fib6_add()
  - ipv4: Correct/silence an endian warning in __ip_do_redirect
  - net: sched: fix race condition in qdisc_graft()
  - macvlan: Don't propagate promisc change to lower dev in passthru
  - ppp: limit MRU to 64K
  - tty: Fix uninit-value access in ppp_sync_receive()
  - net: annotate data-races around sk->sk_dst_pending_confirm
  - net: annotate data-races around sk->sk_tx_queue_mapping
  - !3862 linux-4.19.y inclusion(4.19.299..4.19.303) part1
  - ring-buffer: Fix memory leak of free page
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
  - x86/CPU/AMD: Check vendor in the AMD microcode callback
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
  - audit: don't take task_lock() in audit_exe_compare() code path
  - nvmet: nul-terminate the NQNs passed in the connect command
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - !3823 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3803  net/sched: cbs: Fix not adding cbs instance to list
  - net/sched: cbs: Fix not adding cbs instance to list
  - !3770  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - iomap: add support to track dirty state of sub pages
  - !3757  Fix bugs from LTS patches
  - devcoredump: Send uevent once devcd is ready
  - devcoredump : Serialize devcd_del work
  - driver core: Release all resources during unbind before updating device links
  - !3716  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3667  net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - net/rose: Fix Use-After-Free in rose_ioctl


author: YunYi Yang <yangyunyi2@huawei.com> - 4.19.90-2401.4.0.0261
changelog:
  - !4006  crypto: hisilicon/sec2: fix memory use-after-free issue
  - crypto: hisilicon/sec2: fix memory use-after-free issue
  - !3923  net: bridge: multicast: fix UAF of net_bridge
  - net: bridge: multicast: fix UAF of net_bridge


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2401.5.0.0262
changelog:
  - !4101  netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !2954 spi: phytium: fix phytium_spi_irq panic on boot
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
  - !4067  fix CVE-2022-48619
  - !4080  rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK"
  - !4065  smb: client: fix OOB in receive_encrypted_standard()
  - !4021  netfilter: nf_tables: Reject tables of unsupported family
  - Input: add bounds checking to input_set_capability()
  - smb: client: fix OOB in receive_encrypted_standard()
  - !4039  crypto: hisilicon/qm: fix several issues
  - !4025  crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - !3980  vhost: use kzalloc() instead of kmalloc() followed by memset()
  - crypto: hisilicon/qm: fix several issues
  - crypto: hisilicon - replace 'smp_processor_id' with the raw version of the macro
  - netfilter: nf_tables: Reject tables of unsupported family
  - vhost: use kzalloc() instead of kmalloc() followed by memset()
  - spi: phytium: fix phytium_spi_irq panic on boot


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.1.0.0263
changelog:
  - !4277  fs:/dcache.c: fix negative dentry limit not complete problem
  - !4288  net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4299  smb: client: fix NULL deref in asn1_ber_decoder()
  - smb: client: fix NULL deref in asn1_ber_decoder()
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
  - !4228  fix spinlock already unlocked in inet_csk_reqsk_queue_add' bug
  - fs:/dcache.c: fix negative dentry limit not complete problem
  - !4235  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - !4255  drm/amdgpu: Fix potential fence use-after-free v2
  - !4209  dhugetlb: skip unexpected migration
  - drm/amdgpu: Fix potential fence use-after-free v2
  - !4231  crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  - crypto: hisilicon/qm - drop unnecessary IS_ENABLE(CONFIG_NUMA) check
  - ipv6: init the accept_queue's spinlocks in inet6_create
  - tcp: make sure init the accept_queue's spinlocks once
  - !4212  netlink: fix potential sleeping issue in mqueue_flush_file
  - netlink: fix potential sleeping issue in mqueue_flush_file
  - dhugetlb: skip unexpected migration
  - dhugetlb: introduce page_belong_to_dynamic_hugetlb() function
  - !3944  time: Handle negative seconds correctly in timespec64_to_ns()
  - !3943  timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - !3942  efi/x86: Map the entire EFI vendor string before copying it
  - !4166  sched/fair: Fix qos_timer deadlock when cpuhp offline
  - sched/fair: Fix qos_timer deadlock when cpuhp offline
  - !4137  sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
  - time: Handle negative seconds correctly in timespec64_to_ns()
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - efi/x86: Map the entire EFI vendor string before copying it


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.4.0.0264
changelog:
  - !4454  netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  - !4411 v2  drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4412 v3  Save and restore msg_namelen in sock_sendmsg
  - net: Save and restore msg_namelen in sock_sendmsg
  - net: prevent rewrite of msg_name in sock_sendmsg()
  - !4399  net: dst: Optimized route gc
  - drm/atomic: Fix potential use-after-free in nonblocking commits
  - !4392 linux-4.19.y inclusion
  - !4369  mm/filemap: avoid buffered read/write race to read inconsistent data
  - net/dst: use a smaller percpu_counter batch for dst entries accounting
  - net: add a route cache full diagnostic message
  - net: check dev->gso_max_size in gso_features_check()
  - net: warn if gso_type isn't set for a GSO SKB
  - mm: fix unmap_mapping_range high bits shift bug
  - x86/alternatives: Sync core before enabling interrupts
  - mm/filemap: avoid buffered read/write race to read inconsistent data
  - !4360  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - !4320  io_uring/af_unix: disable sending io_uring over sockets
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  - io_uring/af_unix: disable sending io_uring over sockets


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.5.0.0266
changelog:
  - !4601 v2  xen-netback: don't produce zero-size SKB frags
  - xen-netback: don't produce zero-size SKB frags
  - !4583  net: hns3: fix a bug and modify the hns3 driver version
  - net: hns3: update hns3 version to 24.2.1
  - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization
  - !4552 v4  CVE-2023-52340
  - !4526 v2  fs:/dcache.c: fix negative dentry flag warning in dentry_free
  - ipv6: fix kabi broken in struct dst_ops
  - ipv6: Document that max_size sysctl is deprecated
  - ipv6: remove max_size check inline with ipv4
  - !4538  fix kprobe reenter bug
  - arm64/openeuler_defconfig: add not set config to fix compiling error
  - tracing/kprobes: Do the notrace functions check without kprobes on ftrace
  - fs:/dcache.c: fix negative dentry flag warning in dentry_free


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2402.6.0.0267
changelog:
  - !4701 v2  mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - !4684 v3  CVE-2023-52435
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
  - net: Fix compile warning in skb_segment()
  - net: prevent mss overflow in skb_segment()
  - !4643  f2fs: explicitly null-terminate the xattr list
  - f2fs: explicitly null-terminate the xattr list


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.1.0.0268
changelog:
  - !4947  powerpc/64s: Fix pte update for kernel memory on radix
  - !4932  phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - powerpc/64s: Fix pte update for kernel memory on radix
  - !4874 v2  net: openvswitch: limit the number of recursions from action sets
  - !4920  ARM: footbridge: remove personal server platform
  - !4887  KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - !4918 v3  usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4936  i2c: validate user data in compat ioctl
  - i2c: validate user data in compat ioctl
  - !4898  platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4879  KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - !4869  Fix CVE-2021-46941
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
  - !4904  i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4859  hfsplus: prevent corruption in shrinking truncate
  - !4877  i2c: Fix a potential use after free
  - ARM: footbridge: fix PCI interrupt mapping
  - !4888 v3  media: dvbdev: Fix memory leak in dvb_media_device_free()
  - usb: hub: Guard against accesses to uninitialized BOS descriptors
  - !4825  sched/membarrier: reduce the ability to hammer on sys_membarrier
  - !4882  Input: appletouch - initialize work before device registration
  - !4876  backport patch to fix CVE-2021-47077
  - !4899  net: qualcomm: rmnet: fix global oob in rmnet_policy
  - i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  - !4892  Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - !4881  i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - net: qualcomm: rmnet: fix global oob in rmnet_policy
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
  - !4865  Input: powermate - fix use-after-free in powermate_config_complete
  - !4860  apparmor: avoid crash when parsed profile name is empty
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
  - media: dvbdev: Fix memory leak in dvb_media_device_free()
  - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
  - Input: appletouch - initialize work before device registration
  - i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
  - i2c: Fix a potential use after free
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  - net: openvswitch: limit the number of recursions from action sets
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
  - usb: dwc3: core: balance phy init and exit
  - usb: dwc3: core: Do core softreset when switch mode
  - Input: powermate - fix use-after-free in powermate_config_complete
  - !4856  bus: qcom: Put child node before return
  - apparmor: avoid crash when parsed profile name is empty
  - hfsplus: prevent corruption in shrinking truncate
  - bus: qcom: Put child node before return
  - !4828  Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4806 v2  media: pvrusb2: fix use after free on context disconnection
  - !4777  drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4819 v2  fix CVE-2020-36782
  - !4833  openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - !4677  f2fs: fix to avoid dirent corruption
  - !4804  CVE-2023-52451 backport to 4.19 v2
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets
  - Drivers: hv: vmbus: Use after free in __vmbus_open()
  - !4778 v3  Revert "memcg: fix a UAF problem in drain_all_stock()"
  - sched/membarrier: reduce the ability to hammer on sys_membarrier
  - i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
  - !4812  parisc: Clear stale IIR value on instruction access rights trap
  - parisc: Clear stale IIR value on instruction access rights trap
  - media: pvrusb2: fix use after free on context disconnection
  - powerpc/pseries/memhp: Fix access beyond end of drmem array
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations
  - !4758  binder: signal epoll threads of self-work
  - !4746  KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - Revert "memcg: fix a UAF problem in drain_all_stock()"
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table
  - !4751 [sync] PR-4623: i2c: Optimized the value setting of maxwrite limit to  fifo depth - 1
  - !4707  mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - !4686  mlxsw: spectrum_acl_tcam: Fix stack corruption
  - binder: signal epoll threads of self-work
  - !4710  CVE-2021-46904 for openEuler1.0
  - i2c: hisi: Add clearing tx aempty interrupt operation
  - i2c: hisi: Optimized the value setting of maxwrite limit to fifo depth - 1
  - !4671  uio: Fix use-after-free in uio_open
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
  - net: hso: fix NULL-deref on disconnect regression
  - net: hso: fix null-ptr-deref during tty device unregistration
  - usb: hso: check for return value in hso_serial_common_create()
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
  - mlxsw: spectrum_acl_tcam: Fix stack corruption
  - f2fs: fix to avoid dirent corruption
  - uio: Fix use-after-free in uio_open


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.2.0.0269
changelog:
  - !5133  CVE-2021-46926
  - !5136  NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - !5052 v3  Remove WQ_FLAG_BOOKMARK flag
  - !5140 linux-4.19.y inclusion(4.19.305..4.19.307) part3
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
  - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
  - ALSA: hda: intel-sdw-acpi: harden detection of controller
  - soundwire: intel: filter SoundWire controller device search
  - !5114  fix CVE-2023-52578
  - !5119  crypto: scomp - fix req->dst buffer overflow
  - !5101  EDAC/thunderx: Fix possible out-of-bounds string access
  - !5094  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - crypto: scomp - fix req->dst buffer overflow
  - net: fix kabi check warning
  - net: Fix unwanted sign extension in netdev_stats_to_stats64()
  - net: bridge: use DEV_STATS_INC()
  - net: add atomic_long_t to net_device_stats fields
  - !5092  wifi: mac80211: fix potential key use-after-free
  - EDAC/thunderx: Fix possible out-of-bounds string access
  - !5095 linux-4.19.y inclusion(4.19.305..4.19.307) part 2
  - !5090  drm: bridge/panel: Cleanup connector on bridge detach
  - !5088  uio_hv_generic: Fix a memory leak in error handling paths
  - !4952  scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - !5076 v3  CVE-2021-47074
  - netfilter: nft_compat: reject unused compat flag
  - ppp_async: limit MRU to 64K
  - inet: read sk->sk_family once in inet_recv_error()
  - bonding: remove print in bond_verify_device_path
  - af_unix: fix lockdep positive in sk_diag_dump_icons()
  - net: ipv4: fix a memleak in ip_setup_cork
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
  - virtio_net: Fix Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
  - SUNRPC: Fix a suspicious RCU usage warning
  - tcp: Add memory barrier to tcp_push()
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
  - md: Whenassemble the array, consult the superblock of the freshest device
  - jbd2: correct the printing of write_flags in jbd2_write_superblock()
  - !5073  RDMA/rxe: Clear all QP fields if creation failed
  - !5077  RDMA/rxe: Return CQE error if invalid lkey was supplied
  - !5055 linux-4.19.y inclusion(4.19.305..4.19.307) part 1
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  - wifi: mac80211: fix potential key use-after-free
  - drm: bridge/panel: Cleanup connector on bridge detach
  - uio_hv_generic: Fix a memory leak in error handling paths
  - of: unittest: Fix of_count_phandle_with_args() expected value message
  - of: unittest: Fix compile in the non-dynamic case
  - RDMA/rxe: Return CQE error if invalid lkey was supplied
  - nvme-loop: fix memory leak in nvme_loop_create_ctrl()
  - nvme-loop: don't put ctrl on nvme_init_ctrl error
  - !5060  net: fix possible store tearing in neigh_periodic_work()
  - RDMA/rxe: Clear all QP fields if creation failed
  - net: fix possible store tearing in neigh_periodic_work()
  - of: Fix double free in of_parse_phandle_with_args_map
  - pmdomain: core: Move the unused cleanup to a _sync initcall
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
  - ACPI: LPIT: Avoid u32 multiplication overflow
  - audit: Send netlink ACK before setting connection in auditd_set
  - crypto: scompress - return proper error code for allocation failure
  - crypto: af_alg - Disallow multiple in-flight AIO requests
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
  - !5046  usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - sched: remove wait bookmarks
  - filemap: remove use of wait bookmarks
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
  - !4929  scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - !4752  block: add check that partition length needs to be aligned with block size
  - !4735  blk-mq: fix IO hang from sbitmap wakeup race
  - !3864  nvme: sanitize metadata bounce buffer for reads
  - !4946  NFC: st21nfca: Fix memory leak in device probe and remove
  - !4999  CVE-2021-46984
  - !4938  crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - !4990  vt: fix memory overlapping when deleting chars in the buffer
  - !4978  nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - !5018  ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4992  bnxt_en: Fix RX consumer index logic in the error path.
  - !4997  Fixed CVE-2023-52504
  - !4982  i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - !4983  net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - !4995  mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - !4974  arm64/mpam: set default feedback of last_cmd_status interface as null string
  - !4975  arm64/mpam: support resctrl fs to show mounting option
  - !4973  arm64/mpam: Skip updates of unrelated ctrl type
  - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  - !4996  soundwire: stream: fix memory leak in stream config error path
  - !4817 v2  io_uring: fix overflows checks in provide buffers
  - kyber: fix kabi broken in ->bio_merge()
  - kyber: fix out of bounds access when preempted
  - x86/alternatives: Disable KASAN in apply_alternatives()
  - soundwire: stream: fix memory leak in stream config error path
  - mpam/mpam_ctrlmon: update monitor config with its parent's ctrl_val
  - bnxt_en: Fix RX consumer index logic in the error path.
  - !4969  CVE-2021-46990
  - vt: fix memory overlapping when deleting chars in the buffer
  - !4945  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - !4944  perf/x86/lbr: Filter vsyscall addresses
  - !4967  i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - !4970  binder: fix async_free_space accounting for empty parcels
  - !4919 v2  HID: usbhid: fix info leak in hid_submit_ctrl
  - !4980  net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  - i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
  - !4949  CVE-2021-47024
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
  - arm64/mpam: support resctrl fs to show mounting option
  - arm64/mpam: set default feedback of last_cmd_status interface as null string
  - arm64/mpam: Skip updates of unrelated ctrl type
  - binder: fix async_free_space accounting for empty parcels
  - powerpc/64s: Fix crashes when toggling entry flush barrier
  - i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  - scsi: qedf: Add pointer checks in qedf_update_link_speed()
  - vsock/virtio: free queued packets when closing socket
  - vsock/virtio: discard packets only when socket is really closed
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt
  - NFC: st21nfca: Fix memory leak in device probe and remove
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  - perf/x86/lbr: Filter vsyscall addresses
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
  - HID: usbhid: fix info leak in hid_submit_ctrl
  - io_uring: fix overflows checks in provide buffers
  - block: add check that partition length needs to be aligned with block size
  - blk-mq: fix IO hang from sbitmap wakeup race
  - nvme: sanitize metadata bounce buffer for reads


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.3.0.0270
changelog:
  - !5306  FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5347  s390/ptrace: handle setting of fpc register correctly
  - !5309  drm/msm/dpu: Add mutex lock in control vblank irq
  - s390/ptrace: handle setting of fpc register correctly
  - !5267  llc: call sock_orphan() at release time
  - drm/msm/dpu: Add mutex lock in control vblank irq
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
  - !5241  powerpc/lib: Validate size for vector operations
  - !5246  ceph: fix deadlock or deadcode of misusing dget()
  - !5268  crypto: algif_aead - fix uninitialized ctx->init
  - crypto: algif_aead - fix uninitialized ctx->init
  - llc: call sock_orphan() at release time
  - !5220  powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5196  drm: Don't unref the same fb many times by mistake due to deadlock handling
  - ceph: fix deadlock or deadcode of misusing dget()
  - powerpc/lib: Validate size for vector operations
  - !5210 v2  Fix CVE-2022-48629 and CVE-2022-48630
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
  - !5175  arm64/mpam: Fix use-after-free when deleting resource groups
  - !5163  nfc: nci: assert requested protocol is valid
  - !5172  CVE-2023-52502 for openEuler-1.0-LTS
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
  - crypto: qcom-rng - ensure buffer for generate is completely filled
  - drm: Don't unref the same fb many times by mistake due to deadlock handling
  - !5177  net: nfc: llcp: Add lock when modifying device list
  - !5157  RDMA/srp: Do not call scsi_done() from srp_abort()
  - net: nfc: llcp: Add lock when modifying device list
  - arm64/mpam: Fix use-after-free when deleting resource groups
  - arm64/mpam: remove kernfs_get() calls() and add kernfs_put() calls to prevent refcount leak
  - !5142  arm64/mpam: Expand the monitor number of the resctrl root
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  - nfc: constify several pointers to u8, char and sk_buff
  - nfc: nci: assert requested protocol is valid
  - RDMA/srp: Do not call scsi_done() from srp_abort()
  - arm64/mpam: Expand the monitor number of the resctrl root


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2403.4.0.0271
changelog:
  - !5539  spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5542  round lts patches
  - !5520  scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - l2tp: pass correct message length to ip6_append_data
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  - !5514 CVE-2021-47110
  - !5497  llc: Drop support for ETH_P_TR_802_2.
  - !5498  llc: make llc_ui_sendmsg() more robust against bonding changes
  - !5490  tcp: add sanity checks to rx zerocopy
  - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
  - x86/kvm: Do not try to disable kvmclock if it was not enabled
  - x86/kvm: Disable kvmclock on all CPUs on shutdown
  - !5502  pstore/ram: Fix crash when setting number of cpus to an odd number
  - !5477  Fixed CVE-2021-47112
  - pstore/ram: Fix crash when setting number of cpus to an odd number
  - llc: make llc_ui_sendmsg() more robust against bonding changes
  - llc: Drop support for ETH_P_TR_802_2.
  - tcp: add sanity checks to rx zerocopy
  - !5479  jfs: fix cve-2023-52600
  - !5478  jfs: fix array-index-out-of-bounds in diNewExt
  - !5485  nfsd: fix use-after-free due to delegation race
  - nfsd: fix use-after-free due to delegation race
  - !5281  printk: avoid deadlock in panic
  - jfs: fix uaf in jfs_evict_inode
  - JFS: fix memleak in jfs_mount
  - jfs: fix array-index-out-of-bounds in diNewExt
  - x86/kvm: Teardown PV features on boot CPU as well
  - !5465  wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5361  btrfs: abort in rename_exchange if we fail to insert the second ref
  - !5254  tomoyo: fix UAF write bug in tomoyo_write_control()
  - !5321  UBSAN: array-index-out-of-bounds in dtSplitRoot
  - !5455  CVE-2021-47114
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
  - !5320  jfs: fix slab-out-of-bounds Read in dtSearch
  - ocfs2: issue zeroout to EOF blocks
  - ocfs2: fix zero out valid data
  - ocfs2: fix data corruption by fallocate
  - !5374  hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - !5418 [sync] PR-5317:  KVM: s390: fix setting of fpc register
  - !5272  net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - !5274  phonet/pep: refuse to enable an unbound pipe
  - !5359  CVE-2021-47121 and CVE-2021-47122
  - KVM: s390: fix setting of fpc register
  - !5358 v5  CVE-2023-52595
  - !5336  binder: fix race between mmput() and do_exit()
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  - btrfs: abort in rename_exchange if we fail to insert the second ref
  - net: caif: fix memory leak in caif_device_notify
  - net: caif: fix memory leak in cfusbl_device_notify
  - net: caif: add proper error handling
  - net: caif: added cfserl_release function
  - rt2x00: Fix kabi breakage in struct rt2x00lib_ops
  - wifi: rt2x00: restart beacon queue when hardware reset
  - rt2x00: clear up IV's on key removal
  - rt2x00: clear IV's on start to fix AP mode regression
  - rt2800: add pre_reset_hw callback
  - rt2800: do not nullify initialization vector data
  - binder: fix race between mmput() and do_exit()
  - UBSAN: array-index-out-of-bounds in dtSplitRoot
  - jfs: fix slab-out-of-bounds Read in dtSearch
  - printk: avoid deadlock in panic
  - phonet/pep: refuse to enable an unbound pipe
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump
  - tomoyo: fix UAF write bug in tomoyo_write_control()


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2404.1.0.0272
changelog:
  - !5874  scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - scsi: hisi_sas: Update disk locked timeout to 7 seconds
  - !5841  fixup CVE-2024-26751
  - !5834  CVE-2021-47144
  - ARM: ep93xx: Add terminator to gpiod_lookup_table
  - drm/amd/amdgpu: fix refcount leak
  - !5796  netfilter: nft_limit: reject configurations that cause integer overflow
  - netfilter: nft_limit: reject configurations that cause integer overflow
  - !5755  sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5767 v5  net: fec: fix the potential memory leak in fec_enet_init()
  - !5718  CVE-2024-26654
  - net: fec: fix the potential memory leak in fec_enet_init()
  - !5722  btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
  - !5727  fix CVE-2021-47101
  - !5531  ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - !5715  net: hns3: updates 2024.04.02
  - !5710 v2  ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - asix: fix wrong return value in asix_check_host_enable()
  - asix: fix uninit-value in asix_mdio_read()
  - net: asix: fix uninit value bugs
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
  - !5700  sr9800: Add check for usbnet_get_endpoints
  - !5680  USB: usbfs: Don't WARN about excessively large memory allocations
  - !5679  fix CVE-2023-52587
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  - ALSA: aica: Fix a long-time build breakage
  - !5713 v2  tipc: wait and exit until all work queues are done
  - net: hns3: update hns3 version to 24.3.1
  - net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode
  - !5696  NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: wait and exit until all work queues are done
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
  - !5702  ext4: Validate inode pa before using preallocation blocks
  - !5694  tipc: skb_linearize the head skb when reassembling msgs
  - ext4: Validate inode pa before using preallocation blocks
  - !5674  mac80211: fix locking in ieee80211_start_ap error path
  - !5672  arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - sr9800: Add check for usbnet_get_endpoints
  - !5528  btrfs: do not BUG_ON in link_to_fixup_dir
  - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
  - tipc: skb_linearize the head skb when reassembling msgs
  - !5522  md/raid5: fix atomicity violation in raid5_cache_count
  - USB: usbfs: Don't WARN about excessively large memory allocations
  - IB/ipoib: Fix mcast list locking
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join
  - mac80211: fix locking in ieee80211_start_ap error path
  - arm64/mpam: Allocate new partid for the created ctrl group
  - arm64/mpam_ctrlmon: Update ctrl group config with rdtgrp's partid
  - !5581  CVE-2023-52622
  - !5658 v2  CVE-2021-47131
  - !5645 [sync] PR-5493:  arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5559  fix CVE-2021-47173
  - !5575  net: dsa: fix a crash if ->get_sset_count() fails
  - net/tls: Use RCU API to access tls_ctx->netdev
  - net/tls: Remove the context from the list in tls_device_down
  - tls: Fix context leak on tls_device_down
  - net/tls: Resolve KABI break when backport bugfix of CVE-2021-47131
  - net/tls: Fix use-after-free after the TLS device goes down and up
  - net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
  - !5625  i2c: i801: Don't generate an interrupt on bus reset
  - !5517  dm: revert partial fix for redundant bio-based IO accounting
  - arm64/mpam: Fix repeated enabling in mpam_enable()
  - !5481  jfs: fix array-index-out-of-bounds in dbAdjTree
  - !5572  mld: fix panic in mld_newpack()
  - !5565  tracing: Ensure visibility when inserting an element into tracing_map
  - !5571 v2  mm/mlock: return EINVAL for illegal user memory range in mlock
  - i2c: i801: Don't generate an interrupt on bus reset
  - !5587  Fix CVE-2021-47171
  - !5579  mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5573  Fix CVE-2021-47160
  - !5564  serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5560  drm/amdgpu: Fix a use-after-free
  - net: usb: fix possible use-after-free in smsc75xx_bind
  - net: usb: fix memory leak in smsc75xx_bind
  - ext4: avoid online resizing failures due to oversized flex bg
  - ext4: unify the type of flexbg_size to unsigned int
  - ext4: remove unnecessary check from alloc_flex_gd()
  - mm: ksm: fix use-after-free kasan report in ksm_might_need_to_copy
  - !5558  net: fujitsu: fix potential null-ptr-deref
  - !5556  NFC: nci: fix memory leak in nci_allocate_device
  - net: dsa: fix a crash if ->get_sset_count() fails
  - net: dsa: mt7530: fix VLAN traffic leaks again
  - net: dsa: mt7530: fix VLAN traffic leaks
  - mld: fix panic in mld_newpack()
  - mm/mlock: return EINVAL for illegal user memory range in mlock
  - tracing: Ensure visibility when inserting an element into tracing_map
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
  - !5552  net/smc: remove device from smcd_dev_list after failed device_add()
  - !5290  crypto: algif_aead - Only wake up when ctx->more is zero
  - !5446  keys: safe concurrent user->{session,uid}_keyring access
  - drm/amdgpu: Fix a use-after-free
  - !5550  pciehp: clear p_slot->work.data after powering off a slot
  - usb: misc: fix improper handling of refcount in uss720_probe()
  - misc/uss720: fix memory leak in uss720_probe
  - !5515  netfilter: nf_tables: disallow timeout for anonymous sets
  - !5538  netfilter: nf_tables: disallow anonymous set with timeout flag
  - net: fujitsu: fix potential null-ptr-deref
  - NFC: nci: fix memory leak in nci_allocate_device
  - net/smc: remove device from smcd_dev_list after failed device_add()
  - pciehp: clear p_slot->work.data after powering off a slot
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
  - btrfs: do not BUG_ON in link_to_fixup_dir
  - md/raid5: fix atomicity violation in raid5_cache_count
  - dm: revert partial fix for redundant bio-based IO accounting
  - netfilter: nf_tables: disallow timeout for anonymous sets
  - jfs: fix array-index-out-of-bounds in dbAdjTree
  - keys: safe concurrent user->{session,uid}_keyring access
  - crypto: af_alg - Work around empty control messages without MSG_MORE
  - crypto: af_alg - Fix regression on empty requests
  - crypto: algif_aead - Only wake up when ctx->more is zero


author: chenyi <chenyi211@huawei.com> - 4.19.90-2404.2.0.0273
changelog:
  - !6231 v2  drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6083  can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - !6160  net/sched: act_mirred: don't override retval if we already lost the skb
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
  - !6152  Fix CVE-2024-26812
  - !6139  iavf: free q_vectors before queues in iavf_disable_vf
  - !6164  CVE-2021-47194
  - !6123  xen/events: close evtchn after mapping cleanup
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
  - net/sched: act_mirred: don't override retval if we already lost the skb
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - !6053  net: ip_tunnel: prevent perpetual headroom growth
  - !6002  KVM: s390: vsie: fix race during shadow creation
  - iavf: free q_vectors before queues in iavf_disable_vf
  - !6102  Fix CVE-2024-27437
  - !6070  Fix CVE-2024-26686
  - !6049  wifi: mac80211: fix race condition on enabling fast-xmit
  - !5916  ext4: fix double-free of blocks due to wrong extents moved_len
  - xen/events: close evtchn after mapping cleanup
  - !6099  vfio/pci: Lock external INTx masking ops
  - !6032  gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5899  dm-crypt: don't modify the data when using authenticated encryption
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
  - vfio/pci: Lock external INTx masking ops
  - !6042  nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6030  Fix CVE-2024-26685
  - !6015  btrfs: don't drop extent_map for free space inode on write error
  - !5963  btrfs: dev-replace: properly validate device names
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand()
  - fs/proc: do_task_stat: use __for_each_thread()
  - exit: Use the correct exit_code in /proc/<pid>/stat
  - net: ip_tunnel: prevent perpetual headroom growth
  - wifi: mac80211: fix race condition on enabling fast-xmit
  - !5999  mm/swap: fix race when skipping swapcache
  - nilfs2: fix data corruption in dsync block recovery for small block sizes
  - !6019  net/sched: act_mirred: use the backlog for mirred ingress
  - !6010  PM / devfreq: Synchronize devfreq_monitor_[start/stop
  - !5846  ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
  - !5994  ipv6: sr: fix possible use-after-free and null-ptr-deref
  - nilfs2: fix potential bug in end_buffer_async_write
  - nilfs2: fix buffer corruption due to concurrent device reads
  - !5951  RDMA/qedr: Fix qedr_create_user_qp error flow
  - net/sched: act_mirred: use the backlog for mirred ingress
  - btrfs: don't drop extent_map for free space inode on write error
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop]
  - !5961  fbdev: savage: Error out if pixclock equals zero
  - KVM: s390: vsie: fix race during shadow creation
  - mm/swap: fix race when skipping swapcache
  - ipv6: sr: fix possible use-after-free and null-ptr-deref
  - !5875 v3  CVE-2024-26771
  - !5926  RDMA/srpt: Support specifying the srpt_service_guid parameter
  - btrfs: dev-replace: properly validate device names
  - fbdev: savage: Error out if pixclock equals zero
  - !5778  ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
  - RDMA/qedr: Fix qedr_create_user_qp error flow
  - !5830  fbdev: sis: Error out if pixclock equals zero
  - RDMA/srpt: Support specifying the srpt_service_guid parameter
  - ext4: fix double-free of blocks due to wrong extents moved_len
  - dm-crypt: don't modify the data when using authenticated encryption
  - !5807  nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe
  - dmaengine: ti: edma: Fix error return code in edma_probe()
  - dmaengine: ti: edma: add missed operations
  - dmaengine: ti: edma: fix missed failure handling
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
  - fbdev: sis: Error out if pixclock equals zero
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2404.3.0.0274
changelog:
  - !6313  fixup CVE-2024-26908
  - !6447  can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
  - !6309 v5  ima: Avoid blocking in RCU read-side critical section
  - !6405  wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - !6466  bpf: Fix hashtab overflow check on 32-bit arches
  - !6396  tracing/trigger: Fix to return error if failed to alloc snapshot
  - !6278  Bluetooth: Avoid potential use-after-free in hci_error_reset
  - bpf: Fix hashtab overflow check on 32-bit arches
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
  - !6203  ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - !6292  aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - !6301 v2  tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - !6266  usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
  - tracing/trigger: Fix to return error if failed to alloc snapshot
  - !6290  CVE-2024-24861
  - x86/xen: Add some null pointer checking to smp.c
  - ima: Avoid blocking in RCU read-side critical section
  - !6269  scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  - !6276  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
  - !6277  gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - !6275  arp: Prevent overflow in arp_req_get().
  - !6280  scsi: advansys: Fix kernel pointer leak
  - !6177  arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - !6176  arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - !6075  Fix CVE-2024-26764
  - scsi: advansys: Fix kernel pointer leak
  - Bluetooth: Avoid potential use-after-free in hci_error_reset
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - arp: Prevent overflow in arp_req_get().
  - !6084  netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
  - !6246  ubi: Check for too small LEB size in VTBL code
  - ubi: Check for too small LEB size in VTBL code
  - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
  - arm64/mpam: Not allowed setting 0 to cache portion bit mask
  - arm64/mpam: return EOPNOTSUPP when changing rmid of monitor group or resource group with monitor
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio


author: chenyi <chenyi211@huawei.com> - 4.19.90-2405.1.0.0275
changelog:
  - !6858  CVE-2024-26883
  - !6836  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6845  erofs: fix pcluster use-after-free on UP platforms
  - !6827  fat: fix uninitialized field in nostale filehandles
  - !6807  CVE-2024-26923
  - !6847  ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Check for integer overflow when using roundup_pow_of_two()
  - !6758  CVE-2022-48664
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
  - erofs: fix pcluster use-after-free on UP platforms
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !6795  rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - fat: fix uninitialized field in nostale filehandles
  - !6777  tun: Fix xdp_rxq_info's queue_index when detaching
  - !6803  scsi: target: core: Add TMF to tmr_list handling
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - af_unix: Fix garbage collector racing against connect()
  - scsi: target: core: Add TMF to tmr_list handling
  - !6705  quota: fix CVE-2024-26878
  - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path
  - tun: Fix xdp_rxq_info's queue_index when detaching
  - !6674  cifs: fix underflow in parse_server_interfaces()
  - !6494 v2  oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - !6745  PCI/IOV: Improve performance of creating VFs concurrently
  - !6754  binder: check offset alignment in binder_get_object()
  - !6746 v3  openEuler-1.0-LTS: bugfix for mm
  - !6716  CVE-2024-26922
  - btrfs: fix hang during unmount when stopping a space reclaim worker
  - Btrfs: fix crash during unmount due to race with delayed inode workers
  - binder: check offset alignment in binder_get_object()
  - !6652  geneve: make sure to pull inner header in geneve_rx()
  - mm/madvise: fix potential pte_unmap_unlock pte error
  - PCI/IOV: Improve performance of creating VFs concurrently
  - !6664  drm/bridge: adv7511: fix crash on irq during probe
  - !6653  net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - !6510  cachefiles: fix memory leak in cachefiles_add_cache()
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
  - drm/amdgpu: restrict bo mapping within gpu address limits
  - drm/amdgpu: check alignment on CPU page for bo map
  - quota: Fix potential NULL pointer dereference
  - quota: check time limit when back out space/inode change
  - quota: code cleanup for __dquot_alloc_space()
  - !6662  sched/rt: Disallow writing invalid values to sched_rt_period_us
  - !6661  sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - !6659  sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - !6578  drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - !6641  CVE-2024-26863
  - cifs: fix underflow in parse_server_interfaces()
  - !6646  fix race between rebuild scheduler domains and hotplug work
  - drm/bridge: adv7511: fix crash on irq during probe
  - sched/rt: Disallow writing invalid values to sched_rt_period_us
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value
  - !6642 v3  x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
  - geneve: make sure to pull inner header in geneve_rx()
  - !6621  amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - cpuset: fix race between rebuild scheduler domains and hotplug work
  - !6617  net/bnx2x: Prevent access to a freed page in page_pool
  - !6611  net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
  - hsr: Fix uninit-value access in hsr_get_node()
  - net: hsr: fix placement of logical operator in a multi-line statement
  - !6397  btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - !6616  drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - net/bnx2x: Prevent access to a freed page in page_pool
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - !6525 v2  CVE-2024-24860 bugfix
  - !6478  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - !6582  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - !6577  media: rc: bpf attach/detach requires write permission
  - !6560  IB/hfi1: Fix a memleak in init_credit_return
  - !6420  tty: fix read of tty->pgrp outside of ctrl_lock
  - !6436  dm: call the resume method on internal suspend
  - !6562  nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - !6481  CVE-2024-26875
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - media: rc: bpf attach/detach requires write permission
  - !6495  RDMA/srpt: Do not register event handler until srpt device is fully setup
  - !6457  CVE-2024-26813
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup
  - IB/hfi1: Fix a memleak in init_credit_return
  - !6517  scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - !6521  netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - !6454  CVE-2021-47182
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference
  - cachefiles: fix memory leak in cachefiles_add_cache()
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - mm: oom_kill: fix KABI broken by "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup"
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
  - sched: Allocate a new task_struct_resvd object for fork task
  - media: pvrusb2: fix uaf in pvr2_context_set_notify
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - vfio/platform: Create persistent IRQ handlers
  - vfio/platform: Disable virqfds on cleanup
  - scsi: core: Fix scsi_mode_sense() buffer length handling
  - scsi: core: Reshuffle response handling in scsi_mode_sense()
  - scsi: core: Fixup calling convention for scsi_mode_sense()
  - dm: call the resume method on internal suspend
  - tty: fix read of tty->pgrp outside of ctrl_lock
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve


author: chenyi <chenyi211@huawei.com> - 4.19.90-2405.3.0.0276
changelog:
  - !7194  s390/dasd: fix double module refcount decrement
  - !7059  nilfs2: prevent kernel bug at submit_bh_wbc()
  - !7163 v2  usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - !7104  KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - !7203  NTB: fix possible name leak in ntb_register_device()
  - NTB: fix possible name leak in ntb_register_device()
  - s390/dasd: fix double module refcount decrement
  - !7158 v2  Squashfs: check the inode number is not the invalid value of zero
  - !7181  nfs: fix UAF in direct writes
  - !7091  nouveau: lock the client object tree.
  - !7120 v2  clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !7089  nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - !7151 v2  scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - nfs: fix UAF in direct writes
  - !7033  Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - !7079  nvmet: fix a use-after-free
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - !7140  media: usbtv: Remove useless locks in usbtv_video_free()
  - Squashfs: check the inode number is not the invalid value of zero
  - scsi: sd: Fix sd_do_mode_sense() buffer length handling
  - !7137 v2  SUNRPC: fix a memleak in gss_import_v2_context
  - !7138  SUNRPC: fix some memleaks in gssx_dec_option_array
  - !7100  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - !7095  CVE-2024-27020
  - media: usbtv: Remove useless locks in usbtv_video_free()
  - SUNRPC: fix some memleaks in gssx_dec_option_array
  - SUNRPC: fix a memleak in gss_import_v2_context
  - !7114 v2  backport patch for thp deferred list for 4.19
  - !7034  fix CVE-2024-27001 for 4.19
  - !7032  clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - !7115  drm/radeon: add a force flush to delay work when radeon
  - !7055  scsi: qla2xxx: Fix command flush on cable pull
  - !7109  fix CVE-2024-26960
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - !6260  packet: move from strlcpy with unused retval to strscpy
  - drm/radeon: add a force flush to delay work when radeon
  - THP: avoid lock when check whether THP is in deferred list
  - mm/mmu_gather: limit free batch count and add schedule point in tlb_batch_pages_flush
  - mm, thp: do not queue fully unmapped pages for deferred split
  - !7046  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache()
  - !7053  CVE-2024-27024
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - !6970  ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - !6995 v2  net/mlx5e: Prevent deadlock while disabling aRFS
  - !7038  i40e: Fix NULL ptr dereference on VSI filter sync
  - !7037  media: v4l2-tpg: fix some memleaks in tpg_alloc
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type
  - nouveau: lock the client object tree.
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - !6992  media: edia: dvbdev: fix a use-after-free
  - nvmet: fix a use-after-free
  - !7045 v2  b43: fix CVE-2023-52644
  - !7017 v2  net: ath9k: fix CVE-2024-26897
  - nilfs2: prevent kernel bug at submit_bh_wbc()
  - !7016 v3  Fix CVE-2022-48693
  - !7012  clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - scsi: qla2xxx: Fix command flush on cable pull
  - net/rds: fix possible cp null dereference
  - net/rds: fix WARNING in rds_conn_connect_if_down
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - !6991  mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - b43: dma: Fix use true/false for bool type variable
  - !7005  media: ttpci: fix two memleaks in budget_av_attach
  - !7014  nilfs2: fix OOB in nilfs_set_de_type
  - !7001  fix CVE-2024-27010
  - i40e: Fix NULL ptr dereference on VSI filter sync
  - media: v4l2-tpg: fix some memleaks in tpg_alloc
  - !6880  media: go7007: fix a memleak in go7007_load_encoder
  - comedi: vmk80xx: fix incomplete endpoint checking
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - !6984  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6893  cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - !6958  netfilter: nf_tables: fix memleak in map from abort path
  - !6820  s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - !6940  drm: nv04: Fix out of bounds access
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
  - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
  - nilfs2: fix OOB in nilfs_set_de_type
  - !6968  CVE-2024-26974
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - !6976  nfp: flower: handle acti_netdevs allocation failure
  - media: ttpci: fix two memleaks in budget_av_attach
  - !6944  USB: core: Fix deadlock in usb_deauthorize_interface()
  - net/sched: fix kabi change in struct Qdisc
  - net/sched: Fix mirred deadlock on device recursion
  - !6870  scsi: mpt3sas: Fix use-after-free warning
  - net/mlx5e: Prevent deadlock while disabling aRFS
  - media: edia: dvbdev: fix a use-after-free
  - !6966  speakup: Avoid crash on very long word
  - !6963 v2  CVE-2024-27000
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - !6942 v2  ima: fix deadlock when traversing "ima_default_rules".
  - !6951 v2  spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - nfp: flower: handle acti_netdevs allocation failure
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
  - crypto: qat - resolve race condition during AER recovery
  - crypto: qat - fix double free during reset
  - !6881 v4  CVE-2024-26846
  - !6894  tun: limit printing rate when illegal packet received by tun dev
  - speakup: Avoid crash on very long word
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
  - serial: mxs-auart: add spinlock around changing cts state
  - serial: core: Provide port lock wrappers
  - !6883  Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - !6856  media: dvb-frontends: avoid stack overflow warnings with clang
  - netfilter: nf_tables: fix memleak in map from abort path
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - !6839  CVE-2023-52650
  - !6869 v2  media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - !6867 v2  nouveau: fix instmem race condition around ptr stores
  - USB: core: Fix deadlock in usb_deauthorize_interface()
  - !6852  serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - ima: fix deadlock when traversing "ima_default_rules".
  - drm: nv04: Fix out of bounds access
  - tun: limit printing rate when illegal packet received by tun dev
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - nvme-fc: do not wait in vain when unloading module
  - nvme-fc: remove err_work work item
  - media: go7007: fix a memleak in go7007_load_encoder
  - scsi: mpt3sas: Fix use-after-free warning
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - nouveau: fix instmem race condition around ptr stores
  - media: dvb-frontends: avoid stack overflow warnings with clang
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - drm/tegra: dsi: Add missing check for of_find_device_by_node
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  - packet: move from strlcpy with unused retval to strscpy


author: hongrongxuan <hongrongxuan@huawei.com> - 4.19.90-2405.4.0.0277
changelog:
  - !7694  Bluetooth: af_bluetooth: Fix deadlock
  - !7701  ext4: fix corruption during on-line resize
  - !7676  sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE()
  - ext4: fix corruption during on-line resize
  - Bluetooth: af_bluetooth: Fix deadlock
  - !7573  pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
  - sched/all: Change all BUG_ON() instances in the scheduler to WARN_ON_ONCE()
  - !7547  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - !7586  powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
  - !7477  firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - !7483  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents
  - !7425  net: gtp: Fix Use-After-Free in gtp_dellink
  - !7434  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - net: gtp: Fix Use-After-Free in gtp_dellink
  - !7228  s390/zcrypt: fix reference counting on zcrypt card objects
  - !7193  CVE-2024-26921
  - !7096  fix CVE-2024-26865
  - s390/zcrypt: fix reference counting on zcrypt card objects
  - sk_buff: Fix KABI break for the modification of struct sk_buff
  - inet: inet_defrag: prevent sk release while still in use
  - inet: frags: re-introduce skb coalescing for local delivery
  - net: Fix KABI break for introducing is_skb_wmem()
  - skb_expand_head() adjust skb->truesize incorrectly
  - skbuff: introduce skb_expand_head()
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2405.5.0.0278
changelog:
  - !8066  drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - !8038  CVE-2023-52817
  - !8106  usb: dwc3: ep0: fix NULL pointer exception
  - !8059  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - !8017  perf/core: Bail out early if the request AUX area is out of bound
  - !8064  isdn: mISDN: netjet: Fix crash in nj_probe:
  - !8049  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - usb: dwc3: ep0: fix NULL pointer exception
  - !8055  drm/client: Fully protect modes[
  - !8000 v2  net/tls: Fix flipped sign in tls_err_abort() calls
  - !8032  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
  - isdn: mISDN: netjet: Fix crash in nj_probe:
  - !8056  scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
  - !7999  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
  - drm/client: Fully protect modes[] with dev->mode_config.mutex
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - !7817  netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - !7965  nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
  - !7951  sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE
  - perf/core: Bail out early if the request AUX area is out of bound
  - !7981  Fix CVE-2021-47455
  - !7901  f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
  - !7700  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - !7682  dm snapshot: fix lockup in dm_exception_table_exit
  - !7867  media: bttv: fix use after free error due to btv->timeout timer
  - !7421  x86/CPU/AMD: Update the Zenbleed microcode revisions
  - !7415  cpu/SMT: Make SMT control more robust against enumeration failures
  - !7451 v2  ip: Treat IPv4 segment's lowest address as unicast
  - !7393 v2  scsi: sr: Do not leak information in ioctl
  - !7971  fbmon: prevent division by zero in fb_videomode_from_videomode()
  - net/tls: Fix flipped sign in tls_err_abort() calls
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - !7963  ipv6: Fix infinite recursion in fib6_dump_done().
  - !7979  drm/radeon: fix a possible null pointer dereference
  - ptp: fix code indentation issues
  - ptp: Fix possible memory leak in ptp_clock_register()
  - drm/radeon: fix a possible null pointer dereference
  - fbmon: prevent division by zero in fb_videomode_from_videomode()
  - !7944 v2  netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
  - ipv6: Fix infinite recursion in fib6_dump_done().
  - sched/rt: Fix rt_runtime leaks with cpu hotplug and RT_RUNTIME_SHARE
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
  - !7811  Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
  - !7892  CVE-2023-52868
  - !7910  hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
  - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
  - !7851  netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
  - f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
  - thermal: core: prevent potential string overflow
  - !7854  net/mlx5e: fix a double-free in arfs_create_groups
  - !7794 v2  Fix CVE-2023-52656
  - media: bttv: fix use after free error due to btv->timeout timer
  - !7840  netrom: Fix a data-race around sysctl_netrom_transport_timeout
  - net/mlx5e: fix a double-free in arfs_create_groups
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
  - !7770  drm/amd/pm: fix a double-free in si_dpm_init
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout
  - !7589  irqchip/gic-v3-its: Prevent double free on error
  - !7713  CVE-2024-35936
  - !7751  Fix CVE-2023-52698
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
  - io_uring: drop any code related to SCM_RIGHTS
  - io_uring/unix: drop usage of io_uring socket
  - !7742  netrom: Fix data-races around sysctl_net_busy_read
  - !7748  drm/radeon: possible buffer overflow
  - drm/amd/pm: fix a double-free in si_dpm_init
  - calipso: fix memory leak in netlbl_calipso_add_pass()
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo()
  - net: netlabel: Fix kerneldoc warnings
  - drm/radeon: possible buffer overflow
  - netrom: Fix data-races around sysctl_net_busy_read
  - !7669  btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - dm snapshot: fix lockup in dm_exception_table_exit
  - btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - irqchip/gic-v3-its: Prevent double free on error
  - ip: Treat IPv4 segment's lowest address as unicast
  - x86/CPU/AMD: Update the Zenbleed microcode revisions
  - cpu/SMT: Make SMT control more robust against enumeration failures
  - scsi: sr: Do not leak information in ioctl


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.1.0.0279
changelog:
  - !8437  comedi: dt9812: fix DMA buffers on stack
  - !8515 v2  *** CVE-2021-47356 ***
  - !8582 v2  bcache: avoid oversized read request in cache missing code path
  - !8522  smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  - !8499  udf: Fix NULL pointer dereference in udf_symlink function
  - !8498  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - !8570  net: hamradio: fix memory leak in mkiss_close
  - !8506  CVE-2024-36015
  - !8508  memory: fsl_ifc: fix leak of private memory on probe failure
  - !8470 v2  CVE-2024-35808
  - !8050  block: prevent division by zero in blk_rq_stat_sum()
  - !8469  watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
  - !8482 v2  Fix hugetlb deadlock
  - bcache: avoid oversized read request in cache missing code path
  - !8327  wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - !8316  net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - net: hamradio: fix memory leak in mkiss_close
  - !8310  jfs: fix two
  - !8507  tty: vcc: Add check for kstrdup() in vcc_probe()
  - !8441  pinctrl: core: delete incorrect free in pinctrl_enable()
  - !8414  backport for CVE-2023-52750
  - !8449  drm/amd/pm: Update intermediate power state for SI
  - !8453  net: fix uninit-value in caif_seqpkt_sendmsg
  - !6800  block: fix overflow in blk_ioctl_discard()
  - !8068  CVE-2021-47427
  - !8102 v2  sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
  - !8413  NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
  - !8417  NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
  - !8403  can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
  - !8393  4.19: fix CVE-2024-35978
  - !8349  perf hist: Fix memory leak of a perf_hpp_fmt
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
  - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq
  - mISDN: fix possible use-after-free in HFC_cleanup()
  - memory: fsl_ifc: fix leak of private memory on probe failure
  - tty: vcc: Add check for kstrdup() in vcc_probe()
  - !8296  atm: iphase: fix possible use-after-free in ia_module_exit()
  - !8297 v2  powerpc/mm: Fix lockup on kernel exec fault
  - !8405  tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
  - ppdev: Add an error check in register_device
  - ppdev: Remove usage of the deprecated ida_simple_xx() API
  - !8423  mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
  - udf: Fix NULL pointer dereference in udf_symlink function
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  - !8354  CVE-2021-47277
  - !8386  drm/nouveau/debugfs: fix file release memory leak
  - !8452  Fix CVE-2021-47438
  - !8308  mac80211: fix use-after-free in CCMP/GCMP RX
  - !8341  net/mlx5: Properly link new fs rules into the tree
  - hugetlb: pass head page to remove_hugetlb_page()
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - hugetlb: make free_huge_page irq safe
  - hugetlb: change free_pool_huge_page to remove_pool_huge_page
  - hugetlb: call update_and_free_page without hugetlb_lock
  - hugetlb: create remove_hugetlb_page() to separate functionality
  - Revert "hugetlb: make free_huge_page irq safe"
  - Revert "hugetlbfs: fix hugetlbfs_statfs() locking"
  - !8075 v2  HID: betop: fix slab-out-of-bounds Write in betop_probe
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
  - md/dm-raid: don't call md_reap_sync_thread() directly
  - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
  - !8191  HID: usbhid: free raw_report buffers in usbhid_stop
  - !8314  mcb: fix error handling in mcb_alloc_bus()
  - !7852  CVE-2021-47407
  - net: fix uninit-value in caif_seqpkt_sendmsg
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
  - !8276  usb: udc: remove warning when queue disabled ep
  - !8142  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - !8410  iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
  - drm/amd/pm: Update intermediate power state for SI
  - !8175  jfs: fix array-index-out-of-bounds in diAlloc
  - pinctrl: core: delete incorrect free in pinctrl_enable()
  - comedi: dt9812: fix DMA buffers on stack
  - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
  - !8292  netfilter: conntrack: serialize hash resizes and cleanups
  - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
  - arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
  - arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+
  - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
  - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
  - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
  - !8348  ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
  - !8324  drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - !8394  hugetlbfs: fix hugetlbfs_statfs() locking
  - !8188 v2  ACPI: video: check for error while searching for backlight device parent
  - hugetlbfs: fix hugetlbfs_statfs() locking
  - Bluetooth: Fix memory leak in hci_req_sync_complete()
  - !8303  ipvlan: add ipvlan_route_v6_outbound() helper
  - drm/nouveau/debugfs: fix file release memory leak
  - !8211  fix CVE-2024-35877
  - !7964 v2  vt: fix unicode buffer corruption when deleting characters
  - !8160 v2  ipack: ipoctal: fix stack information leak
  - !8100  arch related major bugfix before 2023
  - !8192  atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
  - kvm: fix previous commit for 32-bit builds
  - kvm: avoid speculation-based attacks from out-of-range memslot accesses
  - !8181 v3  cpu/hotplug: Don't offline the last non-isolated CPU
  - perf hist: Fix memory leak of a perf_hpp_fmt
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
  - !8205  fix hugetlb deadlock
  - !8061  *** CVE-2021-47475 ***
  - !8252  sysv: don't call sb_bread() with pointers_lock held
  - !8248  gfs2: ignore negated quota changes
  - !8206  RDMA: Verify port when creating flow rule
  - net/mlx5: Properly link new fs rules into the tree
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
  - !8219  tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
  - !8223  CVE-2023-52804
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - mcb: fix error handling in mcb_alloc_bus()
  - jfs: fix array-index-out-of-bounds in dbFindLeaf
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  - mac80211: fix use-after-free in CCMP/GCMP RX
  - !8209  net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
  - !8257 v5  can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
  - ipvlan: add ipvlan_route_v6_outbound() helper
  - powerpc/mm: Fix lockup on kernel exec fault
  - atm: iphase: fix possible use-after-free in ia_module_exit()
  - netfilter: conntrack: serialize hash resizes and cleanups
  - !8062  CVE-2024-35789
  - usb: udc: remove warning when queue disabled ep
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
  - !7804 v2  selinux: avoid dereference of garbage after mount failure
  - sysv: don't call sb_bread() with pointers_lock held
  - !8186  ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - !8208  ocfs2: mount fails with buffer overflow in strlen
  - !8207  drm/msm: Fix null pointer dereference on pointer edp
  - gfs2: ignore negated quota changes
  - !7470  x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - !7699  CVE-2023-52669
  - !7868  CVE-2024-35995
  - fs/jfs: Add validity check for db_maxag and db_agpref
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - jfs: fix divide error in dbNextAG
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
  - x86/mm/pat: fix VM_PAT handling in COW mappings
  - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
  - ocfs2: mount fails with buffer overflow in strlen
  - drm/msm: Fix null pointer dereference on pointer edp
  - !8180  Fix CVE-2021-47495
  - RDMA: Verify port when creating flow rule
  - hugetlb: make free_huge_page irq safe
  - mm/hugetlb: defer freeing of huge pages if in non-task context
  - !8146  pinctrl: single: fix potential NULL dereference
  - !8164  sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
  - !8131  scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
  - HID: usbhid: free raw_report buffers in usbhid_stop
  - ACPI: video: check for error while searching for backlight device parent
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream
  - cpu/hotplug: Don't offline the last non-isolated CPU
  - usbnet: fix error return code in usbnet_probe()
  - usbnet: sanity check for maxpacket
  - jfs: fix array-index-out-of-bounds in diAlloc
  - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
  - ipack: ipoctal: fix stack information leak
  - pinctrl: single: fix potential NULL dereference
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
  - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
  - x86/ioapic: Unbreak check_timer()
  - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
  - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
  - HID: betop: fix slab-out-of-bounds Write in betop_probe
  - scsi: iscsi: Fix iscsi_task use after free
  - scsi: iscsi: Have abort handler get ref to conn
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
  - comedi: vmk80xx: fix expression for tx buffer size
  - comedi: vmk80xx: fix transfer-buffer overflows
  - block: prevent division by zero in blk_rq_stat_sum()
  - vt: fix unicode buffer corruption when deleting characters
  - ACPI: CPPC: Fix access width used for PCC registers
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses
  - ACPI: CPPC: Fix up I/O port access in cpc_read()
  - ACPI: CPPC: Implement support for SystemIO registers
  - KVM: x86: Handle SRCU initialization failure during page track init
  - selinux: avoid dereference of garbage after mount failure
  - crypto: s390/aes - Fix buffer overread in CTR mode
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - block: fix overflow in blk_ioctl_discard()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.2.0.0281
changelog:
  - !8895  net: fix out-of-bounds access in ops_init
  - !8694  clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - !8858  PCI/PM: Drain runtime-idle callbacks before driver removal
  - !8626  fs/9p: only translate RWX permissions for plain 9P2000
  - !8490  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - !8777  memory: fsl_ifc: fix leak of IO mapping on probe failure
  - !8806  media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8664  mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - !8865  staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - !8888  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - !8825  watchdog: Fix possible use-after-free in wdt_startup()
  - !8654  nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8358  perf report: Fix memory leaks around perf_tip()
  - !8552  tipc: fix a possible memleak in tipc_buf_append
  - !8851  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - net: fix out-of-bounds access in ops_init
  - !8802  CVE-2021-47294
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  - !8628  erspan: make sure erspan_base_hdr is present in skb->head
  - !8716  CVE-2024-35910
  - !8325  ocfs2: fix data corruption after conversion from inline format
  - !8729  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8636  ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - watchdog: Fix possible use-after-free in wdt_startup()
  - !8773  sched: remove WARN_ON on checking rq->tmp_alone_branch
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe
  - !8678  can: pch_can: pch_can_rx_normal: fix use after free
  - netrom: Fix use-after-free of a listening socket.
  - netrom: Decrease sock refcount when sock timers expire
  - !8676  net: tulip: de4x5: fix the problem that the array 'lp->phy[8
  - !8708  media: imon: fix access to invalid resource for the second interface
  - !8707  regmap: Fix possible double-free in regcache_rbtree_exit()
  - !8706  isdn: mISDN: Fix sleeping function called from invalid context
  - !8705  usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8357  nilfs2: fix underflow in second superblock position calculations
  - !8681  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - !8484  scsi: megaraid_sas: Fix resource leak in case of probe failure
  - memory: fsl_ifc: fix leak of IO mapping on probe failure
  - sched: remove WARN_ON on checking rq->tmp_alone_branch
  - !8620  CVE-2024-35896
  - !8526  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - !8336  tcp: fix page frag corruption on page fault
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  - !8521  isofs: Fix out of bound access for corrupted isofs image
  - !7786  powerpc/powernv: Add a null pointer check in opal_event_init()
  - !8568  gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - tcp: properly terminate timers for kernel sockets
  - mptcp: add sk_stop_timer_sync helper
  - !8478  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - !8366  net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - !8544  CVE-2021-47358
  - !8577  mmc: sdhci-msm: pervent access to suspended controller
  - !8579  net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - !8603  rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - media: imon: fix access to invalid resource for the second interface
  - regmap: Fix possible double-free in regcache_rbtree_exit()
  - isdn: mISDN: Fix sleeping function called from invalid context
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
  - !8516  CVE-2021-47409
  - !8465  drm/amd/display: Avoid NULL dereference of timing generator
  - !8500  pwm: Fix double shift bug
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  - can: pch_can: pch_can_rx_normal: fix use after free
  - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
  - !8402  i40e: Fix freeing of uninitialized misc IRQ vector
  - !8398  comedi: ni_usb6501: fix NULL-deref in command paths
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
  - !8464  i2c: smbus: fix NULL function pointer dereference
  - !8434  iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - !8411  platform/x86: wmi: Fix opening of char device
  - ipv6: Fix potential uninit-value access in __ip6_make_skb()
  - !8307  s390/dasd: protect device queue against concurrent access
  - !8444  CVE-2021-47511
  - !8443 v2  ipack: ipoctal: fix module reference leak
  - !8611  smackfs: restrict bytes count in smk_set_cipso()
  - !8610  media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - !8609  can: peak_pci: peak_pci_remove(): fix UAF
  - !8430  drm/sched: Avoid data corruptions
  - !8557  net: cdc_eem: fix tx fixup skb leak
  - !8365  efi/capsule-loader: fix incorrect allocation size
  - !8333  soc: qcom: llcc: Handle a second device without data corruption
  - erspan: make sure erspan_base_hdr is present in skb->head
  - fs/9p: only translate RWX permissions for plain 9P2000
  - netfilter: complete validation of user input
  - netfilter: validate user input for expected length
  - smackfs: restrict bytes count in smk_set_cipso()
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
  - can: peak_pci: peak_pci_remove(): fix UAF
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
  - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  - mmc: sdhci-msm: pervent access to suspended controller
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
  - net: cdc_eem: fix tx fixup skb leak
  - tipc: fix a possible memleak in tipc_buf_append
  - staging: greybus: uart: fix tty use after free
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  - isofs: Fix out of bound access for corrupted isofs image
  - usb: dwc2: Fix memory leak in dwc2_hcd_init
  - usb: dwc2: check return value after calling platform_get_resource()
  - pwm: Fix double shift bug
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
  - scsi: megaraid_sas: Fix resource leak in case of probe failure
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  - drm/amd/display: Avoid NULL dereference of timing generator
  - i2c: smbus: fix NULL function pointer dereference
  - ALSA: pcm: oss: Fix negative period/buffer sizes
  - ALSA: pcm: oss: Fix a few more UBSAN fixes
  - ipack: ipoctal: fix module reference leak
  - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
  - drm/sched: Avoid data corruptions
  - platform/x86: wmi: Fix opening of char device
  - i40e: Fix freeing of uninitialized misc IRQ vector
  - comedi: ni_usb6501: fix NULL-deref in command paths
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
  - efi/capsule-loader: fix incorrect allocation size
  - perf report: Fix memory leaks around perf_tip()
  - nilfs2: fix underflow in second superblock position calculations
  - tcp: fix page frag corruption on page fault
  - soc: qcom: llcc: Handle a second device without data corruption
  - ocfs2: fix data corruption after conversion from inline format
  - s390/dasd: protect device queue against concurrent access
  - powerpc/powernv: Add a null pointer check in opal_event_init()


author: chenyi <chenyi211@huawei.com> - 4.19.90-2406.3.0.0282
changelog:
  - !9086 v2  dhugetlb: use rcu lock to protect hpool
  - !8796  CVE-2023-52810
  - !8699  wifi: cfg80211: check A-MSDU format more carefully
  - !9123  staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  - !9005  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !9113  IB/qib: Protect from buffer
  - !9119  PCI: aardvark: Fix kernel panic during PIO transfer
  - !9058  watchdog: Fix possible use-after-free by calling del_timer_sync()
  - !9053  soc: fsl: qbman: Use raw spinlock for cgr_lock
  - PCI: aardvark: Fix kernel panic during PIO transfer
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
  - PCI: aardvark: Don't rely on jiffies while holding spinlock
  - !9091  RDMA/cma: Fix rdma_resolve_route() memory leak
  - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
  - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
  - !9037  fix CVE-2021-47509
  - RDMA/cma: Fix rdma_resolve_route() memory leak
  - dhugetlb: use rcu lock to protect hpool
  - !8291 Fix CVE-2023-52836
  - !8574  net: ieee802154: fix null deref in parse dev addr
  - !9017  misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - !9045  ALSA: seq: Fix race of snd_seq_timer_open()
  - !9046  net: rds: fix memory leak in rds_recvmsg
  - !8632  phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - !8695  net: macb: fix use after free on rmmod
  - !4633 Add support for Hygon family 18h model 5h HD-Audio
  - !9057  CVE-2021-47261
  - !8637  dyndbg: fix old BUG_ON in >control parser
  - !8698  net: batman-adv: fix error handling
  - !8715  net/sched: act_skbmod: prevent kernel-infoleak
  - !8775  llc: verify mac len before reading mac header
  - watchdog: Fix possible use-after-free by calling del_timer_sync()
  - IB/mlx5: Fix initializing CQ fragments buffer
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - !9022  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - !8786  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - !8704  usb: fix various gadget panics on 10gbps cabling
  - !9013  net: encx24j600: check error in devm_regmap_init_encx24j600
  - net: rds: fix memory leak in rds_recvmsg
  - ALSA: seq: Fix race of snd_seq_timer_open()
  - !9036  IB/hfi1: Restore allocated resources on failed copyout
  - !4620 Some fixes for Hygon model 4h~6h processors
  - !4630 Add support for Hygon model 6h L3 PMU
  - ALSA: pcm: oss: Limit the period size to 16MB
  - ALSA: pcm: oss: Fix potential out-of-bounds shift
  - !8549  batman-adv: Avoid infinite loop trying to resize local TT
  - !8763  tipc: fix UAF in error path
  - IB/hfi1: Restore allocated resources on failed copyout
  - !8956  net: ti: fix UAF in tlan_remove_one
  - !8959  comedi: vmk80xx: fix bulk-buffer overflow
  - !8740  CVE-2024-36914
  - !8824  igb: Fix use-after-free error during reset
  - !8987  bna: ensure the copied buf is NUL terminated
  - !9026  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - !8923  i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - !8961  nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - !8875  drm/vmwgfx: Fix invalid reads in fence signaled events
  - !8883  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one
  - net: encx24j600: check error in devm_regmap_init_encx24j600
  - !8998  i2c: acpi: fix resource leak in reconfiguration device addition
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  - !8991  clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - !8992  fix CVE-2024-36905
  - i2c: acpi: fix resource leak in reconfiguration device addition
  - !8868  ipv6: prevent NULL dereference in ip6_output()
  - net: relax socket state check at accept time.
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  - !8737  ubifs: Set page uptodate in the correct place
  - !8668  phonet/pep: fix racy skb_queue_empty() use
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
  - bna: ensure the copied buf is NUL terminated
  - nfp: Fix memory leak in nfp_cpp_area_cache_add()
  - comedi: vmk80xx: fix bulk-buffer overflow
  - net: ti: fix UAF in tlan_remove_one
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  - drm/vmwgfx: Fix invalid reads in fence signaled events
  - ipv6: prevent NULL dereference in ip6_output()
  - igb: Fix use-after-free error during reset
  - fs/jfs: Add check for negative db_l2nbperpage
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  - llc: verify mac len before reading mac header
  - tipc: fix UAF in error path
  - drm/amd/display: Skip on writeback when it's not applicable
  - ubifs: Set page uptodate in the correct place
  - net/sched: act_skbmod: prevent kernel-infoleak
  - usb: fix various gadget panics on 10gbps cabling
  - wifi: cfg80211: check A-MSDU format more carefully
  - net: batman-adv: fix error handling
  - net: macb: fix use after free on rmmod
  - phonet/pep: fix racy skb_queue_empty() use
  - dyndbg: fix old BUG_ON in >control parser
  - phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
  - net: ieee802154: fix null deref in parse dev addr
  - batman-adv: Avoid infinite loop trying to resize local TT
  - locking/ww_mutex/test: Fix potential workqueue corruption
  - EDAC/amd64: Adjust UMC channel for Hygon family 18h model 6h
  - x86/amd_nb: Get DF ID from F5 device for Hygon family 18h model 6h
  - EDAC/amd64: Fix intlv_num_chan for Hygon family 18h model 4h
  - EDAC/amd64: Revert hi_addr_offset for Hygon family 18h model 4h
  - ALSA: hda: Fix single byte write failure issue for Hygon
  - ALSA: hda: Add Hygon HD-Audio support
  - perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 6h


author: zhongjiawei<zhongjiawei1@huawei.com> - 1.2.0-213
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker


author: xinghe <xinghe2@h-partners.com> - 4.11.12-30
changelog:
  - Type:cves
  - CVE:CVE-2022-2127 CVE-2023-34966 CVE-2023-34967
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-34966 CVE-2023-34967


author: zhongjiawei<zhongjiawei1@huawei.com> - 18.09.0-253
changelog:
  - Type:CVE
  - CVE:CVE-2023-28840,CVE-2023-28841,CVE-2023-28842
  - SUG:NA
  - DESC:fix CVE-2023-28840,CVE-2023-28841,CVE-2023-28842


author: chenjiankun<chenjiankun1@huawei.com> - 18.09.0-256
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:repalce unix.Rmdir with os.RemoveAll when remove mount point dir


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
changelog:
  - Type: bugfix
  - CVE:  NA
  - SUG:  NA
  - DESC: fix the bug when runc failed to update fat container memory value


author: yexiao<yexiao7@huawei.com> - 202002-17
changelog:
  - fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727


author: yexiao<yexiao7@huawei.com> - 202002-19
changelog:
  - fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235


author: Jiabo Feng<fengjiabo1@huawei.com> - 202002-21
changelog:
  - update release. commit(2723c0159f0f84e2169b124dca9f4eb0dc6863f9) has been merged into commit(a8c3711f01ae9a152f0e8cede2547b4c54712400)


author: wangkai <13474090681@163.com> - 1:2.3.0-1
changelog:
  - Update to 2.3.0 for fix CVE-2022-48682
  - Add ncurses mode for interactive file deletion (plain mode still available via --plain or ./configure).
  - Add --minsize --maxsize --time --order=ctime --log --deferconfirmation --cache option.
  - Use configure script for installation (Autotools/Automake).
  - Rename cs command ("clear all selections") from cs to csel.
  - Rename igs command ("invert selections") from igs to isel.
  - Add "prune" command as synonym for DELETE key.
  - Clear selections after deleting files via prune/DELETE.
  - Fix dependency issues when fdupes is configured to not use ncurses.
  - Do not enter ncurses mode when --immediate option given.


author: lvfei <lvfei@kylinos.cn> - 79.0-12
changelog:
  - Fix for expat CVE-2021-45960 CVE-2021-46143
    CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: fuanan <fuanan3@h-partners.com> - 2.27.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
  - SUG:NA
  - DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815


author: fuanan <fuanan3@h-partners.com> - 2.27.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:enable multithreading compilation and installation,
         move Git.3pm.gz to perl-Git,avoid installation conflicts,
         change BuildRequires from pcre-devel to pcre2-devel.


author: huyubiao <huyubiao@huawei.com> - 2.27.0-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
         Delete git-core-doc from git, git-core-doc is provided by git-help.


author: fuanan <fuanan3@h-partners.com> - 2.27.0-19
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: chengyechun <chengyechun1@huawei.com> - 2.28-99
changelog:
  - Type:CVE
  - ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
  - SUG:NA
  - DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602


author: chengyechun <chengyechun1@huaiwe.com> - 2.28-101
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:nscd: Use errval, not errno to guide cache update
         nsce :Skip unusable entries in first pass in prune_cache


author: hanchao <hanchao63@huawei.com> - 1.15.7-28
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC: fix CVE-2023-29402,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.15.7-34
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: hanchao <hanchao63@huawei.com> - 1.15.7-39
changelog:
  - Type:CVE
  - CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
  - SUG:NA
  - DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289


author: wangshuo <wangshuo@kylinos.cn> - 1.15.7-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:disk/diskfilter: Check calloc() result for NULL
         kern/buffer: Handle NULL input pointer in grub_buffer_free()
         disk/diskfilter: Don't make a RAID array with more than 1024 disks
         loader/multiboot_elfxx: Fix memory leak
         loader/linux: Ensure the newc pathname is NULL-terminated
         term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
         normal/cmdline: Fix two related integer underflows
         fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
         fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
         fs/xfs: Fix memory leaks in XFS module
         kern/file: Fix error handling in grub_file_open()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-32
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-36
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.04-38
changelog:
  - Type:CVE
  - CVE:CVE-2024-1048
  - SUG:NA
  - DESC:grub-set-bootflag: Fix for CVE-2024-1048
         commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
         kern/acpi: Skip NULL entries in RSDT and XSDT
         util/grub-mount: Check file path sanity
         kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: yaoxin <yaoxin30@h-parters.com> - 1.12.1-1
changelog:
  - Update to 1.12.1 and fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501


author: chenzhitao <chenzhitao8@huawei.com> - 2.4.43-16
changelog:
  - Type:CVE
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2022-28614 CVE-2022-26377 CVE-2022-30522 CVE-2022-28615  CVE-2022-31813


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-19
changelog:
  - Type:CVE
  - ID:CVE-2022-36760, CVE-2006-20001, CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-21
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyechun1@huawei.com> - 2.4.43-23
changelog:
  - Type:CVE
  - ID:CVE-2023-31122, CVE-2023-45802
  - SUG:restart
  - DESC:fix CVE-2023-31122 and CVE-2023-45802


author: chengyechun <chengyechun1@huaiwe.com> - 2.4.43-24
changelog:
  - Type:CVE
  - ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
  - SUG:NA
  - DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream


author: yangjiaqi <yangjiaqi16@huawei.com> - 2.0.18-15
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: keep the service status unchanged after iSulad service upgrade


author: wuchangsheng <wuchangsheng2@huawei.com> - 5.5.0-10
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:tc flowerr Fix buffer overflow on large labels
         q_cake allow changing to diffserv3


author: jiangheng <jiangheng14@huawei.com> - 5.5.0-11
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:fix devlink health dump command without arg
         tc: em_u32: fix offset parsing
         l2tp: fix typo in AF_INET6 checksum JSON print
         bridge: fix memory leak when doing fdb get
         ip neigh: fix memory leak when doing 'get'
         ip address: fix memory leak when specifying device


author: liubo <liubo335@huawei.com> - 5.5.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: fix socket leak in rtnl_open_byproto()
         lnstat: fix strdup leak in -w argument parsing
         tc_util: Fix parsing action control with space and slash
         remove libcap dependency


author: liubo <liubo335@huawei.com> - 5.5.0-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:nexthop: fix error reporting in filter dump
         bridge: report correct version
         q_cake: Make fwmark uint instead of int
         tc: m_action: check cookie hex string len
         iproute2: fix MPLS label parsing
         tc_util: detect overflow in get_size
         Revert "bpf: replace snprintf with asprintf when dealing with long buffers"
         tc/m_estimator: Print proper value for estimator interval in raw.
         iproute2: ip maddress: Check multiaddr length
         iproute2: ip addr: Organize flag properties structurally
         addr: Fix noprefixroute and autojoin for IPv4
         devlink: fix memory leak in cmd_dev_flash()
         tipc: bail out if algname is abnormally long
         tipc: bail out if key is abnormally long
         utils: Fix BIT() to support up to 64 bits on all architectures
         ipmonitor: Fix recvmsg with ancillary data
         devlink: fix infinite loop on flash update for drivers without status
         tc: u32: Fix key folding in sample option
         lnstat: fix buffer overflow in header output
         nstat: print useful error messages in abort() cases


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.402-b06.0
changelog:
  - modified 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - modified Improve_AlgorithmConstraints_checkAlgorithm_performance.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified g1gc-numa-aware-Implementation.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified 8203699.patch
  - add Add-CaptchaTest-and-fix-KAE-Testcases.patch
  - add 8177146-MethodHandles.Lookup-bind-allows-illegal-pro.patch
  - add Add-compiling-option-GS-when-building-windows-JDK.patch
  - add Fix-for-JDK-8137099-for-G1-is-to-not-return-null-unt.patch
  - add 8273553-sun.security.ssl.SSLEngineImpl.closeInbound-.patch
  - add 8260923-Add-more-tests-for-SSLSocket-input-output-sh.patch
  - add 8057967-CallSite-dependency-tracking-scales-devastat.patch
  - add 8079205-CallSite-dependency-tracking-is-broken-after.patch


author: Benshuai5D <benshuai5d@163.com> - 1:1.8.0.402-b06.4
changelog:
  - add 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - add 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - add 8220175-serviceability-dcmd-framework-VMVersionTest..patch
  - add 8149343-assert-rp-num_q-no_of_gc_workers-failed-sani.patch
  - add 8139595-MethodHandles-remove_dependent_nmethod-is-no.patch
  - add 8143408-Crash-during-InstanceKlass-unloading-when-cl.patch
  - add GCC-12-reports-some-compiler-warnings.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> -1:1.8.0.412-b08.0
changelog:
  - del 8322725-tz-Update-Timezone-Data-to-2023d.patch
  - del 8325150-tz-Update-Timezone-Data-to-2024a.patch
  - del fix-the-length-value-of-ciBlock-in-ciMethodBlocks.cp.patch
  - modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - modified 8057743-process-Synchronize-exiting-of-threads-and-p.patch
  - modified add-missing-test-case.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase2.patch
  - modified support-numactl-for-hadoop-yarn.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch


author: kuenking111 <wangkun49@huawei.com> -1:1.8.0.412-b08.3
changelog:
  - add DependencyContext-mark_dependent_nmethods-crash-in-Dynamic-cds-mode.patch
  - add 8138922-StubCodeDesc-constructor-publishes-partially-constructed.patch


author: songliyang <songliyang@kylinos.cn> -1:1.8.0.412-b08.4
changelog:
  - fix LoongArch64-support.patch error that apply patch on loongarch64 in prep stage
  - fix loongson vendor error


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.22.7-0
changelog:
  - update to 11.0.22+7(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch


author: huangjie <huangjie150@huawei.com> - 1:11.0.23.9-0
changelog:
  - modified 8224675-Late-GC-barrier-insertion-for-ZGC.patch
  - modified delete_expired_certificates.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.8.7-2
changelog:
  - add add-Parallel-Full-gc-mark-stack-draining-should.patch
  - add add-8271579-G1-Move-copy-before-CAS-in-do_copy.patch
  - add add-8267185-Add-string-deduplication-support-to.patch
  - add add-8292296-Use-multiple-threads-to-process-Par.patch
  - add fix-cds-SignedJar_java-test-fails.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-0.rolling
changelog:
  - fix 8253495-CDS-generates-non-deterministic-outpu.patch
  - fix add-8267185-Add-string-deduplication-support-to.patch
  - fix add-version-txt.patch


author: kuenking111 <wangkun49@huawei.com> - 1:17.0.9.8-1
changelog:
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - add 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - add 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8168469-Memory-leak-in-JceSecurity.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch


author: neu-mobi <liuyulong.work@qq.com> - 1:17.0.10.9-0.rolling
changelog:
  - del 8168469-Memory-leak-in-JceSecurity.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
  - del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
  - del 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - del 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - del 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
  - del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
  - modified 8253495-CDS-generates-non-deterministic-outpu.patch
  - modified 8280872-Reorder-code-cache-segments-to-improv.patch
  - modified add-version-txt.patch
  - add Add-problemlist.patch
  - add puyuan-jdk17.0.9-patch.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:17.0.11.9-0.rolling
changelog:
  - del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
  - modify puyuan-jdk17.0.9-patch.patch


author: songliyang <songliyang@kylinos.cn> - 1:17.0.11.9-1
changelog:
  - rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
  - fix loongarch vendor error and delete redundant vendor args


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: zhangxiaoyu<zhangxiaoyu58@huawei.com> - 2.0.9-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix update cpu-rt period failed and fix layer size type as int64


author: jikai<jikai11@huawei.com> - 2.0.9-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix potential log error, empty pointer reference and overflow


author: zhangyao<zhangyao108@huawei.com> - 2.35.2-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-column-segmentation-fault-on-invalid-unicode-input-passed-to-s-option.patch
         backport-su-offer-usernames-rather-than-files.patch
         backport-Fix-memory-leaks-in-the-chcpu.patch
         backport-logger-fix-prio-prefix-doesnot-use-priority-default.patch
         backport-mcookie-fix-infinite-loop-when-use-f.patch
         backport-logger-realloc-buffer-when-header-size-changed.patch
         backport-logger-fix-size-use-for-stdin.patch
         backport-vipw-flush-stdout-before-getting-answer.patch
         backport-chfn-Make-readline-prompt-for-each-field-on-a-separate-line.patch
         backport-chfn-flush-stdout-before-reading-stdin-and-fix-uninitialized-variable.patch
         backport-chsh-fflush-stdout-before-reading-from-stdin.patch
         backport-login-Restore-tty-size-after-calling-vhangup.patch
         backport-lsblk-fix-endless-loop-if-device-specified-more-than-once.patch
         backport-libblkid-avoid-buffer-overflow-in-ocfs-superblock-parsing.patch
         backport-libblkid-use-checksum-for-jmicron.patch
         backport-libblkid-cleanup-indentation.patch
         backport-libblkid-fix-jmicron-checksum-and-LE-to-CPU.patch
         backport-libblkid-nvidia_raid-verify-superblock-size.patch
         backport-libblkid-nvidia_raid-validate-checksum.patch


author: cenhuilin <cenhuilin@kylinos.cn> - 2.35.2-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:sync community patches
         backport-uuidd-fix-open-lock-state-issue.patch


author: yanglu <yanglu72@h-partners.com> - 8.16.1-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add require procmail, Fix send mail error which no procmail command


author: yanglu<yanglu72@h-partners.com> - 8.16.1-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix newaliases command error and postfix service start execption after sendmail install


author: gaihuiying <eaglegai@163.com> - 0.9.4-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport upstream patches:
         add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: renmingshuai <renmingshuai@huawei.com> - 0.9.4-9
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-48795,CVE-2023-6918
  - SUG:NA
  - DESC:fix CVE-2023-6004,CVE-2023-48795 and CVE-2023-6918


author: yaoxin <yao_xin001@hoperun.com> - 2.20.0-1
changelog:
  - Upgrade to 2.20.0 for fix CVE-2023-39929
  - Fix minor issue about printf data type and value range
  - av1: Revise offsets comments for av1 encode
  - jpeg: add support for crop and partial decode
  - Drop no longer applicable vaGetDriverNames check


author: jiangjiacheng <jiangjiacheng@huawei.com>
changelog:
  - util: keep track of full GSource object not source ID number
  - rpc: mark source returned by virEventGLibAddSocketWatch as unused
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: wangkai <wangkai385@huawei.com> - 3.2.8-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: yaoxin <yao_xin001@hoperun.com> - 8.0-1
changelog:
  - Update to 8.0
    * CVE-2024-5742: Avoid privilege escalations via symlink attacks
      on emergency save file (boo#1226099)
    * By default ^F is bound to starting a forward search, and ^B to
      starting a backward search, while M-F and M-B repeat the search
      in the corresponding direction. (See the documentation if you
      want the old bindings back.)
    * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
      ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
      ^R replace, ^G find again, ^D find again backwards, ^A set the mark,
      ^T jump to a line, ^P show the position, and ^E execute.
    * For easier access, M-" is bound to placing/removing an anchor,
      and M-' to jumping to the next anchor.


author: wangkai <wangkai385@huawei.com> - 4.1.13-13
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: wangkai <wangkai385@huawei.com> - 4.1.13-15
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangkai <13474090681@163.com> - 1:12.22.11-4
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Resolve kdump\watchdog\cpufreq\kabiwhitelist\network test failure issue 
  - Add fio test cases:read,write,randread,randwrite
  - Solve the nvme line break issue in the command line interface
  - Fix compilation errors in the make command
  - Add Vulkan testcase for nvida GPU
  - Resolve the issue of oech server startup failure on version 24.03


author: wangkai <13474090681@163.com> - 9.0.1-5
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: yanglu<yanglu72@h-partners.com> - 1.11.0-6
changelog:
  - Type:cves
  - CVE:CVE-2022-30698 CVE-2022-30699
  - SUG:NA
  - DESC:fix CVE-2022-30698 and CVE-2022-30699


author: yezengruan <yezengruan@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - 9pfs: prevent opening special files (CVE-2023-2861)


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025)
  - pci: assert configuration access is within bounds
  - io: remove io watch if TLS channel is closed during handshake


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
  - net: Update MemReentrancyGuard for NIC (CVE-2023-3019)
  - net: Provide MemReentrancyGuard * to qemu_new_nic()
  - memory: prevent dma-reentracy issues
  - softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
  - Fixed the early version of CVE-2022-4144 patch is not fully adapted


author: Jiabo Feng <fengjiabo1@huawei.com>
changelog:
  - hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/display/virtio-gpu: Protect from DMA re-entrancy bugs(CVE-2024-3446)
  - hw/virtio: Introduce virtio_bh_new_guarded() helper
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
  - checkpatch: add qemu_bh_new/aio_bh_new checks
  - async: avoid use-after-free on re-entrancy guard
  - async: Add an optional reentrancy guard to the BH API
  - util/async: add a human-readable name to BHs for debugging
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  - Include sysemu/sysemu.h a lot less


author: huyubiao <huyubiao@huawei.com> - 243-64
changelog:
  - add backport-pstore-fix-use-after-free.patch
        backport-udev-also-logs-file-permission.patch
        backport-core-Fix-setting-StatusUnitFormat-from-config-files.patch
        backport-udevadm-missing-initialization-of-descriptor.patch
        backport-udevadm-use-usec_add.patch
        backport-shared-install-fix-error-codes-returned-by-install_c.patch
        backport-udevadm-trigger-do-not-propagate-EACCES-and-ENODEV.patch
        backport-pstore-rework-memory-handling-for-dmesg.patch
        backport-udev-fix-memleak-caused-by-wrong-cleanup-function.patch
        backport-network-ndisc-do-not-drop-all-prefixes-when-a-prefix.patch
        backport-nspawn-fix-handling-of-console-help.patch
        backport-core-job-fix-breakage-of-ordering-dependencies-by-sy.patch
        backport-sd-device-enumerator-do-not-return-error-when-a-devi.patch
        backport-udev-ignore-ENOENT-when-chmod_and_chown-device-node.patch
        backport-udev-fix-error-code-in-the-log-message.patch
        backport-udev-do-not-append-newline-when-write-attributes.patch
        backport-udevd-wait-for-workers-to-finish-when-exiting.patch
        backport-verify-fix-segmentation-fault.patch
        backport-core-path-serialize-the-previous_exists-state.patch
        backport-core-path-fix-spurious-triggering-of-PathExists-on-r.patch
        backport-udevadm-ignore-EROFS-and-return-earlier.patch
        backport-udevd-don-t-use-monitor-after-manager_exit.patch
        backport-hibernate-resume-generator-wait-infinitely-for-the-r.patch
        backport-sd-event-refuse-running-default-event-loops-in-any-o.patch
        backport-time-util-deal-with-systems-where-userspace-has-64bi.patch
        backport-time-util-also-use-32bit-hack-on-EOVERFLOW.patch
        backport-test-condition-fix-group-check-condition.patch
        backport-udev-do-not-use-exact-match-of-file-permission.patch
        backport-network-udev-use-uint64_t-for-bit-rate.patch
        backport-unit-add-AF_ALG-to-systemd-networkd.service.patch
        backport-Fix-generator-name-in-hibernate-resume-generator-s-d.patch
        backport-udevadm-show-more-error-message-during-exporting-dat.patch


author: huyubiao <huyubiao@huawei.com> - 243-66
changelog:
  - add backport-journalctl-allow-running-vacuum-on-remote-journals-t.patch
        backport-systemctl-skip-non-existent-units-in-the-cat-verb.patch
        backport-journalctl-implement-facility-foo.patch
        backport-journalctl-show-duplicate-entries-if-they-are-from-t.patch
        backport-fix-journal-regression.patch
        backport-fs-util-when-calling-chase_symlinks-with-root-path-l.patch
        backport-test-add-test-for-the-non-resolving-of-chase_symlink.patch
        backport-fs-util-make-sure-we-output-normalized-paths-in-chas.patch
        backport-test-make-sure-chase_symlink-returns-normalized-path.patch
        backport-test-fix-rename_noreplace-test.patch
        backport-logind-check-PolicyKit-before-allowing-VT-switch.patch
        backport-errno-ETIMEDOUT-is-also-a-connection-error.patch
        backport-sd-bus-break-the-loop-in-bus_ensure_running-if-the-b.patch


author: huyubiao <huyubiao@huawei.com> - 243-67
changelog:
  - add backport-core-make-sure-we-don-t-get-confused-when-setting-TE.patch
        backport-mount-setup-change-the-system-mount-propagation-to-s.patch
        backport-core-transition-to-FINAL_SIGTERM-state-after-ExecSto.patch


author: huyubiao <huyubiao@huawei.com> - 243-70
changelog:
  - backport: sync patches from systemd community
    add backport-sd-device-do-no-allocate-strings-of-unknown-length-o.patch
        backport-sd-device-minor-optimization-for-sd_device_new_from_.patch
        backport-sd-device-use-memdupa_suffix0-where-appropriate.patch
        backport-sd-device-reject-empty-driver-name.patch
        backport-tmpfiles-use-a-entry-in-hashmap-as-ItemArray-in-read.patch
        backport-dissect-ext4-and-loopback-files-are-unimpressed-by-r.patch
        backport-mount-until-make-sure-we-ll-exit-bind_remount_recurs.patch
        backport-sd-device-use-strjoina-more-again-in-sd_device_new_f.patch
        backport-core-when-looping-over-mount-swap-names-continue-if-.patch
        backport-libblkid-open-device-in-nonblock-mode.patch
        backport-udev-ignore-the-case-that-the-device-is-already-remo.patch
        backport-udev-fix-key-name-in-debug-log.patch
        backport-sd-event-use-usec_add.patch
        backport-timesync-fix-wrong-type-for-receiving-timestamp-in-n.patch
        backport-udev-fix-potential-memleak.patch
        backport-journalctl-never-fail-at-flushing-when-the-flushed-f.patch
        backport-core-fix-SIGABRT-on-empty-exec-command-argv.patch
        backport-core-service-also-check-path-in-exec-commands.patch


author: hongjinghao <hongjinghao@huawei.com> - 243-71
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: huyubiao <huyubiao@huawei.com> - 243-75
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:add backport-basic-fix-overflow-detection-in-sigbus_pop.patch
         backport-bus-use-bus_log_parse_error-to-print-message.patch
         backport-busctl-avoid-asserting-on-NULL-message.patch
         backport-sd-journal-check-sd-event-state-before-setting-up-po.patch


author: huyubiao <huyubiao@huawei.com> - 243-76
changelog:
  - DESC:add backport-utmp-remove-dev-from-line.patch
         backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch
         backport-resolved-limit-the-number-of-signature-validations-i.patch
         backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch


author: qinyu<qinyu32@huawei.com> - 2022a-10
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Greenland change should affect only America/Nuuk; The northern edge of Chihuahua changes to US rules


author: langfei<langfei@huawei.com> - 2022a-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix Palestine predictions for 2072 through 2075; Ittoqqortoormiit (America/Scoresbysund) zone change.


author: liuchao <liuchao173@huawei.com> - 2022a-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Vostok switches to +05; Sync Casey data from timeanddata.com; Kazakhstan unifies on UTC+5


author: zhouwenpei <zhouwenpei1@h-partners.com> - 1.20.8-15
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


