# changelog

author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.4.0.83
changelog:
  - !1042  xfrm: Reinject transport-mode packets through workqueue
  - !1069  support ACPI for MPAM 2.0
  - !1070 crypto: hisilicon - fix some reset problem
  - ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2
  - ACPI / PPTT: Find PPTT processor node by cache id
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1
  - ACPICA: Add support for Arm's MPAM ACPI table version 2
  - crypto: hisilicon/qm - disable error report before flr
  - crypto: hisilicon/qm - disable same error report before resetting
  - crypto: hisilicon/qm - remove duplicate assignment and release
  - crypto: hisilicon/hpre - enable sva error interrupt event
  - crypto: hisilicon/qm - flush all work before driver removed.
  - !1026 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
  - !1022 [sync] PR-978:  io_uring: fix the problem of running
  - !1045 perf: hisi: delete global enable pmu from xxx_write_counter()
  - !1037  xfs: fixes patchs and backport patchs
  - !1048 spi: dw: Add support for 32-bits max xfer size
  - !1055 Complementing PTT functions to the openEuler-22.03-LTS-SP2
  - !1005 scsi: hisi_sas: A group of SAS-related bugfixes
  - !1052 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - !1039 [sync] PR-1032: bugfix the lost interruption problem after live migration
  - hwtracing: hisi_ptt: Fix potential sleep in atomic context
  - hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU
  - hwtracing: hisi_ptt: Export available filters through sysfs
  - hwtracing: hisi_ptt: Add support for dynamically updating the filter list
  - hwtracing: hisi_ptt: Factor out filter allocation and release operation
  - scripts: Fix issue of module signing with openssl 3.x
  - spi: dw: Add support for 32-bits max xfer size
  - perf: hisi: delete global enable pmu from xxx_write_counter()
  - xfrm: Reinject transport-mode packets through workqueue
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Work around build failure in suspend function
  - scsi: hisi_sas: Block requests before take debugfs snapshot
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - !996 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !1001 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1018 [sync] PR-944:  nbd: get config_lock before sock_shutdown
  - !1033 perf: hns3: add event suppport for ROH and default use hardware event 0 as group leader event
  - vfio/migration: bugfix lost interruption after live migration
  - crypto: hisilicon/qm - fix EQ/AEQ interrupt issue
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()
  - scsi: sd: try more retries of START_STOP when resuming scsi device
  - !1012 [sync] PR-924:  dm: add disk before alloc dax
  - !1015 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - perf: hns3: default use hardware event 0 as group leader event.
  - perf: hns3: add event suppport for ROH
  - !1020 [sync] PR-1003: roh: Fix ROH multi-BD cmdq issue
  - !1009 [sync] PR-980: crypto: hisilicon - fix mailbox operation process
  - !952 [sync] PR-929:  xfs: rework feature flags
  - !982 [sync] PR-356: x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - locking/rwsem: Prevent potential lock starvation
  - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
  - locking/rwsem: Better collate rwsem_read_trylock()
  - !973 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !988 [sync] PR-954:  block: iocost bugfix
  - !985 [sync] PR-946:  icost bugfix
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - roh: Fix ROH multi-BD cmdq issue
  - !1006 drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - nbd: get config_lock before sock_shutdown
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - crypto: hisilicon/qm - alloc buffer to set and get xqc
  - crypto: hisilicon/qm - fix the pf2vf timeout when device reset
  - vfio/migration: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - !993 Clean up for RDMA/HNS
  - !979 [sync] PR-943: Fixed the accelerator capability register issue.
  - !981 [sync] PR-967:  Support dynamic_hugetlb on arm64 and fix some bug
  - !989 [sync] PR-940: net: hns3: related bugfixes, refactoring, and cleanup
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - RDMA/hns: Remove redundant 'num_mtt_segs' and 'max_extend_sg'
  - RDMA/hns: Remove redundant 'use_lowmem' argument from hns_roce_init_hem_table()
  - !992 [sync] PR-949:  mm: page_counter: remove unneeded atomic ops for low/min
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !977 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - mm: page_counter: remove unneeded atomic ops for low/min
  - net: hns3: restore user pause configure when disable autoneg
  - net: hns3: fix strncpy() not using dest-buf length as length issue
  - net: hns3: refactor hclge_update_desc_vfid for extension
  - net: hns3: add tm flush when setting tm
  - net: hns3: fix the imp capability bit cannot exceed 32 bits issue
  - net: hns3: fix GRE checksum offload issue
  - perf: pmu: fix set wrong filter mode for running events issue
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !964 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !961 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - crypto: hisilicon/zip - save capability registers in probe process
  - crypto: hisilicon/sec2 - save capability registers in probe process
  - crypto: hisilicon/hpre - save capability registers in probe process
  - crypto: hisilicon/qm - save capability registers in qm init process
  - crypto: hisilicon/qm - add a function to set qm algs
  - crypto: hisilicon/sec - fix for resource leak
  - crypto: hisilicon/sec - remove unused parameter
  - crypto: hisilicon/sec - misc cleanups
  - !957 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - !933 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - !923 [sync] PR-918: Misc fixes for Kunpeng accelerator drivers!
  - !914 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - crypto: hisilicon/qm - remove unnecessary aer.h include
  - crypto: hisilicon/qm - stop function and write data to memory
  - crypto: hisilicon/hpre - ensure private key less than n
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - !921 [sync] PR-919:  Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - !898 [sync] PR-894: Fixed two accelerator bugfixes
  - !908 [sync] PR-874: nic: hns3: fix pointer cast for wol and fix getting GE port lanes error and set cpu affinity
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - !909 [sync] PR-907:  tcp/dccp: Add another way to allocate local ports in connect()
  - !893 mitigatin cacheline false sharing
  - tcp/dccp: Add another way to allocate local ports in connect()
  - net: hns3: fix set cpu affinity when state down
  - net: hns3: add support for getting GE port lanes
  - net: hns3: fix pointer cast to different type for wol
  - !903 backport block bugfix
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !899 [sync] PR-895:  config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - uacce: use filep->f_mapping to replace inode->i_mapping
  - crypto:hisilicon/qm: bugfix queue parameter issue
  - enable MITIGATION_FALSE_SHARING by default
  - ext4: mitigatin cacheline false sharing in struct ext4_inode_info


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.6.0.84
changelog:
  - !1119 [openEuler-22.03-LTS-SP2] net: hns3: refactor hclge_mac_link_status_wait and add wait until mac link down
  - net: hns3: add wait until mac link down
  - net: hns3: refactor hclge_mac_link_status_wait for interface reuse
  - !1093 vfio-pci: Match specific devices with vendor id and device id
  - !1085 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !1095 irqchip: gic-v3: Collection table support muti pages
  - !1081  some backport bugfix for sockmap
  - irqchip: gic-v3: Collection table support muti pages
  - vfio-pci: Match specific devices with vendor id and device id
  - !1077  drm/qxl: Fix missing free_irq
  - !1087 genirq: Increase the number of IRQ descriptors
  - genirq: Increase the number of IRQ descriptors
  - bpf: fix bpf_tcp_ingress addr use after free
  - net: deal with most data-races in sk_wait_event()
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
  - bpf, sock_map: Move cancel_work_sync() out of sock lock
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
  - !1063 i2c: hisi: Only handle the interrupt of the driver's transfer
  - drm/qxl: Fix missing free_irq
  - !1059 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - fs: hfsplus: fix UAF issue in hfsplus_put_super


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.8.0.86
changelog:
  - Enable kabi checking and adapt the check-kabi script
  - net: let sockops can use bpf_get_current_comm()
  - net: add bpf_is_local_ipaddr bpf helper function
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.10.0.88
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - !1213 [sync] PR-1196:  fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1208  arm64: kernel: disable CNP on LINXICORE9100
  - fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1204  kernel: update SP2 OPENEULER_MINOR value to 2
  - !1203  Revert "locking/rwsem: Prevent potential lock starvation"
  - !1200 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - arm64: kernel: disable CNP on LINXICORE9100
  - !1193 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
  - !1195 [sync] PR-1159: xhci:fix USB xhci controller issue
  - !1183  Fix some warning messages in netacc
  - kernel: update SP2 OPENEULER_MINOR value to 2
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - xhci:fix USB xhci controller issue
  - !1186  Fix NULL pointer and Keep PERF_PMU_CAP_EXCLUSIVE
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE
  - hwtracing: hisi_ptt: Add dummy callback pmu::read()
  - !1182 Fix CQ and QP cache affinity
  - libbpf: Support uniform BTF-defined key/value specification across all BPF maps
  - tools: ignore one warning message
  - RDMA/hns: Fix CQ and QP cache affinity
  - !1151 [sync] PR-1150:  EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1175 [sync] PR-1157: Add LoongArch maintainers to openEuler/MAINTAINERS
  - !1165 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1169 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1156 [sync] PR-582: mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !882 [sync] PR-855: Remove the automatic loading of the hisi_trng driver
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1144 crypto: hisilicon/qm: modify loop exit condition
  - !1147 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - crypto: hisilicon/qm: modify loop exit condition
  - crypto/trng: Remove the automatic loading of the hisi_trng driver
  - crypto: hisilicon/trng - use %u to print u32 variables


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.12.0.89
changelog:
  - !1189 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - !1226 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - !1229 [sync] PR-1227:  x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1219  openEuler: introduced OPENEULER_LTS to identify LTS Release
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.17.0.93
changelog:
  - !1231 [sync] PR-1191:  fix memory reliable related issues
  - !1236 [sync] PR-1194:  fix memleak with efi_fake_mem
  - !1257 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1249 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
  - !1234 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1211 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1276 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1304 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1301 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1266 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1240 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - !1244  set the iova rcache global
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - config: enable set the max iova mag size to 128
  - iommu/iova: increase the iova_rcache depot max size
  - relayfs: fix out-of-bounds access in relay_file_read
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - efi: Disable mirror feature during crashkernel
  - mm: mem_reliable: Update reliable page counter to zero if underflows
  - mm: mem_reliable: Fix reliable page counter mismatch problem
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.18.0.94
changelog:
  - !1370 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1365 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - !1344 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records
  - !1306 [sync] PR-1297:  iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - Fix x86 provides error symbol


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.19.0.95
changelog:
  - !1291 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1457 [sync] PR-1358:  Remove DECnet support from kernel
  - !1440 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1461 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1464 [sync] PR-1436: Fix CVE-2023-3117
  - !1319 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1421 [sync] PR-1415:  Fix generic/299 fail
  - !1379 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - !1433 [sync] PR-346: anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1413 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1390 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1393 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1309 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1330 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1333 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - !1341 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.20.0.96
changelog:
  - !1526 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1338 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1491 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1487 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1496 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1492 [sync] PR-1468: Backport 5.10.155 LTS
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - mmc: sdhci-esdhc-imx: Convert the driver to DT-only
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - dmaengine: at_hdmac: Check return code of dma_async_device_register
  - dmaengine: at_hdmac: Fix impossible condition
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
  - dmaengine: at_hdmac: Fix concurrency over the active list
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
  - dmaengine: at_hdmac: Fix concurrency over descriptor
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level
  - dmaengine: at_hdmac: Fix at_lli struct definition
  - cert host tools: Stop complaining about deprecated OpenSSL functions
  - can: j1939: j1939_send_one(): fix missing CAN header initialization
  - mm/memremap.c: map FS_DAX device memory as decrypted
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
  - nilfs2: fix use-after-free bug of ns_writer on remount
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro
  - ALSA: hda/realtek: Add Positivo C6300 model quirk
  - ALSA: hda: fix potential memleak in 'add_widget_node'
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
  - MIPS: jump_label: Fix compat branch range check
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning
  - riscv: fix reserved memory setup
  - riscv: Separate memory init from paging init
  - riscv: Enable CMA support
  - riscv: vdso: fix build with llvm
  - riscv: process: fix kernel info leakage
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
  - net: atlantic: macsec: clear encryption keys from the stack
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
  - net: cpsw: disable napi in cpsw_ndo_open()
  - net/mlx5e: E-Switch, Fix comparing termination table instance
  - net/mlx5: Allow async trigger completion execution on single CPU systems
  - net: nixge: disable napi when enable interrupts failed in nixge_open()
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
  - perf stat: Fix printing os->prefix in CSV metrics output
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - dmaengine: pxa_dma: use platform_get_irq_optional
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: broadcom: Fix BCMGENET Kconfig
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
  - can: af_can: fix NULL pointer dereference in can_rx_register()
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
  - hamradio: fix issue of dev reference count leakage in bpq_device_event()
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  - KVM: s390: pv: don't allow userspace to set the clock under PV
  - KVM: s390x: fix SCK locking
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - net: fman: Unregister ethernet device on removal
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
  - net: tun: Fix memory leaks of napi_get_frags
  - macsec: clear encryption keys from the stack after setting up offload
  - macsec: fix detection of RXSCs when toggling offloading
  - macsec: fix secy->n_rx_sc accounting
  - macsec: delete new rxsc when offload fails
  - net: gso: fix panic on frag_list with mixed head alloc types
  - bpf: Fix wrong reg type conversion in release_reference()
  - bpf: Add helper macro bpf_for_each_reg_in_vstate
  - bpf: Support for pointers beyond pkt_end.
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - wifi: cfg80211: silence a sparse RCU warning
  - phy: stm32: fix an error code in probe
  - hwspinlock: qcom: correct MMIO max register for newer SoCs
  - fuse: fix readdir cache race
  - !1471 [sync] PR-838: Backport 5.10.154 LTS
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
  - drm/i915/sdvo: Setup DDC fully before output init
  - drm/i915/sdvo: Filter out invalid outputs more sensibly
  - drm/rockchip: dsi: Force synchronous probe
  - ext4,f2fs: fix readahead of verity data
  - KVM: x86: emulator: update the emulation mode after CR0 write
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
  - KVM: x86: emulator: em_sysexit should update ctxt->mode
  - KVM: x86: Mask off reserved bits in CPUID.80000001H
  - KVM: x86: Mask off reserved bits in CPUID.80000008H
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH
  - KVM: x86: Mask off reserved bits in CPUID.80000006H
  - ext4: fix BUG_ON() when directory entry has invalid rec_len
  - ext4: fix warning in 'ext4_da_release_space'
  - parisc: Avoid printing the hardware path twice
  - parisc: Export iosapic_serial_irq() symbol for serial port driver
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
  - perf/x86/intel: Fix pebs event constraints for ICL
  - efi: random: Use 'ACPI reclaim' memory for random seed
  - efi: random: reduce seed size to 32 bytes
  - fuse: add file_modified() to fallocate
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - tracing/histogram: Update document for KEYS_MAX size
  - tools/nolibc/string: Fix memcmp() implementation
  - kprobe: reverse kp->flags when arm_kprobe failed
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
  - btrfs: fix type of parameter generation in btrfs_get_dentry
  - coresight: cti: Fix hang in cti_disable_hw()
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
  - fscrypt: fix keyring memory leak on mount failure
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key
  - fscrypt: simplify master key locking
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  - i2c: piix4: Fix adapter not be removed in piix4_remove()
  - arm64: dts: juno: Add thermal critical trip points
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  - firmware: arm_scmi: Suppress the driver's bind attributes
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  - efi/tpm: Pass correct address to memblock_reserve
  - i2c: xiic: Add platform module alias
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
  - HID: saitek: add madcatz variant of MMO7 mouse device ID
  - scsi: core: Restrict legal sdev_state transitions via sysfs
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
  - media: meson: vdec: fix possible refcount leak in vdec_probe()
  - media: dvb-frontends/drxk: initialize err to 0
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
  - media: rkisp1: Initialize color space on resizer sink and source pads
  - s390/boot: add secure boot trailer
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
  - mtd: parsers: bcm47xxpart: Fix halfblock reads
  - mtd: parsers: bcm47xxpart: print correct offset on read error
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
  - video/fbdev/stifb: Implement the stifb_fillrect() function
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
  - mmc: sdhci-pci: Avoid comma separated statements
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
  - drm/msm/hdmi: fix IRQ lifetime
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - btrfs: fix ulist leaks in error paths of qgroup self tests
  - btrfs: fix inode list leak during backref walking at find_parent_nodes()
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
  - isdn: mISDN: netjet: fix wrong check of device registration
  - mISDN: fix possible memory leak in mISDN_register_device()
  - rose: Fix NULL pointer dereference in rose_send_frame()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - ipvs: use explicitly signed chars
  - netfilter: nf_tables: release flow rule object from commit path
  - net: sched: Fix use after free in red_enqueue()
  - ata: pata_legacy: fix pdc20230_set_piomode()
  - net: fec: fix improper use of NETDEV_TX_BUSY
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  - NFC: nxp-nci: remove unnecessary labels
  - nfc: fdp: Fix potential memory leak in fdp_nci_send()
  - nfc: fdp: drop ftrace-like debugging messages
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
  - net: dsa: Fix possible memory leaks in dsa_loop_init()
  - nfs4: Fix kmemleak when allocate slot failed
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
  - NFSv4: Fix a potential state reclaim deadlock
  - IB/hfi1: Correctly move list in sc_disable()
  - RDMA/cma: Use output interface for net_dev check
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
  - KVM: x86: Protect the unused bits in MSR exiting flags
  - x86/topology: Fix duplicated core ID within a package
  - x86/topology: Fix multiple packages shown on a single-package system
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
  - KVM: x86: Trace re-injected exceptions
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
  - KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
  - serial: 8250: Let drivers request full 16550A feature probing
  - !1423 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.21.0.97
changelog:
  - !1589 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1584 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
  - !1600 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
  - !1603 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - !1616 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1579 [sync] PR-1541: Backport 5.10.158 - 5.10.159 LTS patches from upstream.
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1594 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - binder: fix UAF caused by faulty buffer cleanup
  - ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - ksmbd: fix wrong UserName check in session_user
  - can: esd_usb: Allow REC and TEC to return to zero
  - macsec: add missing attribute validation for offload
  - net: mvneta: Fix an out of bounds check
  - ipv6: avoid use-after-free in ip6_fragment()
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  - tipc: call tipc_lxc_xmit without holding node_read_lock
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
  - ipv4: Fix incorrect route flushing when table ID 0 is used
  - ipv4: Fix incorrect route flushing when source address is deleted
  - tipc: Fix potential OOB in tipc_link_proto_rcv()
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
  - ip_gre: do not report erspan version on GRE interface
  - net: stmmac: fix "snps,axi-config" node property parsing
  - nvme initialize core quirks before calling nvme_init_subsystem
  - NFC: nci: Bounds check struct nfc_target arrays
  - i40e: Disallow ip4 and ip6 l4_4_bytes
  - i40e: Fix for VF MAC address 0
  - i40e: Fix not setting default xps_cpus after reset
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - xen-netfront: Fix NULL sring after live migration
  - net: encx24j600: Fix invalid logic in reading of MISTAT register
  - net: encx24j600: Add parentheses to fix precedence
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
  - net: dsa: ksz: Check return value
  - Bluetooth: Fix not cleanup led when bt_init fails
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
  - vmxnet3: correctly report encapsulated LRO packet
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
  - igb: Allocate MSI-X vector when testing
  - e1000e: Fix TX dispatch condition
  - gpio: amd8111: Fix PCI device reference count leak
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  - ca8210: Fix crash by zero initializing data
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time()
  - rtc: mc146818-lib: fix locking in mc146818_set_time
  - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - HID: hid-lg4ff: Add check for empty lbuf
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice
  - drm/shmem-helper: Avoid vm_open error paths
  - drm/shmem-helper: Remove errant put in error path
  - drm/vmwgfx: Don't use screen objects when SEV is active
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
  - Bluetooth: Fix crash when replugging CSR fake controllers
  - Bluetooth: btusb: Add debug message for CSR controllers
  - mm/gup: fix gup_pud_range() for dax
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells"
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
  - xen/netback: do some code cleanup
  - rtc: mc146818: Reduce spinlock section in mc146818_set_time()
  - rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ
  - rtc: cmos: avoid UIP when reading alarm time
  - rtc: cmos: avoid UIP when writing alarm time
  - rtc: mc146818-lib: extract mc146818_avoid_UIP
  - rtc: mc146818-lib: fix RTC presence check
  - rtc: Check return value from mc146818_get_time()
  - rtc: mc146818-lib: change return values of mc146818_get_time()
  - rtc: cmos: remove stale REVISIT comments
  - rtc: mc146818: Dont test for bit 0-5 in Register D
  - rtc: mc146818: Detect and handle broken RTCs
  - rtc: mc146818: Prevent reading garbage
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm/khugepaged: take the right locks for page table retraction
  - net: usb: qmi_wwan: add u-blox 0x1342 composition
  - 9p/xen: check logical size for buffer size
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
  - fbcon: Use kzalloc() in fbcon_prepare_logo()
  - regulator: twl6030: fix get status of twl6032 regulators
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - regulator: slg51000: Wait after asserting CS pin
  - 9p/fd: Use P9_HDRSZ for header size
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
  - arm64: dts: rockchip: fix ir-receiver node names
  - ARM: dts: rockchip: fix ir-receiver node names
  - arm: dts: rockchip: fix node name for hym8563 rtc
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
  - block: unhash blkdev part inode when the part is deleted
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
  - char: tpm: Protect tpm_pm_suspend with locks
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
  - ACPI: HMAT: Fix initiator registration for single-initiator systems
  - ACPI: HMAT: remove unnecessary variable initialization
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init()
  - x86/pm: Add enumeration check before spec MSRs save/restore setup
  - x86/tsx: Add a feature bit for TSX control MSR support
  - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
  - ipv4: Fix route deletion when nexthop info is not specified
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
  - selftests: net: fix nexthop warning cleanup double ip typo
  - selftests: net: add delete nexthop route warning test
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc
  - xtensa: increase size of gcc stack frame check
  - parisc: Increase size of gcc stack frame check
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
  - pinctrl: single: Fix potential division by zero
  - ASoC: ops: Fix bounds check for _sx controls
  - tracing: Free buffers when a used dynamic event is removed
  - drm/i915: Never return 0 if not all requests retired
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
  - mmc: sdhci: Fix voltage switch delay
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
  - mmc: core: Fix ambiguous TRIM and DISCARD arg
  - mmc: mmc_test: Fix removal of debugfs file
  - net: stmmac: Set MAC's flow control register to reflect current settings
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
  - error-injection: Add prompt for function error injection
  - riscv: vdso: fix section overlapping under some conditions
  - net/mlx5: DR, Fix uninitialized var warning
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
  - sctp: fix memory leak in sctp_stream_outq_migrate()
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - afs: Fix fileserver probe RTT handling
  - net: hsr: Fix potential use-after-free
  - tipc: re-fetch skb cb after tipc_msg_validate
  - dsa: lan9303: Correct stat name
  - net: ethernet: nixge: fix NULL dereference
  - net/9p: Fix a potential socket leak in p9_socket_open
  - net: net_netdev: Fix error handling in ntb_netdev_init_module()
  - net: phy: fix null-ptr-deref while probe() failed
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
  - wifi: cfg80211: don't allow multi-BSSID in S1G
  - wifi: cfg80211: fix buffer overflow in elem comparison
  - aquantia: Do not purge addresses when setting the number of rings
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev()
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
  - net/mlx5e: Fix use-after-free when reverting termination table
  - net/mlx5: Fix uninitialized variable bug in outlen_write()
  - e100: Fix possible use after free in e100_xmit_prepare
  - e100: switch from 'pci_' to 'dma_' API
  - iavf: Fix error handling in iavf_init_module()
  - iavf: remove redundant ret variable
  - fm10k: Fix error handling in fm10k_init_module()
  - i40e: Fix error handling in i40e_init_module()
  - ixgbevf: Fix resource leak in ixgbevf_init_module()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - hwmon: (i5500_temp) fix missing pci_disable_device()
  - hwmon: (ina3221) Fix shunt sum critical calculation
  - hwmon: (ltc2947) fix temperature scaling
  - libbpf: Handle size overflow for ringbuf mmap
  - ARM: at91: rm9200: fix usb device clock id
  - scripts/faddr2line: Fix regression in name resolution on ppc64le
  - bpf, perf: Use subprog name when reporting subprog ksymbol
  - iio: light: rpr0521: add missing Kconfig dependencies
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"
  - drm/amdgpu: update drm_display_info correctly when the edid is read
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
  - btrfs: free btrfs_path before copying inodes to userspace
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
  - !1554 [sync] PR-1506: Backport 5.10.157 LTS patches from upstream
  - !1466 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - !1575 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1560 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
  - !1383 [sync] PR-1351:  dm thin: fix deadlock when swapping to thin device
  - !1483  dm stats: check for and propagate alloc_percpu failure
  - !1504  block: don't set GD_NEED_PART_SCAN if scan partition failed
  - !1479 [sync] PR-1345:  dm: requeue IO if mapping table not yet
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - fuse: lock inode unconditionally in fuse_fallocate()
  - drm/amdgpu: always register an MMU notifier for userptr
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
  - btrfs: free btrfs_path before copying subvol info to userspace
  - btrfs: free btrfs_path before copying fspath to userspace
  - btrfs: free btrfs_path before copying root refs to userspace
  - dm integrity: clear the journal on suspend
  - dm integrity: flush the journal on suspend
  - gpu: host1x: Avoid trying to use GART on Tegra20
  - net: usb: qmi_wwan: add Telit 0x103a composition
  - tcp: configurable source port perturb table size
  - platform/x86: hp-wmi: Ignore Smart Experience App event
  - zonefs: fix zone report size in __zonefs_io_error()
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
  - xen/platform-pci: add missing free_irq() in error path
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
  - Input: soc_button_array - add use_low_level_irq module parameter
  - Input: goodix - try resetting the controller when no config is set
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - KVM: x86: remove exit_int_info warning in svm_handle_exit
  - KVM: x86: nSVM: leave nested mode on vCPU free
  - mm: vmscan: fix extreme overreclaim and swap floods
  - gcov: clang: fix the buffer overflow issue
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
  - usb: dwc3: gadget: Clear ep descriptor last
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
  - usb: dwc3: gadget: conditionally remove requests
  - ceph: fix NULL pointer dereference for req->r_session
  - ceph: Use kcalloc for allocating multiple elements
  - ceph: fix possible NULL pointer dereference for req->r_session
  - ceph: put the requests/sessions when it fails to alloc memory
  - ceph: fix off by one bugs in unsafe_request_wait()
  - ceph: flush the mdlog before waiting on unsafe reqs
  - ceph: flush mdlog before umounting
  - ceph: make iterate_sessions a global symbol
  - ceph: make ceph_create_session_msg a global symbol
  - usb: cdns3: Add support for DRD CDNSP
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power
  - mmc: sdhci-brcmstb: Re-organize flags
  - nios2: add FORCE for vmlinuz.gz
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
  - iio: light: apds9960: fix wrong register for gesture gain
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
  - usb: dwc3: exynos: Fix remove() function
  - lib/vdso: use "grep -E" instead of "egrep"
  - net: enetc: preserve TX ring priority across reconfiguration
  - net: enetc: cache accesses to &priv->si->hw
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled
  - s390/crashdump: fix TOD programmable field size
  - net: thunderx: Fix the ACPI memory leak
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
  - arcnet: fix potential memory leak in com20020_probe()
  - net: arcnet: Fix RESET flag handling
  - s390/dasd: fix no record found for raw_track_access
  - ipv4: Fix error return code in fib_table_insert()
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
  - netfilter: flowtable_offload: add missing locking
  - dma-buf: fix racing conflict of dma_heap_add()
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
  - regulator: twl6030: re-add TWL6032_SUBCLASS
  - NFC: nci: fix memory leak in nci_rx_data_packet()
  - net: sched: allow act_ct to be built without NF_NAT
  - sfc: fix potential memleak in __ef100_hard_start_xmit()
  - xfrm: Fix ignored return value in xfrm6_init()
  - tipc: check skb_linearize() return value in tipc_disc_rcv()
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW
  - net/mlx5: Fix FW tracer timestamp calculation
  - netfilter: ipset: regression in ip_set_hash_ip.c
  - netfilter: ipset: Limit the maximal range of consecutive elements to add/delete
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
  - macsec: Fix invalid error code set
  - nfp: add port from netdev validation for EEPROM access
  - nfp: fill splittable of devlink_port_attrs correctly
  - net: pch_gbe: fix pci device refcount leak while module exiting
  - net/qla3xxx: fix potential memleak in ql3xxx_send()
  - net/mlx4: Check retval of mlx4_bitmap_init
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
  - ARM: mxs: fix memory leak in mxs_machine_init()
  - netfilter: conntrack: Fix data-races around ct mark
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
  - nfc/nci: fix race with opening and closing
  - rxrpc: Use refcount_t rather than atomic_t
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc
  - net: liquidio: simplify if expression
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
  - tee: optee: fix possible memory leak in optee_register_device()
  - bus: sunxi-rsb: Support atomic transfers
  - regulator: core: fix UAF in destroy_regulator()
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
  - regulator: core: fix kobject release warning and memory leak in regulator_register()
  - scsi: storvsc: Fix handling of srb_status and capacity change events
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node
  - af_key: Fix send_acquire race with pfkey_register
  - xfrm: replay: Fix ESN wrap around for GSO
  - MIPS: pic32: treat port as signed integer
  - RISC-V: vdso: Do not add missing symbols to version section in linker script
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
  - scsi: ibmvfc: Avoid path failures during live migration
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
  - Revert "net: macsec: report real_dev features when HW offloading is enabled"
  - selftests/bpf: Add verifier test for release_reference()
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route
  - wifi: airo: do not assign -1 to unsigned char
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
  - wifi: mac80211: fix memory free error when registering wiphy fail
  - ceph: avoid putting the realm twice when decoding snaps fails
  - ceph: do not update snapshot context when there is no new snapshot
  - iio: pressure: ms5611: fixed value compensation bug
  - iio: ms5611: Simplify IO callback parameters
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol
  - bridge: switchdev: Notify about VLAN protocol changes
  - ata: libata-core: do not issue non-internal commands once EH is pending
  - ata: libata-scsi: simplify __ata_scsi_queuecmd()
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
  - !1507 [sync] PR-1473: Backport 5.10.156 LTS patches from upstream.
  - Revert "net: broadcom: Fix BCMGENET Kconfig"
  - ntfs: check overflow when iterating ATTR_RECORDs
  - ntfs: fix use-after-free in ntfs_attr_find()
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - 9p/trans_fd: always use O_NONBLOCK read/write
  - gfs2: Switch from strlcpy to strscpy
  - gfs2: Check sb_bsize_shift after reading superblock
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier
  - kcm: close race conditions on sk_receive_queue
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times
  - uapi/linux/stddef.h: Add include guards
  - Input: i8042 - fix leaking of platform device on module removal
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
  - stddef: Introduce struct_group() helper macro
  - usbnet: smsc95xx: Fix deadlock on runtime resume
  - ring-buffer: Include dropped pages in counting dirty patches
  - nvme: ensure subsystem reset is single threaded
  - nvme: restrict management ioctls to admin
  - perf/x86/intel/pt: Fix sampling using single range output
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - docs: update mediator contact information in CoC doc
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout
  - mmc: core: properly select voltage range without power cycle
  - firmware: coreboot: Register bus in module init
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap
  - scsi: zfcp: Fix double free of FSF request when qdio send fails
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()
  - Input: iforce - invert valid length check when fetching device IDs
  - serial: 8250_lpss: Configure DMA also w/o DMA filter
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited
  - iio: adc: mp2629: fix potential array out of bound access
  - iio: adc: mp2629: fix wrong comparison of channel
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured
  - usb: chipidea: fix deadlock in ci_otg_del_timer
  - usb: add NO_LPM quirk for Realforce 87U Keyboard
  - USB: serial: option: add Fibocom FM160 0x0111 composition
  - USB: serial: option: add u-blox LARA-L6 modem
  - USB: serial: option: add u-blox LARA-R6 00B modem
  - USB: serial: option: remove old LARA-R6 PID
  - USB: serial: option: add Sierra Wireless EM9191
  - USB: bcma: Make GPIO explicitly optional
  - speakup: fix a segfault caused by switching consoles
  - slimbus: stream: correct presence rate frequencies
  - Revert "usb: dwc3: disable USB core PHY management"
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
  - tracing: Fix wild-memory-access in register_synth_event()
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
  - tracing/ring-buffer: Have polling block on watermark
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - ftrace: Fix the possible incorrect kernel message
  - cifs: add check for returning value of SMB2_set_info_init
  - net: thunderbolt: Fix error handling in tbnet_init()
  - cifs: Fix wrong return value checking when GETFLAGS
  - net/x25: Fix skb leak in x25_lapb_receive_frame()
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open()
  - cifs: add check for returning value of SMB2_close_init
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized
  - drbd: use after free in drbd_create_device()
  - net: ena: Fix error handling in ena_init()
  - net: ionic: Fix error handling in ionic_init_module()
  - xen/pcpu: fix possible memory leak in register_pcpu()
  - bnxt_en: Remove debugfs when pci_register_driver failed
  - net: caif: fix double disconnect client in chnl_net_open()
  - net: macvlan: Use built-in RCU list checking
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - net: liquidio: release resources when liquidio driver open failed
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove()
  - bpf: Initialize same number of free nodes for each pcpu_freelist
  - ata: libata-transport: fix error handling in ata_tdev_add()
  - ata: libata-transport: fix error handling in ata_tlink_add()
  - ata: libata-transport: fix error handling in ata_tport_add()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - arm64: dts: imx8mn: Fix NAND controller size-cells
  - arm64: dts: imx8mm: Fix NAND controller size-cells
  - ARM: dts: imx7: Fix NAND controller size-cells
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
  - drm/drv: Fix potential memory leak in drm_dev_init()
  - drm/panel: simple: set bpc field for logic technologies displays
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - parport_pc: Avoid FIFO port location truncation
  - siox: fix possible memory leak in siox_device_add()
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
  - block: sed-opal: kmalloc the cmd/resp buffers
  - sctp: clear out_curr if all frag chunks of current msg are pruned
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
  - serial: imx: Add missing .thaw_noirq hook
  - serial: 8250: omap: Flush PM QOS work on remove
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
  - serial: 8250_omap: remove wait loop from Errata i202 workaround
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
  - serial: 8250: Remove serial_rs485 sanitization from em485
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - spi: stm32: Print summary 'callbacks suppressed' message
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
  - drm/amd/pm: Read BIF STRAP also for BACO check
  - drm/amd/pm: support power source switch on Sienna Cichlid
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
  - spi: intel: Use correct mask for flash and protected regions
  - mtd: spi-nor: intel-spi: Disable write protection only if asked
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route"
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568
  - i2c: tegra: Allocate DMA memory for DMA engine
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return
  - drm/amd/display: Remove wrong pipe control lock
  - ASoC: rt1308-sdw: add the default value of some registers
  - selftests/intel_pstate: fix build for ARCH=x86_64
  - selftests/futex: fix build for clang
  - ASoC: codecs: jz4725b: fix capture selector naming
  - ASoC: codecs: jz4725b: use right control for Capture Volume
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl
  - ASoC: codecs: jz4725b: add missed Line In power control bit
  - spi: intel: Fix the offset to get the 64K erase opcode
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - dm stats: check for and propagate alloc_percpu failure
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - dm thin: fix deadlock when swapping to thin device


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.22.0.98
changelog:
  - !1704 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
  - !1700 vfio-pci: Match specific devices with vendor id and device id
  - !1676 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - netfilter: nft_set_pipapo: fix improper element removal
  - vfio-pci: Match specific devices with vendor id and device id
  - Revert "vfio-pci: Match specific devices with vendor id and device id"
  - !1651 Fix missing dealloc_dfx_cnt() during device unregister
  - !1643 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
  - !1645 [sync] PR-1605:  CVE-2023-38430
  - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - RDMA/hns: Fix missing dealloc_dfx_cnt() during device unregister
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
  - ksmbd: allocate one more byte for implied bcc[0]


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.23.0.99
changelog:
  - !1758 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
  - !1765 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1670 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1755 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
  - cxgb4: fix use after free bugs caused by circular dependency problem
  - !1746 [sync] PR-1727:  add support for timer_shutdown() api
  - !1733 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - !1620 [sync] PR-1578: Backport 5.10.160 - 5.10.162 LTS patches from upstream.
  - ksmbd: fix out of bounds read in smb2_sess_setup
  - timers: Keep del_timer[_sync]() exported
  - timers: Provide timer_shutdown[_sync]()
  - timers: Add shutdown mechanism to the internal functions
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
  - timers: Silently ignore timers with a NULL function
  - timers: Rename del_timer() to timer_delete()
  - timers: Rename del_timer_sync() to timer_delete_sync()
  - timers: Use del_timer_sync() even on UP
  - timers: Update kernel-doc for various functions
  - timers: Replace BUG_ON()s
  - timers: Get rid of del_singleshot_timer_sync()
  - sw64: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
  - ARM: spear: Do not use timer namespace for timer_shutdown() function
  - !1716 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
  - !1634 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - xfrm: add NULL check in xfrm_update_ae_params
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
  - eventfd: provide a eventfd_signal_mask() helper
  - eventpoll: add EPOLL_URING_WAKE poll wakeup flag
  - Revert "proc: don't allow async path resolution of /proc/self components"
  - Revert "proc: don't allow async path resolution of /proc/thread-self components"
  - task_work: unconditionally run task_work from get_signal()
  - signal: kill JOBCTL_TASK_WORK
  - kernel: stop masking signals in create_io_thread()
  - entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set
  - kernel: allow fork with TIF_NOTIFY_SIGNAL pending
  - task_work: remove legacy TWA_SIGNAL path
  - alpha: fix TIF_NOTIFY_SIGNAL handling
  - ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling
  - ia64: don't call handle_signal() unless there's actually a signal queued
  - sparc: add support for TIF_NOTIFY_SIGNAL
  - nds32: add support for TIF_NOTIFY_SIGNAL
  - ia64: add support for TIF_NOTIFY_SIGNAL
  - h8300: add support for TIF_NOTIFY_SIGNAL
  - c6x: add support for TIF_NOTIFY_SIGNAL
  - alpha: add support for TIF_NOTIFY_SIGNAL
  - xtensa: add support for TIF_NOTIFY_SIGNAL
  - microblaze: add support for TIF_NOTIFY_SIGNAL
  - hexagon: add support for TIF_NOTIFY_SIGNAL
  - csky: add support for TIF_NOTIFY_SIGNAL
  - openrisc: add support for TIF_NOTIFY_SIGNAL
  - sh: add support for TIF_NOTIFY_SIGNAL
  - um: add support for TIF_NOTIFY_SIGNAL
  - s390: add support for TIF_NOTIFY_SIGNAL
  - mips: add support for TIF_NOTIFY_SIGNAL
  - parisc: add support for TIF_NOTIFY_SIGNAL
  - nios32: add support for TIF_NOTIFY_SIGNAL
  - m68k: add support for TIF_NOTIFY_SIGNAL
  - arc: add support for TIF_NOTIFY_SIGNAL
  - task_work: Use TIF_NOTIFY_SIGNAL if available
  - tools headers UAPI: Sync openat2.h with the kernel sources
  - saner calling conventions for unlazy_child()
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E
  - HID: ite: Add support for Acer S1002 keyboard-dock
  - igb: Initialize mailbox message for VF reset
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
  - USB: serial: f81534: fix division by zero on line-speed change
  - USB: serial: f81232: fix division by zero on line-speed change
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs
  - USB: serial: option: add Quectel EM05-G modem
  - usb: gadget: uvc: Prevent buffer overflow in setup handler
  - udf: Fix extending file within last block
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size
  - udf: Fix preallocation discarding at indirect extent boundary
  - udf: Discard preallocation before extending file with a hole
  - ASoC: ops: Correct bounds check for second channel on SX controls
  - nvme-pci: clear the prp2 field when not used
  - ASoC: cs42l51: Correct PGA Volume minimum value
  - can: mcba_usb: Fix termination command argument
  - can: sja1000: fix size of OCR_MODE_MASK define
  - pinctrl: meditatek: Startup with the IRQs disabled
  - libbpf: Use page size as max_entries when probing ring buffer map
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
  - ASoC: fsl_micfil: explicitly clear CHnF flags
  - ASoC: fsl_micfil: explicitly clear software reset bit
  - fuse: always revalidate if exclusive create
  - vfs: fix copy_file_range() averts filesystem freeze protection
  - vfs: fix copy_file_range() regression in cross-fs copies
  - x86/smpboot: Move rcu_cpu_starting() earlier


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.24.0.100
changelog:
  - !1837 [sync] PR-1814:  fix CVE-2023-20593 for openEuler
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - x86/cpu/amd: Add a Zenbleed fix
  - x86/cpu/amd: Move the errata checking functionality up
  - !1790 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
  - mm: disable kernelcore=mirror when no mirror memory
  - !1777 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.25.0.101
changelog:
  - !1893 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1887 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1868 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1782 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1890 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - !1908  fix build error when setting CONFIG_HISI_PMU=y
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver
  - Revert "drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver"
  - Revert "drivers/perf: hisi: Add support for HiSilicon UC PMU driver"
  - Revert "perf: hisi: delete global enable pmu from xxx_write_counter()"
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1798 Backport 5.10.163 LTS patches from upstream
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1829 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
  - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
  - mptcp: use proper req destructor for IPv6
  - mptcp: dedicated request sock for subflow in v6
  - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
  - mptcp: mark ops structures as ro_after_init
  - serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way"
  - fsl_lpuart: Don't enable interrupts too early
  - ext4: don't set up encryption key during jbd2 transaction
  - ext4: disable fast-commit of encrypted dir operations
  - parisc: Align parisc MADV_XXX constants with all other architectures
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
  - efi: random: combine bootloader provided RNG seed with RNG protocol output
  - mbcache: Avoid nesting of cache->c_list_lock under bit locks
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
  - hfs/hfsplus: use WARN_ON for sanity check
  - selftests: set the BUILD variable to absolute path
  - ext4: don't allow journal inode to have encrypt flag
  - drm/i915/gvt: fix vgpu debugfs clean in remove
  - drm/i915/gvt: fix gvt debugfs destroy
  - riscv: uaccess: fix type of 0 variable on error in get_user()
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout
  - nvme: fix multipath crash caused by flush request when blktrace is enabled
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
  - udf: Fix extension of the last extent in the file
  - caif: fix memory leak in cfctrl_linkup_request()
  - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  - usb: rndis_host: Secure rndis_query check against int overflow
  - drivers/net/bonding/bond_3ad: return when there's no aggregator
  - perf tools: Fix resources leak in perf_data__open_dir()
  - netfilter: ipset: Rework long task execution when adding/deleting entries
  - netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  - gpio: sifive: Fix refcount leak in sifive_gpio_probe
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug
  - filelock: new helper: vfs_inode_has_locks
  - drm/meson: Reduce the FIFO lines held when AFBC is not used
  - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  - net: amd-xgbe: add missed tasklet_kill
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
  - net/mlx5: Avoid recovery in probe flows
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
  - vhost: fix range used in translate_desc()
  - vringh: fix range used in iotlb_translate()
  - vhost/vsock: Fix error handling in vhost_vsock_init()
  - nfc: Fix potential resource leaks
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
  - nfsd: shut down the NFSv4 state objects before the filecache
  - veth: Fix race with AF_XDP exposing old or uninitialized descriptors
  - vmxnet3: correctly report csum_level for encapsulated packet
  - drm/panfrost: Fix GEM handle creation ref-counting
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - ext4: use kmemdup() to replace kmalloc + memcpy
  - ext4: fix leaking uninitialized memory in fast-commit journal
  - ext4: fix various seppling typos
  - fs: ext4: initialize fsdata in pagecache_write()
  - ext4: use memcpy_to_page() in pagecache_write()
  - mm/highmem: Lift memcpy_[to|from]_page to core
  - ext4: correct inconsistent error msg in nojournal mode
  - ext4: goto right label 'failed_mount3a'
  - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
  - riscv/stacktrace: Fix stack output without ra on the stack top
  - ravb: Fix "failed to switch device to config mode" message during unbind
  - staging: media: tegra-video: fix device_node use after free
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
  - x86/kprobes: Convert to insn_decode()
  - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
  - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
  - media: s5p-mfc: Fix in register read and write for H264
  - media: s5p-mfc: Clear workbit to handle error condition
  - media: s5p-mfc: Fix to handle reference queue during finishing
  - x86/MCE/AMD: Clear DFR errors found in THR handler
  - x86/mce: Get rid of msr_ops
  - btrfs: replace strncpy() with strscpy()
  - perf/x86/intel/uncore: Clear attr_update properly
  - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure
  - ARM: renumber bits related to _TIF_WORK_MASK
  - drm/amdgpu: make display pinning more flexible (v2)
  - drm/amdgpu: handle polaris10/11 overlap asics (v2)
  - ext4: allocate extended attribute value in vmalloc area
  - ext4: avoid unaccounted block allocation when expanding inode
  - ext4: initialize quota before expanding inode in setproject ioctl
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path
  - ext4: avoid BUG_ON when creating xattrs
  - ext4: fix error code return to user-space in ext4_get_branch()
  - ext4: fix corruption when online resizing a 1K bigalloc fs
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
  - ext4: init quota for 'old.inode' in 'ext4_rename'
  - ext4: check and assert if marking an no_delete evicting inode dirty
  - ext4: fix reserved cluster accounting in __es_remove_extent()
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
  - ext4: silence the warning when evicting inode with dioread_nolock
  - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
  - drm/i915/dsi: fix VBT send packet port selection for dual link DSI
  - drm/connector: send hotplug uevent on connector cleanup
  - device_cgroup: Roll back to original exceptions after copy failure
  - parisc: led: Fix potential null-ptr-deref in start_task()
  - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - crypto: n2 - add missing hash statesize
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
  - ipmi: fix long wait in unload when IPMI disconnect
  - ASoC: jz4740-i2s: Handle independent FIFO flush bits
  - wifi: wilc1000: sdio: fix module autoloading
  - efi: Add iMac Pro 2017 to uefi skip cert quirk
  - md/bitmap: Fix bitmap chunk size overflow issues
  - rtc: ds1347: fix value written to century register
  - cifs: fix missing display of three mount options
  - cifs: fix confusing debug message
  - media: dvb-core: Fix double free in dvb_register_device()
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  - staging: media: tegra-video: fix chan->mipi value on error
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - tracing/hist: Fix wrong return value in parse_action_params()
  - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
  - ftrace/x86: Add back ftrace_expected for ftrace bug reports
  - perf/core: Call LSM hook after copying perf_event_attr
  - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
  - dm cache: set needs_check flag after aborting metadata
  - dm cache: Fix UAF in destroy()
  - dm clone: Fix UAF in clone_dtr()
  - dm integrity: Fix UAF in dm_integrity_dtr()
  - dm thin: Fix UAF in run_timer_softirq()
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
  - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
  - ALSA: patch_realtek: Fix Dell Inspiron Plus 16
  - cpufreq: Init completion before kobject_init_and_add()
  - PM/devfreq: governor: Add a private governor_data for governor
  - selftests: Use optional USERCFLAGS and USERLDFLAGS
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
  - ARM: ux500: do not directly dereference __iomem
  - btrfs: fix resolving backrefs for inline extent followed by prealloc
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
  - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
  - jbd2: use the correct print format
  - ktest.pl minconfig: Unset configs instead of just removing them
  - kest.pl: Fix grub2 menu handling for rebooting
  - soc: qcom: Select REMAP_MMIO for LLCC driver
  - media: stv0288: use explicitly signed char
  - rcu: Prevent lockdep-RCU splats on lock acquisition/release
  - torture: Exclude "NOHZ tick-stop error" from fatal errors
  - wifi: rtlwifi: 8192de: correct checking of IQK reload
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12
  - net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
  - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
  - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
  - kcsan: Instrument memcpy/memset/memmove with newer Clang
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
  - tpm: acpi: Call acpi_put_table() to fix memory leak
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
  - f2fs: should put a page when checking the summary info
  - mm, compaction: fix fast_isolate_around() to stay within boundaries
  - md: fix a crash in mempool_free
  - pnode: terminate at peers of source
  - ALSA: line6: fix stack overflow in line6_midi_transmit
  - ALSA: line6: correct midi status byte when receiving data from podxt
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount
  - pstore/zone: Use GFP_ATOMIC to allocate zone buffer
  - HID: plantronics: Additional PIDs for double volume key presses quirk
  - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  - powerpc/rtas: avoid scheduling in rtas_os_term()
  - powerpc/rtas: avoid device tree lookups in rtas_os_term()
  - objtool: Fix SEGFAULT
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue
  - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
  - ata: ahci: Fix PCS quirk application for suspend
  - nvme-pci: fix page size checks
  - nvme-pci: fix mempool alloc size
  - nvme-pci: fix doorbell buffer value endianness
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - cifs: fix oops during encryption
  - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
  - pwm: tegra: Fix 32 bit build
  - media: dvbdev: fix refcnt bug
  - media: dvbdev: fix build warning due to comments
  - gcov: add support for checksum field
  - regulator: core: fix deadlock on regulator enable
  - iio: adc128s052: add proper .data members in adc128_of_match table
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock
  - reiserfs: Add missing calls to reiserfs_security_free()
  - HID: mcp2221: don't connect hidraw
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode
  - usb: dwc3: core: defer probe on ulpi_read_id timeout
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
  - ALSA: usb-audio: add the quirk for KT0206 device
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
  - afs: Fix lost servers_outstanding count
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option()
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
  - LoadPin: Ignore the "contents" argument of the LSM hooks
  - ASoC: rt5670: Remove unbalanced pm_runtime_put()
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()
  - ASoC: wm8994: Fix potential deadlock
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()
  - ASoC: Intel: Skylake: Fix driver hang during shutdown
  - ALSA: hda: add snd_hdac_stop_streams() helper
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
  - hwmon: (jc42) Fix missing unlock on error in jc42_write()
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
  - clk: st: Fix memory leak in st_of_quadfs_setup()
  - media: si470x: Fix use-after-free in si470x_int_in_callback()
  - mmc: renesas_sdhi: better reset from HS400 mode
  - mmc: f-sdh30: Add quirks for broken timeout clock capability
  - regulator: core: fix use_count leakage when handling boot-on
  - libbpf: Avoid enum forward-declarations in public API in C++ mode
  - blk-mq: fix possible memleak when register 'hctx' failed
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
  - media: dvbdev: adopts refcnt to avoid UAF
  - media: dvb-frontends: fix leak of memory fw
  - ethtool: avoiding integer overflow in ethtool_phys_id()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - drm/amd/display: fix array index out of bound error in bios parser
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
  - drm/sti: Use drm_mode_copy()
  - drm/rockchip: Use drm_mode_copy()
  - drm/msm: Use drm_mode_copy()
  - s390/lcs: Fix return type of lcs_start_xmit()
  - s390/netiucv: Fix return type of netiucv_tx()
  - s390/ctcm: Fix return type of ctc{mp,}m_tx()
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback
  - igb: Do not free q_vector unless new one was allocated
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()
  - hamradio: baycom_epp: Fix return type of baycom_send_packet()
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
  - qed (gcc13): use u16 for fid to be big enough
  - ipmi: fix memleak when unload ipmi driver
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
  - wifi: ath9k: verify the expected usb_endpoints are present
  - brcmfmac: return error when getting invalid max_flowrings from dongle
  - drm/etnaviv: add missing quirks for GC300
  - hfs: fix OOB Read in __hfs_brec_find
  - acct: fix potential integer overflow in encode_comp_t()
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG
  - udf: Avoid double brelse() in udf_rename()
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
  - video: hyperv_fb: Avoid taking busy spinlock on panic path
  - arm64: make is_ttbrX_addr() noinstr-safe
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - myri10ge: Fix an error handling path in myri10ge_probe()
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module
  - mailbox: zynq-ipi: fix error handling while device_register() fails
  - skbuff: Account for tail adjustment during pull operations
  - openvswitch: Fix flow lookup to use unmasked key
  - selftests: devlink: fix the fd redirect in dummy_reporter_test
  - rtc: mxc_v2: Add missing clk_disable_unprepare()
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL
  - igc: Lift TAPRIO schedule restriction
  - igc: recalculate Qbv end_time by considering cycle time
  - igc: Add checking for basetime less than zero
  - igc: Use strict cycles for Qbv scheduling
  - igc: Enhance Qbv scheduling by using first flag bit
  - net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME
  - r6040: Fix kmemleak in probe and remove
  - nfc: pn533: Clear nfc_target before being used
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - net: macsec: fix net device access prior to holding a lock
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
  - NFSD: Remove spurious cb_setup_err tracepoint
  - rtc: pcf85063: fix pcf85063_clkout_control
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
  - netfilter: flowtable: really fix NAT IPv6 offload
  - powerpc/pseries/eeh: use correct API for error log size
  - powerpc/eeh: Drop redundant spinlock initialization
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()
  - remoteproc: qcom_q6v5_pas: detach power domains on remove
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
  - selftests/powerpc: Fix resource leaks
  - powerpc/hv-gpci: Fix hv_gpci event list
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()
  - powerpc/perf: callchain validate kernel stack pointer bounds
  - kbuild: refactor single builds of *.ko
  - kbuild: unify modules(_install) for in-tree and external modules
  - kbuild: remove unneeded mkdir for external modules_install
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
  - powerpc/xmon: Enable breakpoints on 8xx
  - cxl: Fix refcount leak in cxl_calc_capp_routing
  - powerpc/52xx: Fix a resource leak in an error handling path
  - macintosh/macio-adb: check the return value of ioremap()
  - macintosh: fix possible memory leak in macio_add_one_device()
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
  - iommu/amd: Fix pci device refcount leak in ppr_notifier()
  - rtc: pcf85063: Fix reading alarm
  - rtc: snvs: Allow a time difference on clock register read
  - rtc: cmos: Disable ACPI RTC event on removal
  - rtc: cmos: Rename ACPI-related functions
  - rtc: cmos: Eliminate forward declarations of some functions
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
  - rtc: cmos: fix build on non-ACPI platforms
  - rtc: cmos: Fix wake alarm breakage
  - rtc: cmos: Fix event handler registration ordering issue
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
  - pwm: tegra: Improve required rate calculation
  - include/uapi/linux/swab: Fix potentially missing __always_inline
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
  - iommu/sun50i: Fix flush size
  - iommu/sun50i: Fix R/W permission check
  - iommu/sun50i: Consider all fault sources for reset
  - iommu/sun50i: Fix reset release
  - RDMA/siw: Fix pointer cast warning
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info
  - HSI: omap_ssi_core: Fix error handling in ssi_init()
  - perf symbol: correction while adjusting symbol
  - perf trace: Handle failure when trace point folder is missed
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
  - perf trace: Return error if a system call doesn't exist
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register()
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
  - fbdev: vermilion: decrease reference count in error path
  - fbdev: via: Fix error in via_core_init()
  - fbdev: pm2fb: fix missing pci_disable_device()
  - fbdev: ssd1307fb: Drop optional dependency
  - thermal/drivers/imx8mm_thermal: Validate temperature range
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
  - tracing/hist: Fix issue of losting command info in error_log
  - usb: storage: Add check for kcalloc
  - i2c: mux: reg: check return value after calling platform_get_resource()
  - gpiolib: cdev: fix NULL-pointer dereferences
  - gpiolib: Get rid of redundant 'else'
  - vme: Fix error not catched in fake_init()
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
  - staging: rtl8192u: Fix use after free in ieee80211_rx()
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
  - chardev: fix error handling in cdev_device_add()
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
  - drivers: mcb: fix resource leak in mcb_probe()
  - usb: gadget: f_hid: fix refcount leak on error path
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev
  - usb: gadget: f_hid: optional SETUP/SET_REPORT mode
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
  - iio: adis: add '__adis_enable_irq()' implementation
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace
  - iio: adis: stylistic changes
  - iio: adis: handle devices that cannot unmask the drdy pin
  - iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
  - ocxl: fix pci device refcount leak when calling get_function_0()
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu()
  - test_firmware: fix memory leak in test_firmware_init()
  - serial: sunsab: Fix error handling in sunsab_init()
  - serial: altera_uart: fix locking in polling mode
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars()
  - serial: pch: Fix PCI device refcount leak in pch_request_dma()
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add
  - usb: fotg210-udc: Fix ages old endianness issues
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration
  - vfio: platform: Do not pass return buffer to ACPI _RST method
  - class: fix possible memory leak in __class_register()
  - serial: tegra: Read DMA status before terminating
  - drivers: dio: fix possible memory leak in dio_init()
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
  - hwrng: geode - Fix PCI device refcount leak
  - hwrng: amd - Fix PCI device refcount leak
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
  - orangefs: Fix sysfs not cleanup when dev init failed
  - RDMA/srp: Fix error return code in srp_parse_options()
  - RDMA/hfi1: Fix error return code in parse_platform_config()
  - riscv/mm: add arch hook arch_clear_hugepage_flags
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
  - crypto: amlogic - Remove kcalloc without check
  - RDMA/nldev: Fix failure to send large messages
  - f2fs: avoid victim selection from previous victim section
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
  - scsi: snic: Fix possible UAF in snic_tgt_create()
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
  - scsi: ipr: Fix WARNING in ipr_init()
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
  - scsi: fcoe: Fix possible name leak when device_register() fails
  - scsi: scsi_debug: Fix a warning in resp_report_zones()
  - scsi: scsi_debug: Fix a warning in resp_verify()
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host()
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - padata: Fix list iterator in padata_do_serial()
  - padata: Always leave BHs disabled when running ->parallel()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one()
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function
  - RDMA/hfi: Decrease PCI device reference count in error path
  - PCI: Check for alloc failure in pci_request_irq()
  - crypto: cryptd - Use request context instead of stack for sub-request
  - crypto: ccree - Remove debugfs when platform_driver_register failed
  - scsi: scsi_debug: Fix a warning in resp_write_scat()
  - RDMA/siw: Set defined status for work completion with undefined status
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
  - RDMA/siw: Fix immediate work request flush to completion queue
  - f2fs: fix normal discard process
  - apparmor: Fix memleak in alloc_ns()
  - crypto: rockchip - rework by using crypto_engine
  - crypto: rockchip - delete unneeded variable initialization
  - crypto: rockchip - remove non-aligned handling
  - crypto: rockchip - better handle cipher key
  - crypto: rockchip - add fallback for ahash
  - crypto: rockchip - add fallback for cipher
  - crypto: rockchip - do not store mode globally
  - crypto: rockchip - do not do custom power management
  - f2fs: Fix the race condition of resize flag between resizefs
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
  - RDMA/core: Fix order of nldev_exit call
  - PCI: dwc: Fix n_fts[] array overrun
  - apparmor: Use pointer to struct aa_label for lbs_cred
  - scsi: core: Fix a race between scsi_done() and scsi_timeout()
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
  - crypto: sun8i-ss - use dma_addr instead u32
  - apparmor: Fix abi check to include v8 abi
  - apparmor: fix lockdep warning when removing a namespace
  - apparmor: fix a memleak in multi_transaction_new()
  - stmmac: fix potential division by 0
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
  - sctp: sysctl: make extra pointers netns aware
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context
  - net: lan9303: Fix read error execution path
  - can: tcan4x5x: Remove invalid write in clear_interrupts
  - net: amd-xgbe: Check only the minimum speed for active/passive cables
  - net: amd-xgbe: Fix logic around active and passive cables
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock
  - net: farsync: Fix kmemleak when rmmods farsync
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
  - net: defxx: Fix missing err handling in dfx_init()
  - net: vmw_vsock: vmci: Check memcpy_from_msg()
  - clk: socfpga: Fix memory leak in socfpga_gate_init()
  - clk: socfpga: use clk_hw_register for a5/c5
  - clk: socfpga: clk-pll: Remove unused variable 'rc'
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
  - wifi: rtl8xxxu: Fix the channel width reporting
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll()
  - media: coda: Add check for kmalloc
  - media: coda: Add check for dcoda_iram_alloc
  - media: c8sectpfe: Add of_node_put() when breaking out of loop
  - mmc: mmci: fix return value check of mmc_add_host()
  - mmc: wbsd: fix return value check of mmc_add_host()
  - mmc: via-sdmmc: fix return value check of mmc_add_host()
  - mmc: meson-gx: fix return value check of mmc_add_host()
  - mmc: omap_hsmmc: fix return value check of mmc_add_host()
  - mmc: atmel-mci: fix return value check of mmc_add_host()
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host()
  - mmc: vub300: fix return value check of mmc_add_host()
  - mmc: toshsd: fix return value check of mmc_add_host()
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
  - mmc: pxamci: fix return value check of mmc_add_host()
  - mmc: mxcmmc: fix return value check of mmc_add_host()
  - mmc: moxart: fix return value check of mmc_add_host()
  - mmc: alcor: fix return value check of mmc_add_host()
  - NFSv4.x: Fail client initialisation if state manager thread can't run
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
  - media: saa7164: fix missing pci_disable_device()
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume
  - hwmon: (jc42) Convert register access and caching to regmap/regcache
  - regulator: core: fix resource leak in regulator_register()
  - configfs: fix possible memory leak in configfs_create_dir()
  - hsr: Synchronize sequence number updates.
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr.
  - hsr: Disable netpoll.
  - net: hsr: generate supervision frame without HSR/PRP tag
  - hsr: Add a rcu-read lock to hsr_forward_skb().
  - clk: qcom: clk-krait: fix wrong div2 functions
  - regulator: core: fix module refcount leak in set_supply()
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
  - wifi: mac80211: fix memory leak in ieee80211_if_add()
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
  - bonding: uninitialized variable in bond_miimon_inspect()
  - netfilter: conntrack: set icmpv6 redirects as RELATED
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
  - ASoC: mediatek: mt8173: Fix debugfs registration for components
  - wifi: iwlwifi: mvm: fix double free on tx path.
  - ALSA: asihpi: fix missing pci_disable_device()
  - NFS: Fix an Oops in nfs_d_automount()
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
  - NFSv4.2: Fix initialisation of struct nfs4_label
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
  - media: dvb-core: Fix ignored return value in dvb_register_frontend()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - clk: imx: replace osc_hdmi with dummy
  - media: imon: fix a race condition in send_packet()
  - media: vimc: Fix wrong function called when vimc_init() fails
  - ASoC: qcom: Add checks for devm_kcalloc
  - drbd: fix an invalid memory access caused by incorrect use of list iterator
  - mtd: maps: pxa2xx-flash: fix memory leak in probe
  - bonding: fix link recovery in mode 2 when updelay is nonzero
  - drm/amdgpu: fix pci device refcount leak
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
  - regulator: core: use kfree_const() to free space conditionally
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
  - HID: hid-sensor-custom: set fixed size for custom attributes
  - bpf: Move skb->len == 0 checks into __bpf_redirect
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
  - media: videobuf-dma-contig: use dma_mmap_coherent
  - media: platform: exynos4-is: Fix error handling in fimc_md_init()
  - media: solo6x10: fix possible memory leak in solo_sysfs_init()
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
  - Input: elants_i2c - properly handle the reset GPIO when power is off
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref
  - wifi: ath10k: Fix return value in ath10k_pci_init()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - integrity: Fix memory leakage in keyring allocation error path
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
  - ASoC: pxa: fix null-pointer dereference in filter()
  - drm/mediatek: Modify dpi power on/off sequence.
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
  - media: camss: Clean up received buffers on failed start of streaming
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC
  - mtd: Fix device name leak when register device failed in add_mtd_device()
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
  - bpf: propagate precision across all frames, not just the last one
  - bpf: Check the other end of slot_type for STACK_SPILL
  - bpf: propagate precision in ALU/ALU64 operations
  - media: platform: exynos4-is: fix return value check in fimc_md_probe()
  - bpf: Fix slot type check in check_stack_write_var_off
  - drm/msm/hdmi: drop unused GPIO support
  - drm/msm/hdmi: switch to drm_bridge_connector
  - ima: Fix fall-through warnings for Clang
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
  - spi: Update reference to struct spi_controller
  - clk: renesas: r9a06g032: Repair grave increment error
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming
  - can: kvaser_usb: Add struct kvaser_usb_busparams
  - can: kvaser_usb_leaf: Fix bogus restart events
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping
  - can: kvaser_usb_leaf: Fix improved state not being reported
  - can: kvaser_usb_leaf: Set Warning state even without bus errors
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
  - can: kvaser_usb: do not increase tx statistics when sending error message frames
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals
  - media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev
  - venus: pm_helpers: Fix error check in vcodec_domains_get()
  - media: i2c: ad5820: Fix error path
  - media: coda: jpeg: Add check for kmalloc
  - pata_ipx4xx_cf: Fix unsigned comparison with less than zero
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
  - rapidio: devices: fix missing put_device in mport_cdev_open
  - hfs: Fix OOB Write in hfs_asc2mac
  - relay: fix type mismatch when allocating memory in relay_create_buf()
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
  - rapidio: fix possible UAF when kfifo_alloc() fails
  - fs: sysv: Fix sysv_nblocks() returns wrong value
  - MIPS: OCTEON: warn only once if deprecated link status is being used
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
  - PM: runtime: Do not call __rpm_callback() from rpm_idle()
  - PM: runtime: Improve path in rpm_idle() when no callback
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
  - x86/xen: Fix memory leak in xen_init_lock_cpu()
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
  - cpu/hotplug: Make target_store() a nop when target == state
  - futex: Resend potentially swallowed owner death notification
  - futex: Move to kernel/futex/
  - clocksource/drivers/sh_cmt: Access registers according to spec
  - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
  - rapidio: rio: fix possible name leak in rio_register_mport()
  - rapidio: fix possible name leaks when rio_add_device() fails
  - ocfs2: fix memory leak in ocfs2_mount_volume()
  - ocfs2: rewrite error handling of ocfs2_fill_super
  - ocfs2: ocfs2_mount_volume does cleanup job before return error
  - debugfs: fix error when writing negative value to atomic_t debugfs file
  - docs: fault-injection: fix non-working usage of negative values
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
  - genirq/irqdesc: Don't try to remove non-existing sysfs files
  - nfsd: don't call nfsd_file_put from client states seqfile display
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
  - PNP: fix name memory leak in pnp_alloc_dev()
  - selftests/efivarfs: Add checking of the test return value
  - MIPS: vpe-cmp: fix possible memory leak while module exiting
  - MIPS: vpe-mt: fix possible memory leak while module exiting
  - ocfs2: fix memory leak in ocfs2_stack_glue_init()
  - lib/fonts: fix undefined behavior in bit shift for get_default_font
  - proc: fixup uptime selftest
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - platform/x86: huawei-wmi: fix return value calculation
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init
  - perf: Fix possible memleak in pmu_dev_alloc()
  - selftests/ftrace: event_triggers: wait longer for test_event_enable
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
  - fs: don't audit the capability check in simple_xattr_list()
  - PM: hibernate: Fix mistake in kerneldoc comment
  - alpha: fix syscall entry in !AUDUT_SYSCALL case
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - sched/uclamp: Fix relationship between uclamp and migration margin
  - sched/fair: Cleanup task_util and capacity type
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - ARM: mmp: fix timer_read delay
  - pstore/ram: Fix error return code in ramoops_probe()
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
  - ARM: dts: turris-omnia: Add switch port 6 node
  - ARM: dts: turris-omnia: Add ethernet aliases
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
  - arm64: dts: mt2712e: Fix unit address for pinctrl node
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - arm: dts: spear600: Fix clcd interrupt
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
  - soc: qcom: apr: make code more reuseable
  - soc: qcom: llcc: make irq truly optional
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
  - arm64: dts: qcom: sdm630: fix UART1 pin bias
  - ARM: dts: qcom: apq8064: fix coresight compatible
  - arm64: dts: qcom: msm8996: fix GPU OPP table
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
  - usb: musb: remove extra check in musb_gadget_vbus_draw
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.26.0.102
changelog:
  - !2004 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !1628 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1819 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1981 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1386 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - !1929 [sync] PR-1920: net/hinic3: Add DPU PF device type support.
  - net/hinic3: Add DPU PF device type support.
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.27.0.103
changelog:
  - !2145 [sync] PR-2126:  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2110 [sync] PR-2090:  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2103 [sync] PR-2092:  netfilter: nf_tables: skip bound chain on rule flush
  - !2112 [sync] PR-2085:  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2104 [sync] PR-2097:  Fixed 4 CVEs of the ksmbd
  - !2078 [sync] PR-2065:  dm: switch to precise io accounting
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - !1927 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - !2008 [sync] PR-1928: RDMA/hns Bugfix from mainline linux
  - dm: switch to precise io accounting
  - !2059 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2049 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request
  - RDMA/hns: Remove the num_qpc_timer variable


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.28.0.105
changelog:
  - !2215 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2241 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2244 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2235 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
  - !2233 [sync] PR-2086:  fix CVE-2023-20588
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1879 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2172 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2083 [sync] PR-2009: Fix errors related to bond for RDMA/hns
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2151 [sync] PR-2095:  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - RDMA/hns: Fix missing cleanup when bond_grp becomes invalid
  - RDMA/hns: Fix the device loss after unbinding RoCE bond resource slave
  - RDMA/hns: Fix wild pointer error of RoCE bonding when rmmod hns3
  - RDMA/hns: Add functions to obtain netdev and bus_num from an hr_dev
  - RDMA/hns: Fix a memory leak error when bond clear failed
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.29.0.106
changelog:
  - !2393  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2386  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2380 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !1939 [sync] PR-1771: Backport 5.10.164 - 5.10.165  LTS patches from upstream.
  - !2320 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !2311 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !2279 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2125 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !2187  nvme-pci: fix timeout request state check
  - !2251 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - nvme-pci: fix timeout request state check
  - nvme-pci: fix DMA direction of unmapping integrity data
  - io_uring/rw: remove leftover debug statement
  - io_uring/rw: ensure kiocb_end_write() is always called
  - io_uring: fix double poll leak on repolling
  - io_uring: Clean up a false-positive warning from GCC 9.3.0
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
  - Bluetooth: hci_qca: Fixed issue during suspend
  - Bluetooth: hci_qca: check for SSR triggered flag while suspend
  - Bluetooth: hci_qca: Wait for SSR completion during suspend
  - soc: qcom: apr: Make qcom,protection-domain optional again
  - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
  - tracing: Use alignof__(struct {type b;}) instead of offsetof()
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
  - Revert "drm/amdgpu: make display pinning more flexible (v2)"
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Execute runtime services from a dedicated stack
  - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
  - drm/amd/display: Calculate output_color_space after pixel encoding adjustment
  - drm/amd/display: Fix set scaling doesn's work
  - drm/i915: re-disable RC6p on Sandy Bridge
  - mei: me: add meteor lake point M DID
  - gsmi: fix null-deref in gsmi_get_variable
  - serial: atmel: fix incorrect baudrate setup
  - dmaengine: tegra210-adma: fix global intr clear
  - serial: pch_uart: Pass correct sg to dma_unmap_sg()
  - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
  - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
  - usb: gadget: g_webcam: Send color matching descriptor per frame
  - usb: typec: altmodes/displayport: Fix pin assignment calculation
  - usb: typec: altmodes/displayport: Add pin assignment helper
  - usb: host: ehci-fsl: Fix module alias
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id
  - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
  - thunderbolt: Use correct function to calculate maximum USB3 link rate
  - cifs: do not include page data when checking signature
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref
  - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
  - comedi: adv_pci1760: Fix PWM instruction handling
  - usb: core: hub: disable autosuspend for TI TUSB8041
  - misc: fastrpc: Fix use-after-free race condition for maps
  - misc: fastrpc: Don't remove map on creater_process and device_release
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
  - staging: vchiq_arm: fix enum vchiq_status return types
  - USB: serial: option: add Quectel EM05CN modem
  - USB: serial: option: add Quectel EM05CN (SG) modem
  - USB: serial: option: add Quectel EC200U modem
  - USB: serial: option: add Quectel EM05-G (RS) modem
  - USB: serial: option: add Quectel EM05-G (CS) modem
  - USB: serial: option: add Quectel EM05-G (GR) modem
  - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
  - usb: acpi: add helper to check port lpm capability using acpi _DSM
  - xhci: Add a flag to disable USB3 lpm on a xhci root port level.
  - xhci: Add update_hub_device override for PCI xHCI hosts
  - xhci: Fix null pointer dereference when host dies
  - usb: xhci: Check endpoint is valid before dereferencing it
  - xhci-pci: set the dma max_seg_size
  - io_uring/rw: defer fsnotify calls to task context
  - io_uring: do not recalculate ppos unnecessarily
  - io_uring: update kiocb->ki_pos at execution time
  - io_uring: remove duplicated calls to io_kiocb_ppos
  - io_uring: ensure that cached task references are always put on exit
  - io_uring: fix CQ waiting timeout handling
  - io_uring: lock overflowing for IOPOLL
  - io_uring: check for valid register opcode earlier
  - io_uring: fix async accept on O_NONBLOCK sockets
  - io_uring: allow re-poll if we made progress
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
  - io_uring: add flag for disabling provided buffer recycling
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
  - io_uring: improve send/recv error handling
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
  - Bluetooth: hci_qca: Wait for timeout during suspend
  - drm/i915/gt: Reset twice
  - ALSA: hda/realtek - Turn on power early
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - nilfs2: fix general protection fault in nilfs_btree_insert()
  - zonefs: Detect append writes at invalid locations
  - Add exception protection processing for vd in axi_chan_handle_err function
  - wifi: mac80211: sdata can be NULL during AMPDU start
  - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
  - f2fs: let's avoid panic if extent_tree is not created
  - x86/asm: Fix an assembler warning with current binutils
  - btrfs: always report error in run_one_delayed_ref()
  - RDMA/srp: Move large values to a new enum for gcc13
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
  - tools/virtio: initialize spinlocks in vring_test.c
  - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID
  - pNFS/filelayout: Fix coalescing test for single DS
  - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  - io_uring/io-wq: only free worker if it was allocated for creation
  - io_uring/io-wq: free worker if task_work creation is canceled
  - drm/virtio: Fix GEM handle creation UAF
  - efi: fix NULL-deref in init error path
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - arm64: atomics: remove LL/SC trampolines
  - arm64: atomics: format whitespace consistently
  - x86/resctrl: Fix task CLOSID/RMID update race
  - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI
  - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID
  - Documentation: KVM: add API issues section
  - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
  - iommu/mediatek-v1: Add error handle for mtk_iommu_probe
  - mm: Always release pages to the buddy allocator in memblock_free_late().
  - net/mlx5e: Don't support encap rules with gbp option
  - net/mlx5: Fix ptp max frequency adjustment range
  - net/sched: act_mpls: Fix warning during failed attribute validation
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
  - hvc/xen: lock console list traversal
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
  - octeontx2-af: Map NIX block from CGX connection
  - octeontx2-af: Update get/set resource count functions
  - tipc: fix unexpected link reset due to discovery messages
  - ASoC: wm8904: fix wrong outputs volume after power reactivation
  - regulator: da9211: Use irq handler when ready
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period()
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
  - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ext4: fix uninititialized value in 'ext4_evict_inode'
  - usb: ulpi: defer ulpi_register on ulpi_read_id timeout
  - xhci: Prevent infinite loop in transaction errors recovery for streams
  - xhci: move and rename xhci_cleanup_halted_endpoint()
  - xhci: store TD status in the td struct instead of passing it along
  - xhci: move xhci_td_cleanup so it can be called by more functions
  - xhci: Add xhci_reset_halted_ep() helper function
  - xhci: adjust parameters passed to cleanup_halted_endpoint()
  - xhci: get isochronous ring directly from endpoint structure
  - xhci: Avoid parsing transfer events several times
  - clk: imx: imx8mp: add shared clk gate for usb suspend clk
  - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  - clk: imx8mp: add clkout1/2 support
  - clk: imx8mp: Add DISP2 pixel clock
  - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options
  - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands
  - bus: mhi: host: Fix race between channel preparation and M0 event
  - ixgbe: fix pci device refcount leak
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe
  - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
  - drm/msm/adreno: Make adreno quirks not overwrite each other
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
  - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
  - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
  - s390/kexec: fix ipl report address for kdump
  - perf auxtrace: Fix address filter duplicate symbol selection
  - docs: Fix the docs build with Sphinx 6.0
  - efi: tpm: Avoid READ_ONCE() for accessing the event log
  - KVM: arm64: Fix S1PTW handling on RO memslots
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.30.0.107
changelog:
  - !2422 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - !2398 Backport 5.10.166 - 5.10.167 LTS patches from upstream.
  - net/sched: Retire rsvp classifier
  - !1122  ext4: delete redundant uptodate check for buffer
  - !2368 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - net: fix NULL pointer in skb_segment_list
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - blk-cgroup: fix missing pd_online_fn() while activating policy
  - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
  - ARM: dts: vf610: Fix pca9548 i2c-mux node names
  - ARM: dts: imx: Fix pca9547 i2c-mux node name
  - clk: Fix pointer casting to prevent oops in devm_clk_release()
  - perf/x86/amd: fix potential integer overflow on shift of a int
  - netfilter: conntrack: unify established states for SCTP paths
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - block: fix and cleanup bio_check_ro
  - Revert "selftests/ftrace: Update synthetic event syntax errors"
  - nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode"
  - tools: gpio: fix -c option of gpio-event-mon
  - net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH
  - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  - net: ravb: Fix possible hang if RIS2_QFF1 happen
  - netrom: Fix use-after-free of a listening socket.
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - net: fix UaF in netns ops registration error path
  - netlink: prevent potential spectre v1 gadgets
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro
  - units: Add SI metric prefix definitions
  - units: Add Watt units
  - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  - EDAC/device: Respect any driver-supplied workqueue polling value
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  - thermal: intel: int340x: Protect trip temperature from concurrent updates
  - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  - ftrace/scripts: Update the instructions for ftrace-bisect.sh
  - trace_events_hist: add check for return value of 'create_hist_field'
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - module: Don't wait for GOING modules
  - scsi: hpsa: Fix allocation size for scsi_host_alloc()
  - xhci: Set HCD flag to defer primary roothub registration
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - docs: Fix path paste-o for /sys/kernel/warn_count
  - panic: Expose "warn_count" to sysfs
  - panic: Introduce warn_limit
  - panic: Consolidate open-coded panic_on_warn checks
  - panic: Separate sysctl logic from CONFIG_SMP
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate
  - kasan: no need to unset panic_on_warn in end_report()
  - ubsan: no need to unset panic_on_warn in ubsan_epilogue()
  - panic: unset panic_on_warn inside panic()
  - kernel/panic: move panic sysctls to its own file
  - fs: reiserfs: remove useless new_opts in reiserfs_remount
  - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID"
  - lockref: stop doing cpu_relax in the cmpxchg loop
  - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  - spi: spidev: remove debug messages that access spidev->spi without locking
  - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  - cpufreq: armada-37xx: stop using 0 as NULL pointer
  - s390/debug: add _ASM_S390_ prefix to header guard
  - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  - ASoC: fsl_micfil: Correct the number of steps on SX controls
  - kcsan: test: don't put the expect array on the stack
  - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  - tcp: fix rate_app_limited to default to 1
  - net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  - driver core: Fix test_async_probe_init saves device in wrong array
  - w1: fix WARNING after calling w1_process()
  - w1: fix deadloop in __w1_remove_master_device()
  - tcp: avoid the lookup process failing to get sk in ehash table
  - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()
  - HID: betop: check shape of output reports
  - l2tp: prevent lockdep issue in l2tp_tunnel_register()
  - net: macb: fix PTP TX timestamp failure due to packet padding
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - drm/panfrost: fix GENERIC_ATOMIC64 dependency
  - net: mlx5: eliminate anonymous module_init & module_exit
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - HID: revert CHERRY_MOUSE_000C quirk
  - net: stmmac: fix invalid call to mdiobus_get_phy()
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: usb: sr9700: Handle negative len
  - l2tp: close all race conditions in l2tp_tunnel_register()
  - l2tp: convert l2tp_tunnel_list to idr
  - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  - net: nfc: Fix use-after-free in local_cleanup()
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - amd-xgbe: Delay AN timeout during KR training
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  - phy: ti: fix Kconfig warning and operator precedence
  - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  - affs: initialize fsdata in affs_truncate()
  - IB/hfi1: Remove user expected buffer invalidate race
  - IB/hfi1: Immediately remove invalid memory from hardware
  - IB/hfi1: Fix expected receive setup error exit issues
  - IB/hfi1: Reserve user expected TIDs
  - IB/hfi1: Reject a zero-length user expected buffer
  - RDMA/core: Fix ib block iterator counter overflow
  - tomoyo: fix broken dependency on *.conf.default
  - firmware: arm_scmi: Harden shared memory access in fetch_notification
  - firmware: arm_scmi: Harden shared memory access in fetch_response
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - ARM: imx: add missing of_node_put()
  - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  - ARM: dts: imx7d-pico: Use 'clock-frequency'
  - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
  - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  - clk: Provide new devm_clk helpers for prepared and enabled clocks
  - clk: generalize devm_clk_get() a bit
  - sdei_watchdog: Avoid exception during sdei handler
  - ext4: delete redundant uptodate check for buffer


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: Jiachen Fan<fanjiachen3@huawei.com> - 1:1.5.2-1
changelog:
  - Type:revert
  - ID:NA
  - SUG:NA
  - DESC:revert commit ab1fb58b56ef0913e64b71a7bac60ba129e460ff, to fix skopeo install bug in standard iso


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: liyancheng <412998149@qq.com> - 10.3.1-29
changelog:
  - Type:Revert
  - ID:NA
  - SUG:NA
  - DESC:Revert patch89
         The glibc version of oe-22.03 is 2.34, so revert it


author: Wang Ding <wangding16@huawei.com> - 10.3.1-35
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-17
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: Qingqing Li <liqingqing3@huawei.com> -2:0.8.1-10
changelog:
  - backport patch from openEuler kernel repo:
    backport-sync-the-newly-added-helper-functions-from-kernel.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: Xiong Zhou <xiongzhou4@huawei.com> 15.0.7-2
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC: Backport bugfix and add AArch64 support for hugify and inline.


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-75
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


author: <fengjiabo1@huawei.com> - 10:6.2.0-78
changelog:
  - sw_64: Added sw64 architecture related updates
  - virtio-crypto: verify src&dst buffer length for sym request
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
  - qga: Fix suspend on Linux guests without systemd
  - tests: vhost-user-test: release mutex on protocol violation
  - qapi: support updating expected test output via make
  - block: Fix misleading hexadecimal format
  - block/rbd: fix write zeroes with growing images
  - block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
  - block/nfs: Fix 32-bit Windows build
  - qapi/qdev: Tidy up device_add documentation
  - hw/xen/xen_pt: fix uninitialized variable
  - migration/ram: Fix error handling in ram_write_tracking_start()
  - docs/about/build-platforms: Refine the distro support policy
  - xen-block: Avoid leaks on new error path
  - QGA VSS: Add wrapper to send log to debugger and stderr
  - chardev/char-socket: set s->listener = NULL in char_socket_finalize
  - qapi/block: Tidy up block-latency-histogram-set documentation
  - disas/riscv Fix ctzw disassemble
  - vfio: Fix vfio_get_dev_region() trace event
  - migration/ram: Fix populate_read_range()
  - Check and report for incomplete 'global' option  format


author: <fengjiabo1@huawei.com> - 10:6.2.0-79
changelog:
  - test: Fix test-crypto-secret when compiling without keyring support
  - aio-posix: fix build failure io_uring 2.2


author: <fengjiabo1@huawei.com> - 10:6.2.0-80
changelog:
  - io: remove io watch if TLS channel is closed during handshake
  - hw/ssi: Fix Linux driver init issue with xilinx_spi
  - chardev: report the handshake error
  - vhost: Drop unused eventfd_add|del hooks
  - virtio-iommu: use-after-free fix
  - hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
  - hw/rx: rx-gdbsim DTB load address aligned of 16byte
  - vhost-user: Use correct macro name TARGET_PPC64
  - accel/kvm: Make kvm_dirty_ring_reaper_init() void
  - accel/kvm: Free as when an error occurred


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


