# changelog

author: wangkai <13474090681@163.com> - 1.4.3.36-1
changelog:
  - Update to 1.4.3.36
  - Fix dsidm user/posixgroup get_dn fails with search_ext()
  - Fix unable to add objectclass/attribute without x-origin
  - Fix execute dsconf to open pdb


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: huangyu <huangyu106@huawei.com> - 32:9.16.23-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix catalog zone reconfiguration crash
  Improve the logging on failed TCP accept
  Separate the locked parts of dns_zone_catz_enable-di
  Check if key-metadata is modified before writing
  Fix CID-352776 Concurrent data access violations
  Require valid key for dst_key functions


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
  - SUG:NA
  - DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094


author: zhanghao<zhanghao383@huawei.com> - 32:9.16.23-15
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix output expected information when install bing-sdborbind-sdb-chroot


author: zhanghao <zhanghao383@huawei.com> - 32:9.16.23-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Don't perform arithmetic on NULL pointers
  Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
  Fix a use-after-free bug in dns_zonemgr_releasezone()
  Fix dns_fwdtable_addfwd() error path cleanup bug
  Detach the views in zone_shutdown(), not in zone_free()
  Detach the zone views outside of the zone lock
  delay trust anchor management until zones are loaded
  In hmac_createctx free ctx on isc_hmac_init failure
  Fix dns_kasp_attach / dns_kasp_detach usage
  Fix backport error in 84929d1c
  Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
  Searching catzs->zones requires a read lock
  Fix view's zones reverting bug during reconfiguration


author: xiechengliang <xiechengliang1@huawei.com> - 1:1.33.1-12
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:fix CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 and CVE-2021-42386


author: Lv Ying <lvying6@huawei.com> - 21.4-17
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/fa53c7f4086f5937bc9bd328dba9f91ca73b6614
  https://github.com/canonical/cloud-init/commit/9c7502a801763520639c66125eb373123d1e4f44
  https://github.com/canonical/cloud-init/commit/2e17a0d626d41147b7d0822013e80179b3a81ee4
  https://github.com/canonical/cloud-init/commit/9f0efc474ea430c75cd0abec3e2da719d4934346
  https://github.com/canonical/cloud-init/commit/bb414c7866c4728b2105e84f7b426ab81cc4bf4d
  https://github.com/canonical/cloud-init/commit/9cbd94dd57112083856ead0e0ff724e9d1c1f714
  https://github.com/canonical/cloud-init/commit/6d817e94beb404d3917bf973bcb728aa6cc22ffe
  https://github.com/canonical/cloud-init/commit/0450a1faff9e5095e6da0865916501772b3972e9


author: Lv Ying <lvying6@huawei.com> - 21.4-18
changelog:
  - backport upstream patches:
  https://github.com/canonical/cloud-init/commit/7136109df5a7b3c75dfb05a853fc4485fed25b5f
  https://github.com/canonical/cloud-init/commit/f51c352e6c6a7d05a61308c188450a1b818eac45
  https://github.com/canonical/cloud-init/commit/668a68fe577368555ea7f71577fc352494a98c25


author: shixuantong <shixuantong1@huawei.com> - 21.4-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Do not generate dsa and ed25519 key types when crypto FIPS mode is enabled
         Don't fail if IB and Ethernet devices 'collide'
         Fix default route rendering on v2 ipv6
         Fix IPv6 netmask format for sysconfig
         Fix KeyError when rendering sysconfig IPv6 routes
         Fix network v2 metric rendering
         Ignore duplicate macs from mscc_felix and fsl_enetc
         macs: ignore duplicate MAC for devs with driver driver qmi_wwan
         net/dhcp: catch dhclient failures and raise NoDHCPLeaseError
         net: skip duplicate mac check for netvsc nic and its VF
         Set ownership for new folders in Write Files Module
         cc_ubuntu_advantage: Redact token from logs
         Do not silently ignore integer uid
         Ensure network ready before cloud-init service runs
         Fix exception when no activator found
         Fix KeyError in iproute pformat
         Handle non existent ca-cert-config situation


author: shixuantong <shixuantong1@huawei.com> - 21.4-21
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:cc_mounts: Fix swapfile not working on btrfs
         cc_mounts: Use fallocate to create swapfile on btrfs
         collect-logs fix memory usage


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: chenziyang <chenziyang4@huawei.com> - 2.13-10
changelog:
  - Type:CVE
  - ID:CVE-2015-1197
  - SUG:NA
  - DESC:backport CVE-2015-1197, delete revert-CVE-2015-1197.patch and backport the following 2 bugfix patches


author: xinghe <xinghe2@h-partners.com> - 7.79.1-14
changelog:
  - Type:cves
  - CVE:CVE-2023-23914 CVE-2023-23915 CVE-2023-23916
  - SUG:NA
  - DESC:fix CVE-2023-23914 CVE-2023-23915 CVE-2023-23916


author: xingwei <xingwei14@h-partners.com> - 7.79.1-15
changelog:
  - Type:cves
  - CVE:CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538
  - SUG:NA
  - DESC:fix CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538


author: chenhaixing <chenhaixing@huawei.com> 4.14.0-12
changelog:
  - CVE:NA
  - SUG:NA
  - DESC:dnf:fix undo error when include rollback of group upgrade
             fix can't download package when url have characters encoded


author: herengui <herengui@kylinsec.com.cn> - 4.14.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:remove useless patch of loongarch64
         dnf:recreate patch of sw64 and make arch sorted alphabetically


author: chenhaixing <chenhaixing@huawei.com> - 4.14.0-18
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Fix bash completion due to sqlite changes
             When parsing over a KVP list, do not return till the whole list is parsed


author: chenjiji <chenjiji09@163.com> - 21.11-55
changelog:
  Sync some patchs from upstreaming about add FDIR VLAN match
   mode runtime config and fix doc format for hns3 pmd. Patchs
   are as follow:
   - doc: unify sections of networking drivers guide
   - net/hns3: delete duplicate macro definition
   - net/hns3: add FDIR VLAN match mode runtime config
   - doc: fix kernel patch link in hns3 guide
   - doc: fix syntax in hns3 guide
   - doc: fix number of leading spaces in hns3 guide


author: huangdengdui <huangdengui@huawei.com> - 21.11-58
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - maintainers: update for hns3 driver
   - app/testpmd: add command to flush multicast MAC addresses
   - app/testpmd: fix help string
   - app/testpmd: fix multicast address pool leak
   - net/hns3: optimize SVE Rx performance
   - net/hns3: optimize rearm mbuf for SVE Rx
   - net/hns3: optimize free mbuf for SVE Tx
   - net/hns3: fix order in NEON Rx
   - net/hns3: fix traffic management dump text alignment
   - net/hns3: fix traffic management thread safety
   - net/hns3: fix flushing multicast MAC address
   - net/hns3: fix error code for multicast resource
   - net/hns3: fix VF default MAC modified when set failed
   - net/hns3: fix index to look up table in NEON Rx
   - net/hns3: fix non-zero weight for disabled TC
   - config/arm: add HiSilicon HIP10


author: huangdengdui <huangdengui@huawei.com> - 21.11-59
changelog:
  Sync some patchs from upstreaming and modifies are as follow:
   - net/hns3: fix mailbox sync
   - net/hns3: report maximum buffer size
   - ethdev: add maximum Rx buffer size
   - app/procinfo: show RSS hash algorithm
   - ethdev: get RSS algorithm names
   - app/procinfo: adjust format of RSS info
   - app/procinfo: fix RSS info
   - net/hns3: support setting and querying RSS hash function
   - net/hns3: report RSS hash algorithms capability
   - ethdev: set and query RSS hash algorithm
   - ethdev: clarify RSS related fields usage
   - net/hns3: fix uninitialized hash algo value
   - net/hns3: keep set/get algo key functions local
   - net/hns3: fix some error logs
   - net/hns3: fix some return values
   - net/hns3: fix LRO offload to report
   - net/hns3: fix setting DCB capability
   - app/testpmd: ease configuring all offloads
   - net/hns3: refactor interrupt state query
   - net/hns3: fix IMP or global reset
   - net/hns3: fix multiple reset detected log
   - net/hns3: remove reset log in secondary
   - net/hns3: fix double stats for IMP and global reset
   - net/hns3: fix crash for NEON and SVE
   - net/hns3: fix unchecked Rx free threshold
   - net/hns3: fix typo in function name
   - net/hns3: fix build warning
   - telemetry: fix repeat display when callback don't init dict


author: huangdengdui <huangdengui@huawei.com> - 21.11-60
changelog:
  Sync some bugfix from upstreaming about hns3 reset and modifies
   are as follow:
   - net/hns3: fix VF reset handler interruption
   - net/hns3: fix reset event status
   - net/hns3: fix ignored reset event


author: huangdengdui <huangdengui@huawei.com> - 21.11-61
changelog:
  Sync some bugfix from upstreaming about testpmd and doc, modifies
   are as follow:
   - support set RSS hash algorithm
   - ethdev: add new API to get RSS hash algorithm by name
   - doc: fix description of RSS features
   - doc: fix RSS flow description in hns3 guide
   - doc: update features in hns3 guide
   - doc: fix hns3 build option about max queue number
   - app/testpmd: check port and queue Rx/Tx offloads
   - app/testpmd: fix Tx offload command
   - app/testpmd: allow offload config for all ports
   - app/testpmd: fix tunnel TSO configuration
   - app/testpmd: add explicit check for tunnel TSO
   - app/testpmd: fix tunnel TSO capability check
   - app/testpmd: remove useless check in TSO command


author: huangdengdui <huangdengui@huawei.com> - 21.11-62
changelog:
  Sync some patches for hns3 about refactor mailbox and bugfix, modifies
   are as follow:
   - net/hns3: fix reset level comparison
   - net/hns3: fix disable command with firmware
   - net/hns3: fix VF multiple count on one reset
   - net/hns3: refactor handle mailbox function
   - net/hns3: refactor send mailbox function
   - net/hns3: refactor PF mailbox message struct
   - net/hns3: refactor VF mailbox message struct


author: gaihuiying <eaglegai@163.com> - 2.0.11-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-config file access permisson
         fix ebt_print_error for prints null


author: lifeifei<lifeifei@kylinos.cn> - 2.0.11-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".


author: dillon chen <dillon.chen@gmail.com> - 2.5.2-4
changelog:
  - CVE-2021-36045, CVE-2021-36046, CVE-2021-36047, CVE-2021-36048,
  - CVE-2021-36050, CVE-2021-36051, CVE-2021-36052, CVE-2021-36053,
  - CVE-2021-36054, CVE-2021-36055, CVE-2021-36056, CVE-2021-36058,
  - CVE-2021-36064, CVE-2021-39847, CVE-2021-40716, CVE-2021-40732,
  - CVE-2021-42528, CVE-2021-42529, CVE-2021-42530, CVE-2021-42531,
  - CVE-2021-42532


author: wangkai <13474090681@163.com> - 102.13.0-1
changelog:
  - Update to 102.13.0
  - Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
  - Remove unused patch


author: wangkai <13474090681@163.com> - 102.14.0-1
changelog:
  - Update to 102.14.0
  - Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056


author: lvfei <lvfei@kylinos.cn> - 102.15.0-1
changelog:
  - Update to 102.15.0
  - Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584


author: liyuxiang <liyuxiang@ncti-gba.cn> - 2:2.8.1-2
changelog:
  - Fix CVE-2022-39316
  - Fix CVE-2022-39318
  - Fix CVE-2022-39319
  - Fix CVE-2022-39347
  - Fix CVE-2022-41877


author: Funda Wang <fundawang@yeah.net> - 2:2.11.1-1
changelog:
  - 2.11.1
  - Fix CVE-2023-40567
  - Fix CVE-2023-40569
  - Fix CVE-2023-40188
  - Fix CVE-2023-40186
  - Fix CVE-2023-40181
  - Fix CVE-2023-39353
  - Fix CVE-2023-39352
  - Fix CVE-2023-39356
  - Fix CVE-2023-39350
  - Fix CVE-2023-39351
  - Fix CVE-2023-39354
  - Fix CVE-2023-40589


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-9
changelog:
  - init: stack setup in app thread when app call socket/epoll_create first in rtc mode
  - fix arping gazelle return value is 1
  - wrap: add run-to-completion/wakeup mode api
  - tools: gazelle_setup adapt non ltran mode
  - delete_rule bug
  - statck: the for loop in lstack thread is defined as stack_polling


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-10
changelog:
  - bond6
  - epoll: fix epollet mode error
  - ethdev: register offload to netif
  - stack: add semaphore to ensure all stack threads setup success in rtw mode before call main()
  - ethdev: fix arp unicast packets cannot be transmitted to current procotol stack
  - clean useless code
  - epoll: adapt epoll interface for rtc mode


author: hantwofish <hankangkang5@huawei.com> - 1.0.2-12
changelog:
  - solve problem that rte_pktmbuf_poll_creat in same numa .
  - Fix coredump issue and skip rte_pdump_init for secondary process
  - stack: fix possible coredump when arp packet broadcast in rtc mode
  - cfg: nic queue size only support power of 2
  - dfx: add four snmp udp datas


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-13
changelog:
  - modif mem
  - add tx package timeout
  - cfg: fix lstack mempool lookup failed in ltran mode
  - build: fix ltran build error
  - ethdev: mbuf data start pointer pbuf->payload
  - PRE_LOG: modify prelog info transfer to terminal at the same time
  - slave mac addr
  - add vlan support
  - wrap: support select
  - when timeout occurs,process exits.
  - build: add mlx5 pmd dependency


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-17
changelog:
  - support vlan offload
  - add vlan_id in netif
  - dfx: add tcp exception and kernel event statistics
  - stack: fix coredump caused by gazelleclt in rtc mode when stack num defined is greater than the hijacked thread num
  - add tcp faste timer cnt
  - dfx: support bond get dpdk xstats
  - update src/ltran/ltran_param.c. 规范679行的报错日志信息，将“,”之后的“Please”修正为“please”
  - ltran support vlan
  - cfg: rm ipv6_enable
  - wrap: fix connect wrong port after addr bind two ports
  - add gazelle log
  - PRE_LOG: modify log info while there are repeated items in conf file
  - add gazelle log


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-18
changelog:
  - Fixed an issue where no packet is sent or received when UDP traffic is sent
  - support show nic offload and features
  - log: optimize lstack log
  - gazellectl add connect para
  - dfx: fix 'gazellectl lstack show ip' failed
  - The call stack is not printed in the proactive exit scenario.
  - dfx: gazellectl -c support ipv6
  - 1.solve the problem of 1w connection not being able to ping 2.add debug info : rpc_mempool availd size
  - wrap: support shutdown
  - add struct gz_addr_t
  - fix coredump because of addr null in lwip_fill_sendring
  - fix compilation error
  - fix coredump because sock closed before send data fully
  - gazellectl: fix gazellectl lstack show 1 -r error


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-19
changelog:
  - fix EPOLLIN event error
  - optimize gazelle exit process 1. close all fds 2. lstack thread exits, then gazelle process exits
  - mod unix time stamp to local time
  - fix close can't exit
  - add keep-alive info
  - dfx: fix kernel_events stat


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-22
changelog:
  - fix rte_ring_create/free time consuming
  - use default nonblock mode
  - fix func separate_str_to_array overflow problem
  - CFG:fix check func strdup return value is NULL
  - fix gazellectl -c msg error
  - sigaction: fix deprecated signal flags
  - fix alloc not free
  - optimize shutdown exit process


author: liyancheng <412998149@qq.com> - 10.3.1-29
changelog:
  - Type:Revert
  - ID:NA
  - SUG:NA
  - DESC:Revert patch89
         The glibc version of oe-22.03 is 2.34, so revert it


author: Wang Ding <wangding16@huawei.com> - 10.3.1-35
changelog:
  - Type:Spec
  - ID:NA
  - SUG:NA
  - DESC: To resolve the spec 548 fluctuation problem, revert GCC commit.


author: hanchao <hanchao47@huawei.com> - 1.17.3-12
changelog:
  - Type:CVE
  - CVE:CVE-2022-41716
  - SUG:NA
  - DESC: remove hard code and strong dependency of git, subversion and mercurial


author: hanchao <hanchao47@huawei.com> - 1.17.3-14
changelog:
  - Type:CVE
  - CVE:CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717
  - SUG:NA
  - DESC: fix CVE-2022-23806,CVE-2022-23773,CVE-2022-24921,CVE-2021-44716,CVE-2022-23772,CVE-2022-41717


author: hanchao <hanchao47@huawei.com> - 1.17.3-15
changelog:
  - Type:CVE
  - CVE:CVE-2022-41723,CVE-2022-41724,CVE-2022-41725
  - SUG:NA
  - DESC: fix CVE-2022-41723,CVE-2022-41724,CVE-2022-41725


author: hanchao <hanchao47@huawei.com> - 1.17.3-17
changelog:
  - Type:CVE
  - CVE:CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538
  - SUG:NA
  - DESC: fix CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


author: hanchao <hanchao63@huawei.com> - 1.17.3-18
changelog:
  - Type:CVE
  - CVE:CVE-2023-29400,CVE-2023-24539,CVE-2023-24540
  - SUG:NA
  - DESC: fix CVE-2023-29400,CVE-2023-24539,CVE-2023-24540


author: hanchao <hanchao63@huawei.com> - 1.17.3-19
changelog:
  - Type:CVE
  - CVE:CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405
  - SUG:NA
  - DESC:fix CVE-2023-29402,CVE-2023-29403,CVE-2023-29404,CVE-2023-29405


author: luoyujie <luoyujie5@huawei.com> - 1.17.3-23
changelog:
  - Type:CVE
  - CVE:CVE-2023-39318,CVE-2023-39319
  - SUG:NA
  - DESC:fix CVE-2023-39318 and CVE-2023-39319


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
         net/bootp: Fix unchecked return value
         fs/iso9660: Avoid reading past the entry boundary
         fs/iso9660: Incorrect check for entry boundary
         fs/iso9660: Prevent skipping CE or ST at start of continuation area
         fs/iso9660: Prevent read past the end of system use area
         fs/iso9660: Add check to prevent infinite loop
         gentpl.py: Remove .interp section from .img files
         kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
         font: Reject fonts with negative max_char_width or max_char_height
         font: Assign null_font to unknown_glyph
         font: Check return value of grub_malloc() in ascii_glyph_lookup()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern/acpi: Use xsdt_addr if present
         commands/acpi: Use xsdt_addrifpresent


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:kern: Check for NULL when closing devices and disks
         kern/efi/mm: Fix use-after-free in finish boot services
         util/grub-install-common: Fix the key of the --core-compress option
         net/dns: Fix lookup error when no IPv6 is returned
         net/dns: Simplify error handling of recv_hook() function
         net/dns: Fix removal of DNS server


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/udf: Fix out of bounds access
         lib/relocator: Fix OOB write when initializing lo->freebytes[]
         util/grub-mount: Fix memory leak in fuse_getattr()


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
changelog:
  - Type:CVE
  - CVE:CVE-2023-4692 CVE-2023-4693
  - SUG:NA
  - DESC:fs/ntfs: Make code more readable
         fs/ntfs: Fix an OOB read when parsing a volume label
         fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
         fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
         fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
         fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file


author: xinghe <xinghe2@h-partners.com> - 2.6.6-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:connection: Clear flags when a conn is removed
         connection: Preserve flags when a conn is removed
         stream: do not try to free a failed stream-conn
         http_ana/txn: don't re-initialize txn and req var
         mworker: prevent incorrect values in uptime
         protocol: fix minor memory leak in protocol_bind_all()
         stream: Perform errors handling in right order in stream_new()


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-11
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:change default value of HeartbeatMaxServers
         fix setting and comparison of IPs fileds
         avoid voerflow in case of indecently large session
         make ap_escape_quotes() work correctly
         fix lua_request with cast first
         Handle children killed pathologically
         mod_md do not interfere with requests if challenge type http-01


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-12
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:reduce the dependency of httpd on system-logos installation


author: seuzw <930zhaowei@163.com> - 2.4.51-13
changelog:
  - Type:cves
  - ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
  - SUG:restart
  - DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-15
changelog:
  - Type:CVE
  - ID:CVE-2023-27522, CVE-2023-25690
  - SUG:restart
  - DESC:fix CVE-2023-27522, CVE-2023-25690


author: chengyechun <chengyehcun1@huawei.com> - 2.4.51-16
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:Report an error if the AJP backend sends an invalid number of headers
         handled a negative value when parsing the config
         avoid delimiting the query with a backreference
         fix missing APLOGNO


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-17
changelog:
  - Type:bugfix
  - ID:
  - SUG:restart
  - DESC:add ExecStartPost option to htcacheclean.service for solving error message when htcacheclean starting


author: chengyechun <chengyechun1@huawei.com> - 2.4.51-20
changelog:
  - Type:bugfix
  - ID:
  - SUG:NA
  - DESC:add sw_64 support,optimize sw build patch,add loongarch64 support


author: zhongtao <zhongtao17@huawei.com> - 2.1.4-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: delete compilation dependency:lxc, and add running dependency:runc, compilation dependency:ncurses-devel


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add epoch version in changelog to fix check_spec_file ci failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ipnetns: fix fd leak with 'ip netns set'
         iproute2: optimize code and fix some mem-leak risk
         iproute_lwtunnel: fix array boundary check
         iproute_lwtunnel: fix possible use of NULL when malloc()
         m_action: fix warning of overwrite of const string
         netem: fix NULL deref on allocation failure
         nstat: fix potential NULL deref
         rdma/utils: fix some analyzer warnings
         rt_names: check for malloc() failure
         tc/prio: handle possible truncated kernel response
         tc_exec: don't dereference NULL on calloc failure
         tc_util fix unitialized warning
         iptunnel: detect protocol mismatch on tunnel change
         ipmaddr: fix dereference of NULL on malloc() failure


author: gaoxingwang <gaoxingwang1@huawei.com> - 1:5.15.0-16
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
         tc: ct: Fix invalid pointer dereference
         tc_util: Change datatype for maj to avoid overflow issue
         tc_util: Fix no error return when large parent id used
         xfrm: prepare state offload logic to set mode


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.372-b07.2
changelog:
  - 0002-8179498-attach-in-linux-should-be-relative-to-proc-p.patch
  - 0003-8187408-AbstractQueuedSynchronizer-wait-queue-corrup.patch
  - 0004-8193710-jcmd-l-and-jps-commands-do-not-list-Java-pro.patch
  - 0005-8196743-jstatd-doesn-t-see-new-Java-processes-inside.patch
  - 0006-8284330-jcmd-may-not-be-able-to-find-processes-in-th.patch
  - 0007-8241670-Enhance-heap-region-size-ergonomics-to-impro.patch
  - 0008-8223162-Improve-ergonomics-for-Sparse-PRT-entry-sizi.patch
  - 0009-8262316-Reducing-locks-in-RSA-Blinding.patch
  - 0010-8283994-Make-Xerces-DatatypeException-stackless.patch
  - 0011-Optimizing-ObjectInputStream-by-FreqInlineSize.patch
  - 0012-8301187-Memory-leaks-in-OopMapCache.patch
  - 0013-8287349-AArch64-Merge-LDR-instructions-to-improve-C1.patch
  - 0014-8280511-AArch64-Combine-shift-and-negate-to-a-single.patch
  - 0015-6605915-jinfo-flag-flag-name-functionality-doesn-t-w.patch
  - 0016-8036599-Use-Diagnostic-Commands-instead-of-SA-by-def.patch
  - 0017-8054889-Compiler-team-s-implementation-task.patch
  - 0018-8130832-Extend-the-WhiteBox-API-to-provide-informati.patch
  - 0019-8040213-C2-does-not-put-all-modified-nodes-on-IGVN-w.patch
  - 0020-8251216-Implement-MD5-Intrinsics-on-aarch64.patch
  - 0021-fastdebug-fix-TestMD5Intrinsics.java-and-TestMD5Mult.patch
  - 0022-8198510-Enable-UseDynamicNumberOfGCThreads-by-defaul.patch
  - 0023-8180421-Change-default-value-of-BiasedLockingStartup.patch
  - 0024-Fix-the-trim-crash-caused-by-incorrect-assert-in-fas.patch
  - 0025-8220166-Performance-regression-in-deserialization.patch
  - 0026-8072070-Improve-interpreter-stack-banging.patch
  - 0027-8193386-CompressedClassSize-too-large-with-MaxMetasp.patch
  - 0028-Display-more-information-about-the-codedump-file-pat.patch
  - 0029-8211845-A-new-switch-to-control-verbosity-of-hs-err-.patch
  - 0030-add-more-specific-possible-reasons-in-hs_error-log-w.patch
  - 0031-8187653-Lock-in-CoderResult.Cache-becomes-performanc.patch
  - 0032-8299158-Improve-MD5-intrinsic-on-AArch64.patch
  - 0033-8211326-add-OS-user-related-information-to-hs_err-fi.patch
  - 0034-8250902-Implement-MD5-Intrinsics-on-x64.patch
  - 0035-8210821-Support-dns_canonicalize_hostname-in-krb5.co.patch
  - 0036-8297656-AArch64-Enable-AES-GCM-Intrinsics.patch
  - 0038-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0039-8243389-enhance-os-pd_print_cpu_info-on-linux.patch
  - 0040-Print-the-Exception-event-in-more-detail.patch
  - 0041-Reuse-translet-in-XSLTC-for-specjvm-xml-transform.patch
  - 0042-8140581-Excluding-compile-messages-should-only-be-pr.patch
  - 0043-Cache-dom-in-xml-transform.patch
  - 0044-Record-file-descriptor-when-ExtensiveErrorReports-is.patch
  - 0045-8276904-Optional.toString-is-unnecessarily-expensive.patch
  - 0046-8210960-Allow-with-boot-jdk-jvmargs-to-work-during-c.patch
  - 0047-8025692-Log-what-methods-are-touched-at-run-time.patch
  - 0048-fix-jdk8-fastdebug-hotspot-test-compiler-c2-TestSpli.patch
  - 0049-Modify-G1GC-log-information.patch
  - 0050-8181644-C1-crashes-with-XX-PrintCFGToFile.patch
  - 0051-8071962-The-SA-code-needs-to-be-updated-to-support-S.patch
  - 0052-8177959-G1CollectedHeap-print_on-prints-incorrect-ca.patch
  - 0053-8146987-Improve-Parallel-GC-Full-GC-by-caching-resul.patch
  - 0054-Fix-jmap-heapdump-symbols-when-the-class-is-loaded-f.patch
  - 0055-Fix-CodelistTest.java-Failed-to-Execute-CodelistTest.patch


author: wanghao_hw <wanghao564@huawei.com> - 1:1.8.0.382-b05.0
changelog:
  - add Huawei-Print-more-information-when-AbortVMOnException.patch
  - deleted patch 8185736-missing-default-exception-handler-in-calls-t.patch
  - deleted patch cve-2022-37434-Fix-a-bug-when-getting-a-gzip-header-extra-field-with-inflate.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch
  - modified fix-the-issue-that-cert-of-geotrustglobalca-expired.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - add 8035986-KerberosKey-algorithm-names-are-not-specifie.patch
  - add fixing-a-bug-in-the-processing-of-default-attributes.patch
  - add enhance-java-heap-oom-err-log.patch
  - add 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
  - add 8179273-sun.net.httpserver.LeftOverInputStream-shoul.patch
  - del --with-zlib=system
  - upgrade to jdk8u382-b05


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.382-b05.9
changelog:
  - add add-0010-8301749-Tracking-malloc-pooled-memory-size.patch
  - add 8213397-Stack-dump-should-show-more-clearly-when-a-t.patch
  - add Record-the-number-of-processes-to-errlog-file.patch.patch
  - add 8254723-Add-diagnostic-command-to-write-Linux-perf-m.patch
  - add The-OverWriteOldestGCLog-option-is-added-to-control.patch
  - add add-6899049-G1-Clean-up-code-in-ptrQueue.-ch-pp-and-.patch
  - add add-make-Appcds-jsa-rw-region-deterministic.patch
  - add add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - add add-8198423-Improve-metaspace-chunk-allocation.patch
  - add add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - add add-fix-lock_fd-no-close-and-improve-KAEProvider.patch
  - add add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - add add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - add add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - add add-8226530-test-case-fixed.patch
  - add add-8147940-Modify-testcase-this-test-does-not-assum.patch
  - add add-8191924-Adjust-DelegatingClassLoader-s-metadata-.patch
  - add add-Do-not-collect_class-when-DynamicCDS-dump.patch
  - add add-add-Count-instance-klass-when-loading-from-jsa-f.patch
  - add add-Adapting-IOException-of-Zip-to-ZipException.patch
  - add add-8227041-runtime-memory-RunUnitTestsConcurrently.patch
  - add add-fix-windows-build-Dynamic-CDS-failure.patch
  - add add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
  - add 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch


author: Autistic_boyya <wangzhongyi7@huawei.com> - 1:1.8.0.392-b08.0
changelog:
  - add 8308682-Enhance-AES-performance.patch
  - add Fix-the-memory-leak-of-MetaspaceAllocationTest.patch
  - add Add-metaspace-memory-allocation-failure-validation.patch
  - add change-value-of-GCLockerRetryAllocationCount-from-2-.patch
  - del 8202952.patch
  - del 8283441-C2-segmentation-fault-in-ciMethodBlocks-make.patch
  - modified Dynamic-CDS-Archive.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified kae-phase1.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - upgrade to jdk8u392-b08


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.1
changelog:
  - add Fix-crash-in-JNI-s-GetDoubleArrayRegion-and-SetDoubl.patch
  - add  8263557-Possible-NULL-dereference-in-Arena-destruct_.patch
  - add 8294906-Memory-leak-in-PKCS11-NSS-TLS-server.patch
  - add 8314236-Overflow-in-Collections.rotate.patch
  - add 8313626-C2-crash-due-to-unexpected-exception-control.patch
  - add 8312200-Fix-Parse-catch_call_exceptions-memory-leak.patch
  - add 8193682-Infinite-loop-in-ZipOutputStream.close.patch
  - add 8285516-clearPassword-should-be-called-in-a-finally-.patch
  - add 8148470-Metadata-print-routines-should-not-print-to-.patch
  - add 8293344-JDK-8242181-broke-stack-printing-for-non-att.patch
  - add 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
  - add 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified add-missing-test-case.patch


author: kuenking111 <wangkun49@huawei.com> - 1:1.8.0.392-b08.2
changelog:
  - remove add-8142508-To-bring-j.u.z.ZipFile-s-native-implemen.patch
  - remove add-8226530-ZipFile-reads-wrong-entry-size-from-ZIP6.patch
  - remove add-8242842-Avoid-reallocating-name-when-checking-fo.patch
  - remove add-8170831-ZipFile-implementation-no-longer-caches-.patch
  - remove add-8146431-j.u.z.ZipFile.getEntry-throws-AIOOBE.patch
  - remove add-8226530-test-case-fixed.patch
  - remove add-Adapting-IOException-of-Zip-to-ZipException.patch


author: DXwangg <wangjiawei80@huawei.com> - 1:11.0.21.9-0
changelog:
  - update to 11.0.21+9(GA)
  - modified delete_expired_certificates.patch
  - modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch 
  - modified 8210473-JEP-345-NUMA-Aware-Memory-Allocation-for-G1.patch
  - modified 8214527-AArch64-ZGC-for-Aarch64.patch


author: noah <hedongbo@huawei.com> - 1:18.0.0.37-0.0.ea.rolling
changelog:
  - Update to jdk-18.0.0.0+37
  - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch


author: DXwangg <wangjiawei80@huawei.com> -1:19.0.0.36-0.0.ea.rolling
changelog:
  - Update to jdk-19.0.0.0+36
  - Remove references to sample directory removed by JDK-8284999
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661


author: kuenking111 <wangkun49@huawei.com> - 1:21.0.0.35-0-rolling
changelog:
  * Mon Aug 07 2023 misaka00251 <liuxin@iscas.ac.cn> - 1:20.0.2.9-1-rolling
  - Add riscv64 to jit_arches


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: fengtao <fengtao40@huawei.com> - 0.15-5
changelog:
  - we got upgrade error when upgrade json-c from very low version,
    for example json-c-0.11-5. because old version has a softlink:
    /usr/include/json-c  --> /usr/include/json
    and now, softlink has been removed. so, we fix this in pretrans


author: mengkanglai <mengkanglai2@huawei.com> - 0.16-2
changelog:
  - add backport-Add-test-to-check-for-the-memory-leak-mentioned-in-issue-781.patch
  - add backport-Fix-memory-leak-with-emtpy-strings-in-json_object_set_string.patch
  - add backport-json_object_from_fd_ex-fail-if-file-is-too-large.patch


author: sunhai <sunhai10@huawei.com> - 0.16-4
changelog:
  - backport patch to Fix build with clang-15+
  - backport patch to Fix json_tokener_parse_ex: handle out of memory errors


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.4.0.83
changelog:
  - !1042  xfrm: Reinject transport-mode packets through workqueue
  - !1069  support ACPI for MPAM 2.0
  - !1070 crypto: hisilicon - fix some reset problem
  - ACPI/MPAM: Adapt to Arm's MPAM ACPI table version 2
  - ACPI / PPTT: Find PPTT processor node by cache id
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1
  - ACPICA: Add support for Arm's MPAM ACPI table version 2
  - crypto: hisilicon/qm - disable error report before flr
  - crypto: hisilicon/qm - disable same error report before resetting
  - crypto: hisilicon/qm - remove duplicate assignment and release
  - crypto: hisilicon/hpre - enable sva error interrupt event
  - crypto: hisilicon/qm - flush all work before driver removed.
  - !1026 [sync] PR-947:  locking/rwsem: Prevent potential lock starvation
  - !1022 [sync] PR-978:  io_uring: fix the problem of running
  - !1045 perf: hisi: delete global enable pmu from xxx_write_counter()
  - !1037  xfs: fixes patchs and backport patchs
  - !1048 spi: dw: Add support for 32-bits max xfer size
  - !1055 Complementing PTT functions to the openEuler-22.03-LTS-SP2
  - !1005 scsi: hisi_sas: A group of SAS-related bugfixes
  - !1052 [sync] PR-1027: scripts: Fix issue of module signing with openssl 3.x
  - !1039 [sync] PR-1032: bugfix the lost interruption problem after live migration
  - hwtracing: hisi_ptt: Fix potential sleep in atomic context
  - hwtracing: hisi_ptt: Advertise PERF_PMU_CAP_NO_EXCLUDE for PTT PMU
  - hwtracing: hisi_ptt: Export available filters through sysfs
  - hwtracing: hisi_ptt: Add support for dynamically updating the filter list
  - hwtracing: hisi_ptt: Factor out filter allocation and release operation
  - scripts: Fix issue of module signing with openssl 3.x
  - spi: dw: Add support for 32-bits max xfer size
  - perf: hisi: delete global enable pmu from xxx_write_counter()
  - xfrm: Reinject transport-mode packets through workqueue
  - scsi: hisi_sas: Check usage count only when the runtime PM status is RPM_SUSPENDING
  - scsi: hisi_sas: Work around build failure in suspend function
  - scsi: hisi_sas: Block requests before take debugfs snapshot
  - scsi: hisi_sas: Add slave_destroy interface for v3 hw
  - !996 [sync] PR-990:  ubi: Fix deadlock caused by recursively holding work_sem
  - !1001 [sync] PR-928:  hikey9xx: Fixed incorrect use of kfree to free sreg
  - !1018 [sync] PR-944:  nbd: get config_lock before sock_shutdown
  - !1033 perf: hns3: add event suppport for ROH and default use hardware event 0 as group leader event
  - vfio/migration: bugfix lost interruption after live migration
  - crypto: hisilicon/qm - fix EQ/AEQ interrupt issue
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()
  - scsi: sd: try more retries of START_STOP when resuming scsi device
  - !1012 [sync] PR-924:  dm: add disk before alloc dax
  - !1015 [sync] PR-920:  dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - perf: hns3: default use hardware event 0 as group leader event.
  - perf: hns3: add event suppport for ROH
  - !1020 [sync] PR-1003: roh: Fix ROH multi-BD cmdq issue
  - !1009 [sync] PR-980: crypto: hisilicon - fix mailbox operation process
  - !952 [sync] PR-929:  xfs: rework feature flags
  - !982 [sync] PR-356: x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - locking/rwsem: Prevent potential lock starvation
  - locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()
  - locking/rwsem: Better collate rwsem_read_trylock()
  - !973 [sync] PR-969:  kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - !988 [sync] PR-954:  block: iocost bugfix
  - !985 [sync] PR-946:  icost bugfix
  - kernel: don't call do_exit() for PF_IO_WORKER threads
  - x86/process: setup io_threads more like normal user space threads
  - arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD
  - roh: Fix ROH multi-BD cmdq issue
  - !1006 drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - nbd: get config_lock before sock_shutdown
  - dm thin: Fix ABBA deadlock by resetting dm_bufio_client
  - dm: add disk before alloc dax
  - crypto: hisilicon/qm - alloc buffer to set and get xqc
  - crypto: hisilicon/qm - fix the pf2vf timeout when device reset
  - vfio/migration: obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
  - !993 Clean up for RDMA/HNS
  - !979 [sync] PR-943: Fixed the accelerator capability register issue.
  - !981 [sync] PR-967:  Support dynamic_hugetlb on arm64 and fix some bug
  - !989 [sync] PR-940: net: hns3: related bugfixes, refactoring, and cleanup
  - hikey9xx: Fixed incorrect use of kfree to free sreg
  - RDMA/hns: Remove redundant 'num_mtt_segs' and 'max_extend_sg'
  - RDMA/hns: Remove redundant 'use_lowmem' argument from hns_roce_init_hem_table()
  - !992 [sync] PR-949:  mm: page_counter: remove unneeded atomic ops for low/min
  - ubi: Fix deadlock caused by recursively holding work_sem
  - mtd: ubi: wl: Fix a couple of kernel-doc issues
  - !977 [sync] PR-968:  Fix ORC unwinder on paravirt {save,restore}_fl
  - mm: page_counter: remove unneeded atomic ops for low/min
  - net: hns3: restore user pause configure when disable autoneg
  - net: hns3: fix strncpy() not using dest-buf length as length issue
  - net: hns3: refactor hclge_update_desc_vfid for extension
  - net: hns3: add tm flush when setting tm
  - net: hns3: fix the imp capability bit cannot exceed 32 bits issue
  - net: hns3: fix GRE checksum offload issue
  - perf: pmu: fix set wrong filter mode for running events issue
  - block: fix order error in blk_release_queue
  - block: fix null-pointer dereference in ioc_pd_init
  - blk-iocost: dispatch all throttled bio in ioc_pd_offline
  - blk-iocost: don't throttle bio if iocg is offlined
  - blk-iocost: track whether iocg is still online
  - blk-iocost: fix UAF in ioc_pd_free
  - x86/boot/compressed: Register dummy NMI handler in EFI boot loader, to avoid kdump crashes
  - mm/dynamic_hugetlb: fix type error of pfn in __hpool_split_gigantic_page()
  - mm/dynamic_hugetlb: set PagePool to bad page
  - mm/dynamic_hugetlb: replace spin_lock with mutex_lock and fix kabi broken
  - mm/dynamic_hugetlb: isolate hugepage without dissolve
  - mm/dynamic_hugetlb: support dynamic hugetlb on arm64
  - mm/dynamic_hugetlb: fix kabi broken when enable CONFIG_DYNAMIC_HUGETLB on arm64
  - !964 [sync] PR-937:  tcp: restrict net.ipv4.tcp_app_win
  - !961 [sync] PR-925:  tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - crypto: hisilicon/zip - save capability registers in probe process
  - crypto: hisilicon/sec2 - save capability registers in probe process
  - crypto: hisilicon/hpre - save capability registers in probe process
  - crypto: hisilicon/qm - save capability registers in qm init process
  - crypto: hisilicon/qm - add a function to set qm algs
  - crypto: hisilicon/sec - fix for resource leak
  - crypto: hisilicon/sec - remove unused parameter
  - crypto: hisilicon/sec - misc cleanups
  - !957 [sync] PR-938:  config: Disable CONFIG_EULER_FS by default
  - x86/unwind: Fix check_paravirt() calls orc_find() before declaration
  - x86/unwind: Fix orc entry for paravirt {save,restore}_fl
  - kobject: Fix slab-out-of-bounds in fill_kobj_path()
  - tcp: restrict net.ipv4.tcp_app_win
  - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
  - config: Disable CONFIG_EULER_FS by default
  - xfs: kill xfs_sb_version_has_v3inode()
  - xfs: introduce xfs_sb_is_v5 helper
  - xfs: remove unused xfs_sb_version_has wrappers
  - xfs: convert xfs_sb_version_has checks to use mount features
  - xfs: convert scrub to use mount-based feature checks
  - xfs: open code sb verifier feature checks
  - xfs: convert xfs_fs_geometry to use mount feature checks
  - xfs: replace XFS_FORCED_SHUTDOWN with xfs_is_shutdown
  - xfs: convert remaining mount flags to state flags
  - xfs: convert mount flags to features
  - xfs: consolidate mount option features in m_features
  - xfs: replace xfs_sb_version checks with feature flag checks
  - xfs: reflect sb features in xfs_mount
  - xfs: rework attr2 feature and mount options
  - xfs: rename xfs_has_attr()
  - xfs: xfs_is_shutdown vs xlog_is_shutdown cage fight
  - xfs: log items should have a xlog pointer, not a mount
  - xfs: fix incorrect error-out in xfs_remove
  - !933 [sync] PR-922:  jbd2: fix checkpoint inconsistent
  - jbd2: remove t_checkpoint_io_list
  - jbd2: recheck chechpointing non-dirty buffer
  - !923 [sync] PR-918: Misc fixes for Kunpeng accelerator drivers!
  - !914 [sync] PR-906:  ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - crypto: hisilicon/qm - remove unnecessary aer.h include
  - crypto: hisilicon/qm - stop function and write data to memory
  - crypto: hisilicon/hpre - ensure private key less than n
  - crypto: hisilicon/qm - prevent soft lockup in qm_poll_req_cb()'s loop
  - !921 [sync] PR-919:  Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - Revert "ext4: dio take shared inode lock when overwriting preallocated blocks"
  - !898 [sync] PR-894: Fixed two accelerator bugfixes
  - !908 [sync] PR-874: nic: hns3: fix pointer cast for wol and fix getting GE port lanes error and set cpu affinity
  - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
  - !909 [sync] PR-907:  tcp/dccp: Add another way to allocate local ports in connect()
  - !893 mitigatin cacheline false sharing
  - tcp/dccp: Add another way to allocate local ports in connect()
  - net: hns3: fix set cpu affinity when state down
  - net: hns3: add support for getting GE port lanes
  - net: hns3: fix pointer cast to different type for wol
  - !903 backport block bugfix
  - md/raid10: fix incorrect done of recovery
  - md/raid10: fix null-ptr-deref in raid10_sync_request
  - block/badblocks: fix badblocks loss when badblocks combine
  - block/badblocks: fix the bug of reverse order
  - md: fix unexpected changes of return value in rdev_set_badblocks
  - md/raid10: fix io hung in md_wait_for_blocked_rdev()
  - block: Only set bb->changed when badblocks changes
  - md/raid10: fix incorrect counting of rdev->nr_pending
  - md/raid10: remove WANR_ON_ONCE in raid10_end_write_request
  - md/raid10: fix uaf if replacement replaces rdev
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
  - md/raid10: fix io loss while replacement replace rdev
  - md/raid10: prioritize adding disk to 'removed' mirror
  - md: fix io loss when remove rdev fail
  - md/raid10: fix a race between removing rdev and access conf->mirrors[i].rdev
  - md/raid10: fix taks hung in raid10d
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
  - md/raid10: fix softlockup in raid10_unplug
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed
  - md: fix sysfs duplicate file while adding rdev
  - md: replace invalid function flush_rdev_wq() with flush_workqueue()
  - md: Flush workqueue md_rdev_misc_wq in md_alloc()
  - block: don't allow the same type rq_qos add more than once
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
  - blk-iocost: don't allow to configure bio based device
  - !899 [sync] PR-895:  config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - config: enable CONFIG_BPF_STREAM_PARSER=y on arm64
  - uacce: use filep->f_mapping to replace inode->i_mapping
  - crypto:hisilicon/qm: bugfix queue parameter issue
  - enable MITIGATION_FALSE_SHARING by default
  - ext4: mitigatin cacheline false sharing in struct ext4_inode_info


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.6.0.84
changelog:
  - !1119 [openEuler-22.03-LTS-SP2] net: hns3: refactor hclge_mac_link_status_wait and add wait until mac link down
  - net: hns3: add wait until mac link down
  - net: hns3: refactor hclge_mac_link_status_wait for interface reuse
  - !1093 vfio-pci: Match specific devices with vendor id and device id
  - !1085 irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
  - !1095 irqchip: gic-v3: Collection table support muti pages
  - !1081  some backport bugfix for sockmap
  - irqchip: gic-v3: Collection table support muti pages
  - vfio-pci: Match specific devices with vendor id and device id
  - !1077  drm/qxl: Fix missing free_irq
  - !1087 genirq: Increase the number of IRQ descriptors
  - genirq: Increase the number of IRQ descriptors
  - bpf: fix bpf_tcp_ingress addr use after free
  - net: deal with most data-races in sk_wait_event()
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
  - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
  - bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes
  - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
  - bpf, sock_map: Move cancel_work_sync() out of sock lock
  - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
  - !1063 i2c: hisi: Only handle the interrupt of the driver's transfer
  - drm/qxl: Fix missing free_irq
  - !1059 [sync] PR-1028:  fs: hfsplus: fix UAF issue in hfsplus_put_super
  - i2c: hisi: Only handle the interrupt of the driver's transfer
  - fs: hfsplus: fix UAF issue in hfsplus_put_super


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.8.0.86
changelog:
  - Enable kabi checking and adapt the check-kabi script
  - net: let sockops can use bpf_get_current_comm()
  - net: add bpf_is_local_ipaddr bpf helper function
  - fs/ntfs3: Check fields while reading
  - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.10.0.88
changelog:
  - Add java-1.8.0-openjdk-devel BuildRequires for kernel.spec
  - !1213 [sync] PR-1196:  fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1208  arm64: kernel: disable CNP on LINXICORE9100
  - fs/stat: make tmp variable 16-bytes aligned in copy stat
  - !1204  kernel: update SP2 OPENEULER_MINOR value to 2
  - !1203  Revert "locking/rwsem: Prevent potential lock starvation"
  - !1200 [sync] PR-1190:  memcg: fix implicit declaration of memcg_print_bad_task()
  - arm64: kernel: disable CNP on LINXICORE9100
  - !1193 [sync] PR-1178:  memstick: r592: Fix UAF bug in r592_remove due to race condition
  - !1195 [sync] PR-1159: xhci:fix USB xhci controller issue
  - !1183  Fix some warning messages in netacc
  - kernel: update SP2 OPENEULER_MINOR value to 2
  - Revert "locking/rwsem: Better collate rwsem_read_trylock()"
  - Revert "locking/rwsem: Pass the current atomic count to rwsem_down_read_slowpath()"
  - Revert "locking/rwsem: Prevent potential lock starvation"
  - memcg: fix implicit declaration of memcg_print_bad_task()
  - xhci:fix USB xhci controller issue
  - !1186  Fix NULL pointer and Keep PERF_PMU_CAP_EXCLUSIVE
  - memstick: r592: Fix UAF bug in r592_remove due to race condition
  - hwtracing: hisi_ptt: Keep to advertise PERF_PMU_CAP_EXCLUSIVE
  - hwtracing: hisi_ptt: Add dummy callback pmu::read()
  - !1182 Fix CQ and QP cache affinity
  - libbpf: Support uniform BTF-defined key/value specification across all BPF maps
  - tools: ignore one warning message
  - RDMA/hns: Fix CQ and QP cache affinity
  - !1151 [sync] PR-1150:  EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1175 [sync] PR-1157: Add LoongArch maintainers to openEuler/MAINTAINERS
  - !1165 [sync] PR-1098:  proc: allow pid_revalidate() during LOOKUP_RCU
  - MAINTAINERS: update openEuler/MAINTAINERS for LoongArch
  - !1169 [sync] PR-1162:  fbcon: Check font dimension limits
  - !1156 [sync] PR-582: mm: oom: move memcg_print_bad_task() out of  mem_cgroup_scan_tasks()
  - fbcon: Check font dimension limits
  - proc: allow pid_revalidate() during LOOKUP_RCU
  - !882 [sync] PR-855: Remove the automatic loading of the hisi_trng driver
  - mm: oom: move memcg_print_bad_task() out of mem_cgroup_scan_tasks()
  - EDAC/i10nm: Add Intel Emerald Rapids server support
  - !1144 crypto: hisilicon/qm: modify loop exit condition
  - !1147 [sync] PR-1136:  gfs2: Don't deref jdesc in evict
  - gfs2: Don't deref jdesc in evict
  - crypto: hisilicon/qm: modify loop exit condition
  - crypto/trng: Remove the automatic loading of the hisi_trng driver
  - crypto: hisilicon/trng - use %u to print u32 variables


author: Zheng Zengkai <zhengzengkai@huawei.com> - 5.10.0-153.12.0.89
changelog:
  - !1189 [sync] PR-1177:  net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  - !1226 [sync] PR-1221:  media: rkvdec: fix use after free bug in rkvdec_remove
  - !1229 [sync] PR-1227:  x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - x86/fpu: KABI_BROKEN_REMOVE "union fpregs_state state" from struct fpu
  - media: rkvdec: fix use after free bug in rkvdec_remove
  - !1219  openEuler: introduced OPENEULER_LTS to identify LTS Release
  - openEuler: introduced OPENEULER_LTS to identify LTS Release
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.17.0.93
changelog:
  - !1231 [sync] PR-1191:  fix memory reliable related issues
  - !1236 [sync] PR-1194:  fix memleak with efi_fake_mem
  - !1257 [sync] PR-1247:  HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - !1249 [sync] PR-1245:  hugetlb: Fix some incorrect behavior
  - !1234 [sync] PR-1220:  mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - !1211 [sync] PR-1185:  nbd: validate the block size in nbd_set_size
  - !1276 [sync] PR-1253:  media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - !1304 [sync] PR-1283:  media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - !1301 [sync] PR-1270:  media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1266 [sync] PR-1261:  usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  - !1240 [sync] PR-1181:  relayfs: fix out-of-bounds access in relay_file_read
  - media: saa7134: fix use after free bug in saa7134_finidev due to race condition
  - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
  - !1244  set the iova rcache global
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map
  - hugetlb: fix hugepages_setup when deal with pernode
  - hugetlb: fix wrong use of nr_online_nodes
  - config: enable set the max iova mag size to 128
  - iommu/iova: increase the iova_rcache depot max size
  - relayfs: fix out-of-bounds access in relay_file_read
  - config: Disable EFI_FAKE_MEMMAP support for arm64 by default
  - efi: Fix UAF for arm64 when enable efi_fake_mem
  - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block
  - efi: Disable mirror feature during crashkernel
  - mm: mem_reliable: Update reliable page counter to zero if underflows
  - mm: mem_reliable: Fix reliable page counter mismatch problem
  - nbd: fix incomplete validation of ioctl arg
  - nbd: validate the block size in nbd_set_size


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.18.0.94
changelog:
  - !1370 [sync] PR-1324:  io_uring: hold uring mutex around poll removal
  - !1365 [sync] PR-1287:  ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - io_uring: hold uring mutex around poll removal
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  - !1344 [sync] PR-1272:  xfs: fix some problems recently
  - xfs: fix uninitialized variable access
  - xfs: set XFS_FEAT_NLINK correctly
  - xfs: don't leak perag when growfs fails
  - xfs: factor out xfs_destroy_perag()
  - xfs: fix warning in xfs_vm_writepages()
  - xfs: don't leak intent item when recovery intents fail
  - xfs: factor out xfs_defer_pending_abort
  - xfs: fix mounting failed caused by sequencing problem in the log records
  - !1306 [sync] PR-1297:  iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT
  - Fix x86 provides error symbol


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.19.0.95
changelog:
  - !1291 [sync] PR-1262:  drm/msm/dpu: Add check for pstates
  - !1457 [sync] PR-1358:  Remove DECnet support from kernel
  - !1440 [sync] PR-1426:  netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1461 [sync] PR-1425:  loop: loop_set_status_from_info() check before assignment
  - !1464 [sync] PR-1436: Fix CVE-2023-3117
  - !1319 [sync] PR-1285:  nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - loop: loop_set_status_from_info() check before assignment
  - Remove DECnet support from kernel
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id
  - !1421 [sync] PR-1415:  Fix generic/299 fail
  - !1379 [sync] PR-1295:  blk-wbt: don't show valid wbt_lat_usec in
  - !1433 [sync] PR-346: anolis: bond: broadcast ARP or ND messages to all slaves
  - anolis: bond: broadcast ARP or ND messages to all slaves
  - ext4: Add debug message to notify user space is out of free
  - Revert "ext4: Stop trying writing pages if no free blocks generated"
  - !1413 [sync] PR-1408:  Replace the hulk patch with the lts patch
  - cgroup: Do not corrupt task iteration when rebinding subsystem
  - Revert "cgroup: Stop task iteration when rebinding subsystem"
  - !1390 [sync] PR-1312:  quota: fix race condition between dqput() and dquot_mark_dquot_dirty()
  - !1393 [sync] PR-1376:  jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - !1309 [sync] PR-1280: cgroup: always put cset in cgroup_css_set_put_fork
  - jbd2: Check 'jh->b_transaction' before remove it from checkpoint
  - quota: simplify drop_dquot_ref()
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide
  - quota: add new helper dquot_active()
  - quota: rename dquot_active() to inode_quota_active()
  - quota: factor out dquot_write_dquot()
  - !1330 [sync] PR-1325:  jbd2: fix several checkpoint
  - !1333 [sync] PR-1314:  ext4: Stop trying writing pages if no free blocks generated
  - blk-wbt: don't show valid wbt_lat_usec in sysfs while wbt is disabled
  - blk-wbt: make enable_state more accurate
  - !1341 [sync] PR-1286:  ext4: turning quotas off if mount failed after enable quotas
  - ext4: turning quotas off if mount failed after enable quotas
  - ext4: Stop trying writing pages if no free blocks generated
  - jbd2: fix checkpoint cleanup performance regression
  - jbd2: remove __journal_try_to_free_buffer()
  - jbd2: fix a race when checking checkpoint buffer busy
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
  - jbd2: remove journal_clean_one_cp_list()
  - nbd: fix null-ptr-dereference while accessing 'nbd->config'
  - nbd: factor out a helper to get nbd_config without holding 'config_lock'
  - nbd: fold nbd config initialization into nbd_alloc_config()
  - cgroup: always put cset in cgroup_css_set_put_fork
  - drm/msm/dpu: Add check for pstates


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.20.0.96
changelog:
  - !1526 [sync] PR-1482:  CVE-2023-3567 fix patches
  - !1338 [sync] PR-1335:  bpf: Fix incorrect verifier pruning due to missing register precision taints
  - vc_screen: modify vcs_size() handling in vcs_read()
  - vc_screen: don't clobber return value in vcs_read
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  - !1491 [sync] PR-1476:  ipv6/addrconf: fix a potential refcount underflow for idev
  - !1487 [sync] PR-1452:  media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - !1496 [sync] PR-1445:  netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - !1492 [sync] PR-1468: Backport 5.10.155 LTS
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - mmc: sdhci-esdhc-imx: Convert the driver to DT-only
  - net: tun: call napi_schedule_prep() to ensure we own a napi
  - dmaengine: at_hdmac: Check return code of dma_async_device_register
  - dmaengine: at_hdmac: Fix impossible condition
  - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
  - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
  - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
  - dmaengine: at_hdmac: Fix concurrency over the active list
  - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
  - dmaengine: at_hdmac: Fix concurrency over descriptor
  - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
  - dmaengine: at_hdmac: Protect atchan->status with the channel lock
  - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all
  - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
  - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
  - dmaengine: at_hdmac: Don't start transactions at tx_submit level
  - dmaengine: at_hdmac: Fix at_lli struct definition
  - cert host tools: Stop complaining about deprecated OpenSSL functions
  - can: j1939: j1939_send_one(): fix missing CAN header initialization
  - mm/memremap.c: map FS_DAX device memory as decrypted
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
  - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
  - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
  - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
  - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
  - nilfs2: fix use-after-free bug of ns_writer on remount
  - nilfs2: fix deadlock in nilfs_count_free_blocks()
  - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
  - vmlinux.lds.h: Fix placement of '.data..decrypted' section
  - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
  - ALSA: usb-audio: Add quirk entry for M-Audio Micro
  - ALSA: hda/realtek: Add Positivo C6300 model quirk
  - ALSA: hda: fix potential memleak in 'add_widget_node'
  - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
  - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
  - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
  - MIPS: jump_label: Fix compat branch range check
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning
  - riscv: fix reserved memory setup
  - riscv: Separate memory init from paging init
  - riscv: Enable CMA support
  - riscv: vdso: fix build with llvm
  - riscv: process: fix kernel info leakage
  - net: macvlan: fix memory leaks of macvlan_common_newlink
  - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
  - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
  - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
  - net: atlantic: macsec: clear encryption keys from the stack
  - net: phy: mscc: macsec: clear encryption keys when freeing a flow
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()
  - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
  - net: cpsw: disable napi in cpsw_ndo_open()
  - net/mlx5e: E-Switch, Fix comparing termination table instance
  - net/mlx5: Allow async trigger completion execution on single CPU systems
  - net: nixge: disable napi when enable interrupts failed in nixge_open()
  - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
  - perf stat: Fix printing os->prefix in CSV metrics output
  - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
  - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  - dmaengine: pxa_dma: use platform_get_irq_optional
  - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
  - net: broadcom: Fix BCMGENET Kconfig
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
  - can: af_can: fix NULL pointer dereference in can_rx_register()
  - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
  - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
  - hamradio: fix issue of dev reference count leakage in bpq_device_event()
  - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  - KVM: s390: pv: don't allow userspace to set the clock under PV
  - KVM: s390x: fix SCK locking
  - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  - net: fman: Unregister ethernet device on removal
  - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
  - net: tun: Fix memory leaks of napi_get_frags
  - macsec: clear encryption keys from the stack after setting up offload
  - macsec: fix detection of RXSCs when toggling offloading
  - macsec: fix secy->n_rx_sc accounting
  - macsec: delete new rxsc when offload fails
  - net: gso: fix panic on frag_list with mixed head alloc types
  - bpf: Fix wrong reg type conversion in release_reference()
  - bpf: Add helper macro bpf_for_each_reg_in_vstate
  - bpf: Support for pointers beyond pkt_end.
  - HID: hyperv: fix possible memory leak in mousevsc_probe()
  - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE
  - wifi: cfg80211: fix memory leak in query_regdb_file()
  - wifi: cfg80211: silence a sparse RCU warning
  - phy: stm32: fix an error code in probe
  - hwspinlock: qcom: correct MMIO max register for newer SoCs
  - fuse: fix readdir cache race
  - !1471 [sync] PR-838: Backport 5.10.154 LTS
  - ipv6/addrconf: fix a potential refcount underflow for idev
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net
  - ipc: remove memcg accounting for sops objects in do_semtimedop()
  - drm/i915/sdvo: Setup DDC fully before output init
  - drm/i915/sdvo: Filter out invalid outputs more sensibly
  - drm/rockchip: dsi: Force synchronous probe
  - ext4,f2fs: fix readahead of verity data
  - KVM: x86: emulator: update the emulation mode after CR0 write
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
  - KVM: x86: emulator: em_sysexit should update ctxt->mode
  - KVM: x86: Mask off reserved bits in CPUID.80000001H
  - KVM: x86: Mask off reserved bits in CPUID.80000008H
  - KVM: x86: Mask off reserved bits in CPUID.8000001AH
  - KVM: x86: Mask off reserved bits in CPUID.80000006H
  - ext4: fix BUG_ON() when directory entry has invalid rec_len
  - ext4: fix warning in 'ext4_da_release_space'
  - parisc: Avoid printing the hardware path twice
  - parisc: Export iosapic_serial_irq() symbol for serial port driver
  - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
  - perf/x86/intel: Fix pebs event constraints for ICL
  - efi: random: Use 'ACPI reclaim' memory for random seed
  - efi: random: reduce seed size to 32 bytes
  - fuse: add file_modified() to fallocate
  - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
  - tracing/histogram: Update document for KEYS_MAX size
  - tools/nolibc/string: Fix memcmp() implementation
  - kprobe: reverse kp->flags when arm_kprobe failed
  - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
  - btrfs: fix type of parameter generation in btrfs_get_dentry
  - coresight: cti: Fix hang in cti_disable_hw()
  - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
  - fscrypt: fix keyring memory leak on mount failure
  - fscrypt: stop using keyrings subsystem for fscrypt_master_key
  - fscrypt: simplify master key locking
  - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
  - block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  - i2c: piix4: Fix adapter not be removed in piix4_remove()
  - arm64: dts: juno: Add thermal critical trip points
  - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  - firmware: arm_scmi: Suppress the driver's bind attributes
  - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  - efi/tpm: Pass correct address to memblock_reserve
  - i2c: xiic: Add platform module alias
  - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
  - HID: saitek: add madcatz variant of MMO7 mouse device ID
  - scsi: core: Restrict legal sdev_state transitions via sysfs
  - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
  - media: meson: vdec: fix possible refcount leak in vdec_probe()
  - media: dvb-frontends/drxk: initialize err to 0
  - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
  - media: rkisp1: Initialize color space on resizer sink and source pads
  - s390/boot: add secure boot trailer
  - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
  - mtd: parsers: bcm47xxpart: Fix halfblock reads
  - mtd: parsers: bcm47xxpart: print correct offset on read error
  - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
  - video/fbdev/stifb: Implement the stifb_fillrect() function
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
  - mmc: sdhci-pci: Avoid comma separated statements
  - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
  - drm/msm/hdmi: fix IRQ lifetime
  - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag
  - ipv6: fix WARNING in ip6_route_net_exit_late()
  - net, neigh: Fix null-ptr-deref in neigh_table_clear()
  - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
  - btrfs: fix ulist leaks in error paths of qgroup self tests
  - btrfs: fix inode list leak during backref walking at find_parent_nodes()
  - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
  - isdn: mISDN: netjet: fix wrong check of device registration
  - mISDN: fix possible memory leak in mISDN_register_device()
  - rose: Fix NULL pointer dereference in rose_send_frame()
  - ipvs: fix WARNING in ip_vs_app_net_cleanup()
  - ipvs: fix WARNING in __ip_vs_cleanup_batch()
  - ipvs: use explicitly signed chars
  - netfilter: nf_tables: release flow rule object from commit path
  - net: sched: Fix use after free in red_enqueue()
  - ata: pata_legacy: fix pdc20230_set_piomode()
  - net: fec: fix improper use of NETDEV_TX_BUSY
  - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
  - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  - NFC: nxp-nci: remove unnecessary labels
  - nfc: fdp: Fix potential memory leak in fdp_nci_send()
  - nfc: fdp: drop ftrace-like debugging messages
  - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
  - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
  - net: dsa: Fix possible memory leaks in dsa_loop_init()
  - nfs4: Fix kmemleak when allocate slot failed
  - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
  - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
  - NFSv4: Fix a potential state reclaim deadlock
  - IB/hfi1: Correctly move list in sc_disable()
  - RDMA/cma: Use output interface for net_dev check
  - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
  - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
  - KVM: x86: Protect the unused bits in MSR exiting flags
  - x86/topology: Fix duplicated core ID within a package
  - x86/topology: Fix multiple packages shown on a single-package system
  - x86/topology: Set cpu_die_id only if DIE_TYPE found
  - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1)
  - KVM: x86: Trace re-injected exceptions
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
  - KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01
  - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
  - serial: 8250: Let drivers request full 16550A feature probing
  - !1423 [sync] PR-1254:  Two CVE fixes of ksmbd
  - ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
  - ksmbd: fix memleak in session setup
  - bpf: Fix incorrect verifier pruning due to missing register precision taints


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.21.0.97
changelog:
  - !1589 [sync] PR-1557:  net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - !1584 [sync] PR-1480:  ksmbd: fix wrong UserName check in session_user
  - !1600 [sync] PR-1547:  binder: fix UAF caused by faulty buffer cleanup
  - !1603 [sync] PR-1581:  psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - !1616 [sync] PR-1591:  net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1579 [sync] PR-1541: Backport 5.10.158 - 5.10.159 LTS patches from upstream.
  - net/sched: cls_u32: Fix reference counter leak leading to overflow
  - !1594 [sync] PR-1585:  ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - psi: fix compile error for psi cgroupv1 when CONFIG_CGROUP=n
  - binder: fix UAF caused by faulty buffer cleanup
  - ksmbd: fix global-out-of-bounds in smb2_find_context_vals
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
  - ksmbd: fix wrong UserName check in session_user
  - can: esd_usb: Allow REC and TEC to return to zero
  - macsec: add missing attribute validation for offload
  - net: mvneta: Fix an out of bounds check
  - ipv6: avoid use-after-free in ip6_fragment()
  - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
  - ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  - tipc: call tipc_lxc_xmit without holding node_read_lock
  - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
  - ipv4: Fix incorrect route flushing when table ID 0 is used
  - ipv4: Fix incorrect route flushing when source address is deleted
  - tipc: Fix potential OOB in tipc_link_proto_rcv()
  - net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
  - net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
  - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
  - ip_gre: do not report erspan version on GRE interface
  - net: stmmac: fix "snps,axi-config" node property parsing
  - nvme initialize core quirks before calling nvme_init_subsystem
  - NFC: nci: Bounds check struct nfc_target arrays
  - i40e: Disallow ip4 and ip6 l4_4_bytes
  - i40e: Fix for VF MAC address 0
  - i40e: Fix not setting default xps_cpus after reset
  - net: mvneta: Prevent out of bounds read in mvneta_config_rss()
  - xen-netfront: Fix NULL sring after live migration
  - net: encx24j600: Fix invalid logic in reading of MISTAT register
  - net: encx24j600: Add parentheses to fix precedence
  - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
  - net: dsa: ksz: Check return value
  - Bluetooth: Fix not cleanup led when bt_init fails
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
  - vmxnet3: correctly report encapsulated LRO packet
  - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
  - igb: Allocate MSI-X vector when testing
  - e1000e: Fix TX dispatch condition
  - gpio: amd8111: Fix PCI device reference count leak
  - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
  - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
  - ca8210: Fix crash by zero initializing data
  - ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time()
  - rtc: mc146818-lib: fix locking in mc146818_set_time
  - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event
  - HID: hid-lg4ff: Add check for empty lbuf
  - HID: usbhid: Add ALWAYS_POLL quirk for some mice
  - drm/shmem-helper: Avoid vm_open error paths
  - drm/shmem-helper: Remove errant put in error path
  - drm/vmwgfx: Don't use screen objects when SEV is active
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
  - Bluetooth: Fix crash when replugging CSR fake controllers
  - Bluetooth: btusb: Add debug message for CSR controllers
  - mm/gup: fix gup_pud_range() for dax
  - media: v4l2-dv-timings.c: fix too strict blanking sanity checks
  - Revert "ARM: dts: imx7: Fix NAND controller size-cells"
  - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
  - xen/netback: do some code cleanup
  - rtc: mc146818: Reduce spinlock section in mc146818_set_time()
  - rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ
  - rtc: cmos: avoid UIP when reading alarm time
  - rtc: cmos: avoid UIP when writing alarm time
  - rtc: mc146818-lib: extract mc146818_avoid_UIP
  - rtc: mc146818-lib: fix RTC presence check
  - rtc: Check return value from mc146818_get_time()
  - rtc: mc146818-lib: change return values of mc146818_get_time()
  - rtc: cmos: remove stale REVISIT comments
  - rtc: mc146818: Dont test for bit 0-5 in Register D
  - rtc: mc146818: Detect and handle broken RTCs
  - rtc: mc146818: Prevent reading garbage
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
  - mm/khugepaged: fix GUP-fast interaction by sending IPI
  - mm/khugepaged: take the right locks for page table retraction
  - net: usb: qmi_wwan: add u-blox 0x1342 composition
  - 9p/xen: check logical size for buffer size
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
  - fbcon: Use kzalloc() in fbcon_prepare_logo()
  - regulator: twl6030: fix get status of twl6032 regulators
  - ASoC: soc-pcm: Add NULL check in BE reparenting
  - btrfs: send: avoid unaligned encoded writes when attempting to clone range
  - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
  - regulator: slg51000: Wait after asserting CS pin
  - 9p/fd: Use P9_HDRSZ for header size
  - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
  - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
  - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
  - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
  - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
  - arm64: dts: rockchip: fix ir-receiver node names
  - ARM: dts: rockchip: fix ir-receiver node names
  - arm: dts: rockchip: fix node name for hym8563 rtc
  - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
  - ipc/sem: Fix dangling sem_array access in semtimedop race
  - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
  - block: unhash blkdev part inode when the part is deleted
  - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
  - char: tpm: Protect tpm_pm_suspend with locks
  - Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
  - ACPI: HMAT: Fix initiator registration for single-initiator systems
  - ACPI: HMAT: remove unnecessary variable initialization
  - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
  - i2c: npcm7xx: Fix error handling in npcm_i2c_init()
  - x86/pm: Add enumeration check before spec MSRs save/restore setup
  - x86/tsx: Add a feature bit for TSX control MSR support
  - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
  - ipv4: Fix route deletion when nexthop info is not specified
  - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
  - selftests: net: fix nexthop warning cleanup double ip typo
  - selftests: net: add delete nexthop route warning test
  - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
  - parisc: Increase FRAME_WARN to 2048 bytes on parisc
  - xtensa: increase size of gcc stack frame check
  - parisc: Increase size of gcc stack frame check
  - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
  - iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
  - pinctrl: single: Fix potential division by zero
  - ASoC: ops: Fix bounds check for _sx controls
  - tracing: Free buffers when a used dynamic event is removed
  - drm/i915: Never return 0 if not all requests retired
  - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
  - mmc: sdhci: Fix voltage switch delay
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch
  - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
  - mmc: core: Fix ambiguous TRIM and DISCARD arg
  - mmc: mmc_test: Fix removal of debugfs file
  - net: stmmac: Set MAC's flow control register to reflect current settings
  - pinctrl: intel: Save and restore pins in "direct IRQ" mode
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
  - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
  - error-injection: Add prompt for function error injection
  - riscv: vdso: fix section overlapping under some conditions
  - net/mlx5: DR, Fix uninitialized var warning
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
  - hwmon: (coretemp) Check for null before removing sysfs attrs
  - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
  - sctp: fix memory leak in sctp_stream_outq_migrate()
  - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
  - net: tun: Fix use-after-free in tun_detach()
  - afs: Fix fileserver probe RTT handling
  - net: hsr: Fix potential use-after-free
  - tipc: re-fetch skb cb after tipc_msg_validate
  - dsa: lan9303: Correct stat name
  - net: ethernet: nixge: fix NULL dereference
  - net/9p: Fix a potential socket leak in p9_socket_open
  - net: net_netdev: Fix error handling in ntb_netdev_init_module()
  - net: phy: fix null-ptr-deref while probe() failed
  - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
  - wifi: cfg80211: don't allow multi-BSSID in S1G
  - wifi: cfg80211: fix buffer overflow in elem comparison
  - aquantia: Do not purge addresses when setting the number of rings
  - qlcnic: fix sleep-in-atomic-context bugs caused by msleep
  - can: cc770: cc770_isa_probe(): add missing free_cc770dev()
  - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
  - net/mlx5e: Fix use-after-free when reverting termination table
  - net/mlx5: Fix uninitialized variable bug in outlen_write()
  - e100: Fix possible use after free in e100_xmit_prepare
  - e100: switch from 'pci_' to 'dma_' API
  - iavf: Fix error handling in iavf_init_module()
  - iavf: remove redundant ret variable
  - fm10k: Fix error handling in fm10k_init_module()
  - i40e: Fix error handling in i40e_init_module()
  - ixgbevf: Fix resource leak in ixgbevf_init_module()
  - of: property: decrement node refcount in of_fwnode_get_reference_args()
  - bpf: Do not copy spin lock field from user in bpf_selem_alloc
  - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
  - hwmon: (i5500_temp) fix missing pci_disable_device()
  - hwmon: (ina3221) Fix shunt sum critical calculation
  - hwmon: (ltc2947) fix temperature scaling
  - libbpf: Handle size overflow for ringbuf mmap
  - ARM: at91: rm9200: fix usb device clock id
  - scripts/faddr2line: Fix regression in name resolution on ppc64le
  - bpf, perf: Use subprog name when reporting subprog ksymbol
  - iio: light: rpr0521: add missing Kconfig dependencies
  - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
  - iio: health: afe4403: Fix oob read in afe4403_read_raw
  - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
  - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read"
  - drm/amdgpu: update drm_display_info correctly when the edid is read
  - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
  - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker
  - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
  - btrfs: free btrfs_path before copying inodes to userspace
  - btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino
  - !1554 [sync] PR-1506: Backport 5.10.157 LTS patches from upstream
  - !1466 [sync] PR-1428:  scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - !1575 [sync] PR-1535:  net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  - !1560 [sync] PR-1548:  mm: memcontrol: fix cannot alloc the maximum memcg ID
  - !1383 [sync] PR-1351:  dm thin: fix deadlock when swapping to thin device
  - !1483  dm stats: check for and propagate alloc_percpu failure
  - !1504  block: don't set GD_NEED_PART_SCAN if scan partition failed
  - !1479 [sync] PR-1345:  dm: requeue IO if mapping table not yet
  - mm: memcontrol: fix cannot alloc the maximum memcg ID
  - fuse: lock inode unconditionally in fuse_fallocate()
  - drm/amdgpu: always register an MMU notifier for userptr
  - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
  - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
  - btrfs: free btrfs_path before copying subvol info to userspace
  - btrfs: free btrfs_path before copying fspath to userspace
  - btrfs: free btrfs_path before copying root refs to userspace
  - dm integrity: clear the journal on suspend
  - dm integrity: flush the journal on suspend
  - gpu: host1x: Avoid trying to use GART on Tegra20
  - net: usb: qmi_wwan: add Telit 0x103a composition
  - tcp: configurable source port perturb table size
  - platform/x86: hp-wmi: Ignore Smart Experience App event
  - zonefs: fix zone report size in __zonefs_io_error()
  - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
  - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
  - xen/platform-pci: add missing free_irq() in error path
  - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
  - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[]
  - Input: soc_button_array - add use_low_level_irq module parameter
  - Input: goodix - try resetting the controller when no config is set
  - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
  - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
  - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
  - x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  - KVM: x86: remove exit_int_info warning in svm_handle_exit
  - KVM: x86: nSVM: leave nested mode on vCPU free
  - mm: vmscan: fix extreme overreclaim and swap floods
  - gcov: clang: fix the buffer overflow issue
  - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
  - usb: dwc3: gadget: Clear ep descriptor last
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
  - usb: dwc3: gadget: conditionally remove requests
  - ceph: fix NULL pointer dereference for req->r_session
  - ceph: Use kcalloc for allocating multiple elements
  - ceph: fix possible NULL pointer dereference for req->r_session
  - ceph: put the requests/sessions when it fails to alloc memory
  - ceph: fix off by one bugs in unsafe_request_wait()
  - ceph: flush the mdlog before waiting on unsafe reqs
  - ceph: flush mdlog before umounting
  - ceph: make iterate_sessions a global symbol
  - ceph: make ceph_create_session_msg a global symbol
  - usb: cdns3: Add support for DRD CDNSP
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power
  - mmc: sdhci-brcmstb: Re-organize flags
  - nios2: add FORCE for vmlinuz.gz
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
  - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
  - iio: light: apds9960: fix wrong register for gesture gain
  - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
  - usb: dwc3: exynos: Fix remove() function
  - lib/vdso: use "grep -E" instead of "egrep"
  - net: enetc: preserve TX ring priority across reconfiguration
  - net: enetc: cache accesses to &priv->si->hw
  - net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled
  - s390/crashdump: fix TOD programmable field size
  - net: thunderx: Fix the ACPI memory leak
  - nfc: st-nci: fix memory leaks in EVT_TRANSACTION
  - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
  - arcnet: fix potential memory leak in com20020_probe()
  - net: arcnet: Fix RESET flag handling
  - s390/dasd: fix no record found for raw_track_access
  - ipv4: Fix error return code in fib_table_insert()
  - dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
  - netfilter: flowtable_offload: add missing locking
  - dma-buf: fix racing conflict of dma_heap_add()
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
  - regulator: twl6030: re-add TWL6032_SUBCLASS
  - NFC: nci: fix memory leak in nci_rx_data_packet()
  - net: sched: allow act_ct to be built without NF_NAT
  - sfc: fix potential memleak in __ef100_hard_start_xmit()
  - xfrm: Fix ignored return value in xfrm6_init()
  - tipc: check skb_linearize() return value in tipc_disc_rcv()
  - net/mlx5: Fix handling of entry refcount when command is not issued to FW
  - net/mlx5: Fix FW tracer timestamp calculation
  - netfilter: ipset: regression in ip_set_hash_ip.c
  - netfilter: ipset: Limit the maximal range of consecutive elements to add/delete
  - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
  - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
  - macsec: Fix invalid error code set
  - nfp: add port from netdev validation for EEPROM access
  - nfp: fill splittable of devlink_port_attrs correctly
  - net: pch_gbe: fix pci device refcount leak while module exiting
  - net/qla3xxx: fix potential memleak in ql3xxx_send()
  - net/mlx4: Check retval of mlx4_bitmap_init
  - net: ethernet: mtk_eth_soc: fix error handling in mtk_open()
  - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
  - ARM: mxs: fix memory leak in mxs_machine_init()
  - netfilter: conntrack: Fix data-races around ct mark
  - 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
  - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
  - nfc/nci: fix race with opening and closing
  - rxrpc: Use refcount_t rather than atomic_t
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc
  - net: liquidio: simplify if expression
  - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
  - tee: optee: fix possible memory leak in optee_register_device()
  - bus: sunxi-rsb: Support atomic transfers
  - regulator: core: fix UAF in destroy_regulator()
  - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld()
  - regulator: core: fix kobject release warning and memory leak in regulator_register()
  - scsi: storvsc: Fix handling of srb_status and capacity change events
  - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
  - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
  - ASoC: hdac_hda: fix hda pcm buffer overflow issue
  - ARM: dts: am335x-pcm-953: Define fixed regulators in root node
  - af_key: Fix send_acquire race with pfkey_register
  - xfrm: replay: Fix ESN wrap around for GSO
  - MIPS: pic32: treat port as signed integer
  - RISC-V: vdso: Do not add missing symbols to version section in linker script
  - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
  - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
  - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
  - scsi: ibmvfc: Avoid path failures during live migration
  - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1
  - Revert "net: macsec: report real_dev features when HW offloading is enabled"
  - selftests/bpf: Add verifier test for release_reference()
  - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
  - wifi: mac80211: Fix ack frame idr leak when mesh has no route
  - wifi: airo: do not assign -1 to unsigned char
  - audit: fix undefined behavior in bit shift for AUDIT_BIT
  - riscv: dts: sifive unleashed: Add PWM controlled LEDs
  - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
  - wifi: mac80211: fix memory free error when registering wiphy fail
  - ceph: avoid putting the realm twice when decoding snaps fails
  - ceph: do not update snapshot context when there is no new snapshot
  - iio: pressure: ms5611: fixed value compensation bug
  - iio: ms5611: Simplify IO callback parameters
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
  - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH
  - drm/display: Don't assume dual mode adaptors support i2c sub-addressing
  - bridge: switchdev: Fix memory leaks when changing VLAN protocol
  - bridge: switchdev: Notify about VLAN protocol changes
  - ata: libata-core: do not issue non-internal commands once EH is pending
  - ata: libata-scsi: simplify __ata_scsi_queuecmd()
  - scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
  - !1507 [sync] PR-1473: Backport 5.10.156 LTS patches from upstream.
  - Revert "net: broadcom: Fix BCMGENET Kconfig"
  - ntfs: check overflow when iterating ATTR_RECORDs
  - ntfs: fix use-after-free in ntfs_attr_find()
  - mm: fs: initialize fsdata passed to write_begin/write_end interface
  - 9p/trans_fd: always use O_NONBLOCK read/write
  - gfs2: Switch from strlcpy to strscpy
  - gfs2: Check sb_bsize_shift after reading superblock
  - 9p: trans_fd/p9_conn_cancel: drop client lock earlier
  - kcm: close race conditions on sk_receive_queue
  - tcp: cdg: allow tcp_cdg_release() to be called multiple times
  - uapi/linux/stddef.h: Add include guards
  - Input: i8042 - fix leaking of platform device on module removal
  - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
  - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
  - stddef: Introduce struct_group() helper macro
  - usbnet: smsc95xx: Fix deadlock on runtime resume
  - ring-buffer: Include dropped pages in counting dirty patches
  - nvme: ensure subsystem reset is single threaded
  - nvme: restrict management ioctls to admin
  - perf/x86/intel/pt: Fix sampling using single range output
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
  - docs: update mediator contact information in CoC doc
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout
  - mmc: core: properly select voltage range without power cycle
  - firmware: coreboot: Register bus in module init
  - iommu/vt-d: Set SRE bit only when hardware has SRS cap
  - scsi: zfcp: Fix double free of FSF request when qdio send fails
  - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()
  - Input: iforce - invert valid length check when fetching device IDs
  - serial: 8250_lpss: Configure DMA also w/o DMA filter
  - serial: 8250: Flush DMA Rx on RLSI
  - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  - dm ioctl: fix misbehavior if list_versions races with module loading
  - iio: pressure: ms5611: changed hardcoded SPI speed to value limited
  - iio: adc: mp2629: fix potential array out of bound access
  - iio: adc: mp2629: fix wrong comparison of channel
  - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
  - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured
  - usb: chipidea: fix deadlock in ci_otg_del_timer
  - usb: add NO_LPM quirk for Realforce 87U Keyboard
  - USB: serial: option: add Fibocom FM160 0x0111 composition
  - USB: serial: option: add u-blox LARA-L6 modem
  - USB: serial: option: add u-blox LARA-R6 00B modem
  - USB: serial: option: remove old LARA-R6 PID
  - USB: serial: option: add Sierra Wireless EM9191
  - USB: bcma: Make GPIO explicitly optional
  - speakup: fix a segfault caused by switching consoles
  - slimbus: stream: correct presence rate frequencies
  - Revert "usb: dwc3: disable USB core PHY management"
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
  - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
  - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
  - tracing: Fix wild-memory-access in register_synth_event()
  - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
  - tracing/ring-buffer: Have polling block on watermark
  - ring_buffer: Do not deactivate non-existant pages
  - ftrace: Fix null pointer dereference in ftrace_add_mod()
  - ftrace: Optimize the allocation for mcount entries
  - ftrace: Fix the possible incorrect kernel message
  - cifs: add check for returning value of SMB2_set_info_init
  - net: thunderbolt: Fix error handling in tbnet_init()
  - cifs: Fix wrong return value checking when GETFLAGS
  - net/x25: Fix skb leak in x25_lapb_receive_frame()
  - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open()
  - cifs: add check for returning value of SMB2_close_init
  - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized
  - drbd: use after free in drbd_create_device()
  - net: ena: Fix error handling in ena_init()
  - net: ionic: Fix error handling in ionic_init_module()
  - xen/pcpu: fix possible memory leak in register_pcpu()
  - bnxt_en: Remove debugfs when pci_register_driver failed
  - net: caif: fix double disconnect client in chnl_net_open()
  - net: macvlan: Use built-in RCU list checking
  - mISDN: fix misuse of put_device() in mISDN_register_device()
  - net: liquidio: release resources when liquidio driver open failed
  - mISDN: fix possible memory leak in mISDN_dsp_element_register()
  - net: bgmac: Drop free_netdev() from bgmac_enet_remove()
  - bpf: Initialize same number of free nodes for each pcpu_freelist
  - ata: libata-transport: fix error handling in ata_tdev_add()
  - ata: libata-transport: fix error handling in ata_tlink_add()
  - ata: libata-transport: fix error handling in ata_tport_add()
  - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  - arm64: dts: imx8mn: Fix NAND controller size-cells
  - arm64: dts: imx8mm: Fix NAND controller size-cells
  - ARM: dts: imx7: Fix NAND controller size-cells
  - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker()
  - drm/drv: Fix potential memory leak in drm_dev_init()
  - drm/panel: simple: set bpc field for logic technologies displays
  - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
  - parport_pc: Avoid FIFO port location truncation
  - siox: fix possible memory leak in siox_device_add()
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
  - block: sed-opal: kmalloc the cmd/resp buffers
  - sctp: clear out_curr if all frag chunks of current msg are pruned
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent
  - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
  - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
  - serial: imx: Add missing .thaw_noirq hook
  - serial: 8250: omap: Flush PM QOS work on remove
  - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
  - serial: 8250_omap: remove wait loop from Errata i202 workaround
  - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl()
  - serial: 8250: Remove serial_rs485 sanitization from em485
  - ASoC: tas2764: Fix set_tdm_slot in case of single slot
  - ASoC: tas2770: Fix set_tdm_slot in case of single slot
  - ASoC: core: Fix use-after-free in snd_soc_exit()
  - spi: stm32: Print summary 'callbacks suppressed' message
  - drm/amdgpu: disable BACO on special BEIGE_GOBY card
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
  - drm/amd/pm: Read BIF STRAP also for BACO check
  - drm/amd/pm: support power source switch on Sienna Cichlid
  - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
  - spi: intel: Use correct mask for flash and protected regions
  - mtd: spi-nor: intel-spi: Disable write protection only if asked
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8
  - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route"
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
  - btrfs: remove pointless and double ulist frees in error paths of qgroup tests
  - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
  - i2c: i801: add lis3lv02d's I2C address for Vostro 5568
  - i2c: tegra: Allocate DMA memory for DMA engine
  - NFSv4: Retry LOCK on OLD_STATEID during delegation return
  - drm/amd/display: Remove wrong pipe control lock
  - ASoC: rt1308-sdw: add the default value of some registers
  - selftests/intel_pstate: fix build for ARCH=x86_64
  - selftests/futex: fix build for clang
  - ASoC: codecs: jz4725b: fix capture selector naming
  - ASoC: codecs: jz4725b: use right control for Capture Volume
  - ASoC: codecs: jz4725b: fix reported volume for Master ctl
  - ASoC: codecs: jz4725b: add missed Line In power control bit
  - spi: intel: Fix the offset to get the 64K erase opcode
  - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
  - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe
  - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
  - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
  - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
  - block: don't set GD_NEED_PART_SCAN if scan partition failed
  - dm stats: check for and propagate alloc_percpu failure
  - dm: don't lock fs when the map is NULL during suspend or resume
  - dm: don't lock fs when the map is NULL in process of resume
  - dm: requeue IO if mapping table not yet available
  - Revert "dm: make sure dm_table is binded before queue request"
  - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
  - dm thin: fix deadlock when swapping to thin device


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.22.0.98
changelog:
  - !1704 [sync] PR-1682:  netfilter: nft_set_pipapo: fix improper element removal
  - !1700 vfio-pci: Match specific devices with vendor id and device id
  - !1676 [sync] PR-1596:  ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - netfilter: nft_set_pipapo: fix improper element removal
  - vfio-pci: Match specific devices with vendor id and device id
  - Revert "vfio-pci: Match specific devices with vendor id and device id"
  - !1651 Fix missing dealloc_dfx_cnt() during device unregister
  - !1643 [sync] PR-1551:  ksmbd: allocate one more byte for implied bcc[0
  - !1645 [sync] PR-1605:  CVE-2023-38430
  - ksmbd: fix out-of-bound read in deassemble_neg_contexts()
  - RDMA/hns: Fix missing dealloc_dfx_cnt() during device unregister
  - ksmbd: validate smb request protocol id
  - ksmbd: define SMB2_COMPRESSION_TRANSFORM_ID in fs/ksmbd/smb2pdu.h
  - ksmbd: allocate one more byte for implied bcc[0]


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.23.0.99
changelog:
  - !1758 [sync] PR-1742:  cxgb4: fix use after free bugs caused by circular dependency problem
  - !1765 [sync] PR-1749:  Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1670 [sync] PR-1657:  media: usb: siano: Fix CVE-2023-4132
  - Input: cyttsp4_core - change del_timer_sync() to timer_shutdown_sync()
  - !1755 [sync] PR-1737:  ksmbd: fix out of bounds read in smb2_sess_setup
  - cxgb4: fix use after free bugs caused by circular dependency problem
  - !1746 [sync] PR-1727:  add support for timer_shutdown() api
  - !1733 [sync] PR-1713:  netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - !1620 [sync] PR-1578: Backport 5.10.160 - 5.10.162 LTS patches from upstream.
  - ksmbd: fix out of bounds read in smb2_sess_setup
  - timers: Keep del_timer[_sync]() exported
  - timers: Provide timer_shutdown[_sync]()
  - timers: Add shutdown mechanism to the internal functions
  - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode
  - timers: Silently ignore timers with a NULL function
  - timers: Rename del_timer() to timer_delete()
  - timers: Rename del_timer_sync() to timer_delete_sync()
  - timers: Use del_timer_sync() even on UP
  - timers: Update kernel-doc for various functions
  - timers: Replace BUG_ON()s
  - timers: Get rid of del_singleshot_timer_sync()
  - sw64: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function
  - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function
  - ARM: spear: Do not use timer namespace for timer_shutdown() function
  - !1716 [sync] PR-1711:  xfrm: add NULL check in xfrm_update_ae_params
  - !1634 [sync] PR-1604:  net: nfc: Fix CVE-2023-3863
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - xfrm: add NULL check in xfrm_update_ae_params
  - media: usb: siano: Fix warning due to null work_func_t function pointer
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  - nfc: llcp: simplify llcp_sock_connect() error paths
  - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
  - eventfd: provide a eventfd_signal_mask() helper
  - eventpoll: add EPOLL_URING_WAKE poll wakeup flag
  - Revert "proc: don't allow async path resolution of /proc/self components"
  - Revert "proc: don't allow async path resolution of /proc/thread-self components"
  - task_work: unconditionally run task_work from get_signal()
  - signal: kill JOBCTL_TASK_WORK
  - kernel: stop masking signals in create_io_thread()
  - entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set
  - kernel: allow fork with TIF_NOTIFY_SIGNAL pending
  - task_work: remove legacy TWA_SIGNAL path
  - alpha: fix TIF_NOTIFY_SIGNAL handling
  - ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling
  - ia64: don't call handle_signal() unless there's actually a signal queued
  - sparc: add support for TIF_NOTIFY_SIGNAL
  - nds32: add support for TIF_NOTIFY_SIGNAL
  - ia64: add support for TIF_NOTIFY_SIGNAL
  - h8300: add support for TIF_NOTIFY_SIGNAL
  - c6x: add support for TIF_NOTIFY_SIGNAL
  - alpha: add support for TIF_NOTIFY_SIGNAL
  - xtensa: add support for TIF_NOTIFY_SIGNAL
  - microblaze: add support for TIF_NOTIFY_SIGNAL
  - hexagon: add support for TIF_NOTIFY_SIGNAL
  - csky: add support for TIF_NOTIFY_SIGNAL
  - openrisc: add support for TIF_NOTIFY_SIGNAL
  - sh: add support for TIF_NOTIFY_SIGNAL
  - um: add support for TIF_NOTIFY_SIGNAL
  - s390: add support for TIF_NOTIFY_SIGNAL
  - mips: add support for TIF_NOTIFY_SIGNAL
  - parisc: add support for TIF_NOTIFY_SIGNAL
  - nios32: add support for TIF_NOTIFY_SIGNAL
  - m68k: add support for TIF_NOTIFY_SIGNAL
  - arc: add support for TIF_NOTIFY_SIGNAL
  - task_work: Use TIF_NOTIFY_SIGNAL if available
  - tools headers UAPI: Sync openat2.h with the kernel sources
  - saner calling conventions for unlazy_child()
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
  - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
  - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E
  - HID: ite: Add support for Acer S1002 keyboard-dock
  - igb: Initialize mailbox message for VF reset
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
  - USB: serial: f81534: fix division by zero on line-speed change
  - USB: serial: f81232: fix division by zero on line-speed change
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs
  - USB: serial: option: add Quectel EM05-G modem
  - usb: gadget: uvc: Prevent buffer overflow in setup handler
  - udf: Fix extending file within last block
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size
  - udf: Fix preallocation discarding at indirect extent boundary
  - udf: Discard preallocation before extending file with a hole
  - ASoC: ops: Correct bounds check for second channel on SX controls
  - nvme-pci: clear the prp2 field when not used
  - ASoC: cs42l51: Correct PGA Volume minimum value
  - can: mcba_usb: Fix termination command argument
  - can: sja1000: fix size of OCR_MODE_MASK define
  - pinctrl: meditatek: Startup with the IRQs disabled
  - libbpf: Use page size as max_entries when probing ring buffer map
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
  - ASoC: fsl_micfil: explicitly clear CHnF flags
  - ASoC: fsl_micfil: explicitly clear software reset bit
  - fuse: always revalidate if exclusive create
  - vfs: fix copy_file_range() averts filesystem freeze protection
  - vfs: fix copy_file_range() regression in cross-fs copies
  - x86/smpboot: Move rcu_cpu_starting() earlier


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.24.0.100
changelog:
  - !1837 [sync] PR-1814:  fix CVE-2023-20593 for openEuler
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - x86/cpu/amd: Add a Zenbleed fix
  - x86/cpu/amd: Move the errata checking functionality up
  - !1790 [sync] PR-1650:  mm: disable kernelcore=mirror when no mirror memory
  - mm: disable kernelcore=mirror when no mirror memory
  - !1777 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.25.0.101
changelog:
  - !1893 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1887 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1868 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1782 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1890 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - !1908  fix build error when setting CONFIG_HISI_PMU=y
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver
  - Revert "drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver"
  - Revert "drivers/perf: hisi: Add support for HiSilicon UC PMU driver"
  - Revert "perf: hisi: delete global enable pmu from xxx_write_counter()"
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1798 Backport 5.10.163 LTS patches from upstream
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1829 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
  - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
  - mptcp: use proper req destructor for IPv6
  - mptcp: dedicated request sock for subflow in v6
  - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
  - mptcp: mark ops structures as ro_after_init
  - serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way"
  - fsl_lpuart: Don't enable interrupts too early
  - ext4: don't set up encryption key during jbd2 transaction
  - ext4: disable fast-commit of encrypted dir operations
  - parisc: Align parisc MADV_XXX constants with all other architectures
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
  - efi: random: combine bootloader provided RNG seed with RNG protocol output
  - mbcache: Avoid nesting of cache->c_list_lock under bit locks
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
  - hfs/hfsplus: use WARN_ON for sanity check
  - selftests: set the BUILD variable to absolute path
  - ext4: don't allow journal inode to have encrypt flag
  - drm/i915/gvt: fix vgpu debugfs clean in remove
  - drm/i915/gvt: fix gvt debugfs destroy
  - riscv: uaccess: fix type of 0 variable on error in get_user()
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout
  - nvme: fix multipath crash caused by flush request when blktrace is enabled
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
  - udf: Fix extension of the last extent in the file
  - caif: fix memory leak in cfctrl_linkup_request()
  - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  - usb: rndis_host: Secure rndis_query check against int overflow
  - drivers/net/bonding/bond_3ad: return when there's no aggregator
  - perf tools: Fix resources leak in perf_data__open_dir()
  - netfilter: ipset: Rework long task execution when adding/deleting entries
  - netfilter: ipset: fix hash:net,port,net hang with /0 subnet
  - gpio: sifive: Fix refcount leak in sifive_gpio_probe
  - ceph: switch to vfs_inode_has_locks() to fix file lock bug
  - filelock: new helper: vfs_inode_has_locks
  - drm/meson: Reduce the FIFO lines held when AFBC is not used
  - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  - net: amd-xgbe: add missed tasklet_kill
  - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
  - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
  - net/mlx5: Avoid recovery in probe flows
  - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
  - vhost: fix range used in translate_desc()
  - vringh: fix range used in iotlb_translate()
  - vhost/vsock: Fix error handling in vhost_vsock_init()
  - nfc: Fix potential resource leaks
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
  - nfsd: shut down the NFSv4 state objects before the filecache
  - veth: Fix race with AF_XDP exposing old or uninitialized descriptors
  - vmxnet3: correctly report csum_level for encapsulated packet
  - drm/panfrost: Fix GEM handle creation ref-counting
  - bpf: pull before calling skb_postpull_rcsum()
  - SUNRPC: ensure the matching upcall is in-flight upon downcall
  - ext4: fix deadlock due to mbcache entry corruption
  - mbcache: automatically delete entries from cache on freeing
  - ext4: use kmemdup() to replace kmalloc + memcpy
  - ext4: fix leaking uninitialized memory in fast-commit journal
  - ext4: fix various seppling typos
  - fs: ext4: initialize fsdata in pagecache_write()
  - ext4: use memcpy_to_page() in pagecache_write()
  - mm/highmem: Lift memcpy_[to|from]_page to core
  - ext4: correct inconsistent error msg in nojournal mode
  - ext4: goto right label 'failed_mount3a'
  - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
  - riscv/stacktrace: Fix stack output without ra on the stack top
  - ravb: Fix "failed to switch device to config mode" message during unbind
  - staging: media: tegra-video: fix device_node use after free
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
  - x86/kprobes: Convert to insn_decode()
  - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
  - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
  - media: s5p-mfc: Fix in register read and write for H264
  - media: s5p-mfc: Clear workbit to handle error condition
  - media: s5p-mfc: Fix to handle reference queue during finishing
  - x86/MCE/AMD: Clear DFR errors found in THR handler
  - x86/mce: Get rid of msr_ops
  - btrfs: replace strncpy() with strscpy()
  - perf/x86/intel/uncore: Clear attr_update properly
  - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure
  - ARM: renumber bits related to _TIF_WORK_MASK
  - drm/amdgpu: make display pinning more flexible (v2)
  - drm/amdgpu: handle polaris10/11 overlap asics (v2)
  - ext4: allocate extended attribute value in vmalloc area
  - ext4: avoid unaccounted block allocation when expanding inode
  - ext4: initialize quota before expanding inode in setproject ioctl
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path
  - ext4: avoid BUG_ON when creating xattrs
  - ext4: fix error code return to user-space in ext4_get_branch()
  - ext4: fix corruption when online resizing a 1K bigalloc fs
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
  - ext4: init quota for 'old.inode' in 'ext4_rename'
  - ext4: check and assert if marking an no_delete evicting inode dirty
  - ext4: fix reserved cluster accounting in __es_remove_extent()
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
  - ext4: silence the warning when evicting inode with dioread_nolock
  - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
  - drm/i915/dsi: fix VBT send packet port selection for dual link DSI
  - drm/connector: send hotplug uevent on connector cleanup
  - device_cgroup: Roll back to original exceptions after copy failure
  - parisc: led: Fix potential null-ptr-deref in start_task()
  - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code
  - driver core: Fix bus_type.match() error handling in __driver_attach()
  - crypto: n2 - add missing hash statesize
  - PCI/sysfs: Fix double free in error path
  - PCI: Fix pci_device_is_present() for VFs by checking PF
  - ipmi: fix use after free in _ipmi_destroy_user()
  - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
  - ipmi: fix long wait in unload when IPMI disconnect
  - ASoC: jz4740-i2s: Handle independent FIFO flush bits
  - wifi: wilc1000: sdio: fix module autoloading
  - efi: Add iMac Pro 2017 to uefi skip cert quirk
  - md/bitmap: Fix bitmap chunk size overflow issues
  - rtc: ds1347: fix value written to century register
  - cifs: fix missing display of three mount options
  - cifs: fix confusing debug message
  - media: dvb-core: Fix double free in dvb_register_device()
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  - staging: media: tegra-video: fix chan->mipi value on error
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
  - tracing/hist: Fix wrong return value in parse_action_params()
  - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
  - ftrace/x86: Add back ftrace_expected for ftrace bug reports
  - perf/core: Call LSM hook after copying perf_event_attr
  - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
  - dm cache: set needs_check flag after aborting metadata
  - dm cache: Fix UAF in destroy()
  - dm clone: Fix UAF in clone_dtr()
  - dm integrity: Fix UAF in dm_integrity_dtr()
  - dm thin: Fix UAF in run_timer_softirq()
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
  - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
  - ALSA: patch_realtek: Fix Dell Inspiron Plus 16
  - cpufreq: Init completion before kobject_init_and_add()
  - PM/devfreq: governor: Add a private governor_data for governor
  - selftests: Use optional USERCFLAGS and USERLDFLAGS
  - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
  - ARM: ux500: do not directly dereference __iomem
  - btrfs: fix resolving backrefs for inline extent followed by prealloc
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
  - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
  - jbd2: use the correct print format
  - ktest.pl minconfig: Unset configs instead of just removing them
  - kest.pl: Fix grub2 menu handling for rebooting
  - soc: qcom: Select REMAP_MMIO for LLCC driver
  - media: stv0288: use explicitly signed char
  - rcu: Prevent lockdep-RCU splats on lock acquisition/release
  - torture: Exclude "NOHZ tick-stop error" from fatal errors
  - wifi: rtlwifi: 8192de: correct checking of IQK reload
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12
  - net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
  - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
  - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
  - kcsan: Instrument memcpy/memset/memmove with newer Clang
  - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
  - tpm: acpi: Call acpi_put_table() to fix memory leak
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
  - f2fs: should put a page when checking the summary info
  - mm, compaction: fix fast_isolate_around() to stay within boundaries
  - md: fix a crash in mempool_free
  - pnode: terminate at peers of source
  - ALSA: line6: fix stack overflow in line6_midi_transmit
  - ALSA: line6: correct midi status byte when receiving data from podxt
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
  - binfmt: Fix error return code in load_elf_fdpic_binary()
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount
  - pstore/zone: Use GFP_ATOMIC to allocate zone buffer
  - HID: plantronics: Additional PIDs for double volume key presses quirk
  - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  - powerpc/rtas: avoid scheduling in rtas_os_term()
  - powerpc/rtas: avoid device tree lookups in rtas_os_term()
  - objtool: Fix SEGFAULT
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue
  - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
  - ata: ahci: Fix PCS quirk application for suspend
  - nvme-pci: fix page size checks
  - nvme-pci: fix mempool alloc size
  - nvme-pci: fix doorbell buffer value endianness
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - cifs: fix oops during encryption
  - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
  - pwm: tegra: Fix 32 bit build
  - media: dvbdev: fix refcnt bug
  - media: dvbdev: fix build warning due to comments
  - gcov: add support for checksum field
  - regulator: core: fix deadlock on regulator enable
  - iio: adc128s052: add proper .data members in adc128_of_match table
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock
  - reiserfs: Add missing calls to reiserfs_security_free()
  - HID: mcp2221: don't connect hidraw
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode
  - usb: dwc3: core: defer probe on ulpi_read_id timeout
  - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode
  - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
  - ALSA: usb-audio: add the quirk for KT0206 device
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
  - afs: Fix lost servers_outstanding count
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option()
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
  - LoadPin: Ignore the "contents" argument of the LSM hooks
  - ASoC: rt5670: Remove unbalanced pm_runtime_put()
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()
  - ASoC: wm8994: Fix potential deadlock
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()
  - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()
  - ASoC: Intel: Skylake: Fix driver hang during shutdown
  - ALSA: hda: add snd_hdac_stop_streams() helper
  - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
  - hwmon: (jc42) Fix missing unlock on error in jc42_write()
  - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
  - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
  - clk: st: Fix memory leak in st_of_quadfs_setup()
  - media: si470x: Fix use-after-free in si470x_int_in_callback()
  - mmc: renesas_sdhi: better reset from HS400 mode
  - mmc: f-sdh30: Add quirks for broken timeout clock capability
  - regulator: core: fix use_count leakage when handling boot-on
  - libbpf: Avoid enum forward-declarations in public API in C++ mode
  - blk-mq: fix possible memleak when register 'hctx' failed
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
  - media: dvbdev: adopts refcnt to avoid UAF
  - media: dvb-frontends: fix leak of memory fw
  - ethtool: avoiding integer overflow in ethtool_phys_id()
  - mrp: introduce active flags to prevent UAF when applicant uninit
  - drm/amd/display: fix array index out of bound error in bios parser
  - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
  - drm/sti: Use drm_mode_copy()
  - drm/rockchip: Use drm_mode_copy()
  - drm/msm: Use drm_mode_copy()
  - s390/lcs: Fix return type of lcs_start_xmit()
  - s390/netiucv: Fix return type of netiucv_tx()
  - s390/ctcm: Fix return type of ctc{mp,}m_tx()
  - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback
  - igb: Do not free q_vector unless new one was allocated
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()
  - hamradio: baycom_epp: Fix return type of baycom_send_packet()
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
  - qed (gcc13): use u16 for fid to be big enough
  - ipmi: fix memleak when unload ipmi driver
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
  - wifi: ath9k: verify the expected usb_endpoints are present
  - brcmfmac: return error when getting invalid max_flowrings from dongle
  - drm/etnaviv: add missing quirks for GC300
  - hfs: fix OOB Read in __hfs_brec_find
  - acct: fix potential integer overflow in encode_comp_t()
  - nilfs2: fix shift-out-of-bounds due to too large exponent of block size
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
  - ACPICA: Fix error code path in acpi_ds_call_control_method()
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG
  - udf: Avoid double brelse() in udf_rename()
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
  - video: hyperv_fb: Avoid taking busy spinlock on panic path
  - arm64: make is_ttbrX_addr() noinstr-safe
  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
  - net: stream: purge sk_error_queue in sk_stream_kill_queues()
  - myri10ge: Fix an error handling path in myri10ge_probe()
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module
  - mailbox: zynq-ipi: fix error handling while device_register() fails
  - skbuff: Account for tail adjustment during pull operations
  - openvswitch: Fix flow lookup to use unmasked key
  - selftests: devlink: fix the fd redirect in dummy_reporter_test
  - rtc: mxc_v2: Add missing clk_disable_unprepare()
  - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL
  - igc: Lift TAPRIO schedule restriction
  - igc: recalculate Qbv end_time by considering cycle time
  - igc: Add checking for basetime less than zero
  - igc: Use strict cycles for Qbv scheduling
  - igc: Enhance Qbv scheduling by using first flag bit
  - net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME
  - r6040: Fix kmemleak in probe and remove
  - nfc: pn533: Clear nfc_target before being used
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
  - net: macsec: fix net device access prior to holding a lock
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
  - NFSD: Remove spurious cb_setup_err tracepoint
  - rtc: pcf85063: fix pcf85063_clkout_control
  - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
  - netfilter: flowtable: really fix NAT IPv6 offload
  - powerpc/pseries/eeh: use correct API for error log size
  - powerpc/eeh: Drop redundant spinlock initialization
  - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()
  - remoteproc: qcom_q6v5_pas: detach power domains on remove
  - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove
  - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
  - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
  - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY
  - selftests/powerpc: Fix resource leaks
  - powerpc/hv-gpci: Fix hv_gpci event list
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()
  - powerpc/perf: callchain validate kernel stack pointer bounds
  - kbuild: refactor single builds of *.ko
  - kbuild: unify modules(_install) for in-tree and external modules
  - kbuild: remove unneeded mkdir for external modules_install
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()
  - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds
  - powerpc/xmon: Enable breakpoints on 8xx
  - cxl: Fix refcount leak in cxl_calc_capp_routing
  - powerpc/52xx: Fix a resource leak in an error handling path
  - macintosh/macio-adb: check the return value of ioremap()
  - macintosh: fix possible memory leak in macio_add_one_device()
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
  - iommu/amd: Fix pci device refcount leak in ppr_notifier()
  - rtc: pcf85063: Fix reading alarm
  - rtc: snvs: Allow a time difference on clock register read
  - rtc: cmos: Disable ACPI RTC event on removal
  - rtc: cmos: Rename ACPI-related functions
  - rtc: cmos: Eliminate forward declarations of some functions
  - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
  - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
  - rtc: cmos: fix build on non-ACPI platforms
  - rtc: cmos: Fix wake alarm breakage
  - rtc: cmos: Fix event handler registration ordering issue
  - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
  - pwm: tegra: Improve required rate calculation
  - include/uapi/linux/swab: Fix potentially missing __always_inline
  - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices
  - iommu/sun50i: Fix flush size
  - iommu/sun50i: Fix R/W permission check
  - iommu/sun50i: Consider all fault sources for reset
  - iommu/sun50i: Fix reset release
  - RDMA/siw: Fix pointer cast warning
  - power: supply: fix null pointer dereferencing in power_supply_get_battery_info
  - HSI: omap_ssi_core: Fix error handling in ssi_init()
  - perf symbol: correction while adjusting symbol
  - perf trace: Handle failure when trace point folder is missed
  - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
  - perf trace: Return error if a system call doesn't exist
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register()
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
  - fbdev: vermilion: decrease reference count in error path
  - fbdev: via: Fix error in via_core_init()
  - fbdev: pm2fb: fix missing pci_disable_device()
  - fbdev: ssd1307fb: Drop optional dependency
  - thermal/drivers/imx8mm_thermal: Validate temperature range
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
  - tracing/hist: Fix issue of losting command info in error_log
  - usb: storage: Add check for kcalloc
  - i2c: mux: reg: check return value after calling platform_get_resource()
  - gpiolib: cdev: fix NULL-pointer dereferences
  - gpiolib: Get rid of redundant 'else'
  - vme: Fix error not catched in fake_init()
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
  - staging: rtl8192u: Fix use after free in ieee80211_rx()
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
  - chardev: fix error handling in cdev_device_add()
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
  - drivers: mcb: fix resource leak in mcb_probe()
  - usb: gadget: f_hid: fix refcount leak on error path
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev
  - usb: gadget: f_hid: optional SETUP/SET_REPORT mode
  - usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
  - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
  - iio: adis: add '__adis_enable_irq()' implementation
  - iio:imu:adis: Move exports into IIO_ADISLIB namespace
  - iio: adis: stylistic changes
  - iio: adis: handle devices that cannot unmask the drdy pin
  - iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable
  - iio: temperature: ltc2983: make bulk write buffer DMA-safe
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
  - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
  - ocxl: fix pci device refcount leak when calling get_function_0()
  - misc: ocxl: fix possible name leak in ocxl_file_register_afu()
  - test_firmware: fix memory leak in test_firmware_init()
  - serial: sunsab: Fix error handling in sunsab_init()
  - serial: altera_uart: fix locking in polling mode
  - tty: serial: altera_uart_{r,t}x_chars() need only uart_port
  - tty: serial: clean up stop-tx part in altera_uart_tx_chars()
  - serial: pch: Fix PCI device refcount leak in pch_request_dma()
  - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register
  - usb: typec: tipd: Fix spurious fwnode_handle_put in error path
  - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
  - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add
  - usb: fotg210-udc: Fix ages old endianness issues
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration
  - vfio: platform: Do not pass return buffer to ACPI _RST method
  - class: fix possible memory leak in __class_register()
  - serial: tegra: Read DMA status before terminating
  - drivers: dio: fix possible memory leak in dio_init()
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
  - hwrng: geode - Fix PCI device refcount leak
  - hwrng: amd - Fix PCI device refcount leak
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
  - orangefs: Fix sysfs not cleanup when dev init failed
  - RDMA/srp: Fix error return code in srp_parse_options()
  - RDMA/hfi1: Fix error return code in parse_platform_config()
  - riscv/mm: add arch hook arch_clear_hugepage_flags
  - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
  - crypto: amlogic - Remove kcalloc without check
  - RDMA/nldev: Fix failure to send large messages
  - f2fs: avoid victim selection from previous victim section
  - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
  - scsi: snic: Fix possible UAF in snic_tgt_create()
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
  - scsi: ipr: Fix WARNING in ipr_init()
  - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
  - scsi: fcoe: Fix possible name leak when device_register() fails
  - scsi: scsi_debug: Fix a warning in resp_report_zones()
  - scsi: scsi_debug: Fix a warning in resp_verify()
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host()
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - padata: Fix list iterator in padata_do_serial()
  - padata: Always leave BHs disabled when running ->parallel()
  - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
  - scsi: hpsa: Fix possible memory leak in hpsa_init_one()
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
  - crypto: ccree - Make cc_debugfs_global_fini() available for module init function
  - RDMA/hfi: Decrease PCI device reference count in error path
  - PCI: Check for alloc failure in pci_request_irq()
  - crypto: cryptd - Use request context instead of stack for sub-request
  - crypto: ccree - Remove debugfs when platform_driver_register failed
  - scsi: scsi_debug: Fix a warning in resp_write_scat()
  - RDMA/siw: Set defined status for work completion with undefined status
  - RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
  - RDMA/siw: Fix immediate work request flush to completion queue
  - f2fs: fix normal discard process
  - apparmor: Fix memleak in alloc_ns()
  - crypto: rockchip - rework by using crypto_engine
  - crypto: rockchip - delete unneeded variable initialization
  - crypto: rockchip - remove non-aligned handling
  - crypto: rockchip - better handle cipher key
  - crypto: rockchip - add fallback for ahash
  - crypto: rockchip - add fallback for cipher
  - crypto: rockchip - do not store mode globally
  - crypto: rockchip - do not do custom power management
  - f2fs: Fix the race condition of resize flag between resizefs
  - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled
  - RDMA/core: Fix order of nldev_exit call
  - PCI: dwc: Fix n_fts[] array overrun
  - apparmor: Use pointer to struct aa_label for lbs_cred
  - scsi: core: Fix a race between scsi_done() and scsi_timeout()
  - crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
  - crypto: sun8i-ss - use dma_addr instead u32
  - apparmor: Fix abi check to include v8 abi
  - apparmor: fix lockdep warning when removing a namespace
  - apparmor: fix a memleak in multi_transaction_new()
  - stmmac: fix potential division by 0
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
  - sctp: sysctl: make extra pointers netns aware
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context
  - net: lan9303: Fix read error execution path
  - can: tcan4x5x: Remove invalid write in clear_interrupts
  - net: amd-xgbe: Check only the minimum speed for active/passive cables
  - net: amd-xgbe: Fix logic around active and passive cables
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock
  - net: farsync: Fix kmemleak when rmmods farsync
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
  - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
  - net: defxx: Fix missing err handling in dfx_init()
  - net: vmw_vsock: vmci: Check memcpy_from_msg()
  - clk: socfpga: Fix memory leak in socfpga_gate_init()
  - clk: socfpga: use clk_hw_register for a5/c5
  - clk: socfpga: clk-pll: Remove unused variable 'rc'
  - blktrace: Fix output non-blktrace event when blk_classic option enabled
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
  - wifi: rtl8xxxu: Fix the channel width reporting
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
  - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll()
  - media: coda: Add check for kmalloc
  - media: coda: Add check for dcoda_iram_alloc
  - media: c8sectpfe: Add of_node_put() when breaking out of loop
  - mmc: mmci: fix return value check of mmc_add_host()
  - mmc: wbsd: fix return value check of mmc_add_host()
  - mmc: via-sdmmc: fix return value check of mmc_add_host()
  - mmc: meson-gx: fix return value check of mmc_add_host()
  - mmc: omap_hsmmc: fix return value check of mmc_add_host()
  - mmc: atmel-mci: fix return value check of mmc_add_host()
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host()
  - mmc: vub300: fix return value check of mmc_add_host()
  - mmc: toshsd: fix return value check of mmc_add_host()
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
  - mmc: pxamci: fix return value check of mmc_add_host()
  - mmc: mxcmmc: fix return value check of mmc_add_host()
  - mmc: moxart: fix return value check of mmc_add_host()
  - mmc: alcor: fix return value check of mmc_add_host()
  - NFSv4.x: Fail client initialisation if state manager thread can't run
  - SUNRPC: Fix missing release socket in rpc_sockname()
  - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
  - media: saa7164: fix missing pci_disable_device()
  - ALSA: pcm: Set missing stop_operating flag at undoing trigger start
  - hwmon: (jc42) Restore the min/max/critical temperatures on resume
  - hwmon: (jc42) Convert register access and caching to regmap/regcache
  - regulator: core: fix resource leak in regulator_register()
  - configfs: fix possible memory leak in configfs_create_dir()
  - hsr: Synchronize sequence number updates.
  - hsr: Synchronize sending frames to have always incremented outgoing seq nr.
  - hsr: Disable netpoll.
  - net: hsr: generate supervision frame without HSR/PRP tag
  - hsr: Add a rcu-read lock to hsr_forward_skb().
  - clk: qcom: clk-krait: fix wrong div2 functions
  - regulator: core: fix module refcount leak in set_supply()
  - wifi: mt76: fix coverity overrun-call in mt76_get_txpower()
  - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
  - wifi: mac80211: fix memory leak in ieee80211_if_add()
  - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
  - bonding: uninitialized variable in bond_miimon_inspect()
  - netfilter: conntrack: set icmpv6 redirects as RELATED
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
  - drm/amd/pm/smu11: BACO is supported when it's in BACO state
  - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
  - ASoC: mediatek: mt8173: Fix debugfs registration for components
  - wifi: iwlwifi: mvm: fix double free on tx path.
  - ALSA: asihpi: fix missing pci_disable_device()
  - NFS: Fix an Oops in nfs_d_automount()
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
  - NFSv4.2: Fix initialisation of struct nfs4_label
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label
  - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
  - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
  - ASoC: dt-bindings: wcd9335: fix reset line polarity in example
  - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
  - media: dvb-core: Fix ignored return value in dvb_register_frontend()
  - pinctrl: pinconf-generic: add missing of_node_put()
  - clk: imx: replace osc_hdmi with dummy
  - media: imon: fix a race condition in send_packet()
  - media: vimc: Fix wrong function called when vimc_init() fails
  - ASoC: qcom: Add checks for devm_kcalloc
  - drbd: fix an invalid memory access caused by incorrect use of list iterator
  - mtd: maps: pxa2xx-flash: fix memory leak in probe
  - bonding: fix link recovery in mode 2 when updelay is nonzero
  - drm/amdgpu: fix pci device refcount leak
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
  - regulator: core: use kfree_const() to free space conditionally
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT
  - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
  - HID: hid-sensor-custom: set fixed size for custom attributes
  - bpf: Move skb->len == 0 checks into __bpf_redirect
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
  - media: videobuf-dma-contig: use dma_mmap_coherent
  - media: platform: exynos4-is: Fix error handling in fimc_md_init()
  - media: solo6x10: fix possible memory leak in solo_sysfs_init()
  - media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
  - Input: elants_i2c - properly handle the reset GPIO when power is off
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref
  - wifi: ath10k: Fix return value in ath10k_pci_init()
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  - integrity: Fix memory leakage in keyring allocation error path
  - drm/fourcc: Fix vsub/hsub for Q410 and Q401
  - drm/fourcc: Add packed 10bit YUV 4:2:0 format
  - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
  - ASoC: pxa: fix null-pointer dereference in filter()
  - drm/mediatek: Modify dpi power on/off sequence.
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack
  - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
  - media: camss: Clean up received buffers on failed start of streaming
  - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
  - Input: joystick - fix Kconfig warning for JOYSTICK_ADC
  - mtd: Fix device name leak when register device failed in add_mtd_device()
  - clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs
  - bpf: propagate precision across all frames, not just the last one
  - bpf: Check the other end of slot_type for STACK_SPILL
  - bpf: propagate precision in ALU/ALU64 operations
  - media: platform: exynos4-is: fix return value check in fimc_md_probe()
  - bpf: Fix slot type check in check_stack_write_var_off
  - drm/msm/hdmi: drop unused GPIO support
  - drm/msm/hdmi: switch to drm_bridge_connector
  - ima: Fix fall-through warnings for Clang
  - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
  - spi: Update reference to struct spi_controller
  - clk: renesas: r9a06g032: Repair grave increment error
  - drm/rockchip: lvds: fix PM usage counter unbalance in poweron
  - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming
  - can: kvaser_usb: Add struct kvaser_usb_busparams
  - can: kvaser_usb_leaf: Fix bogus restart events
  - can: kvaser_usb_leaf: Fix wrong CAN state after stopping
  - can: kvaser_usb_leaf: Fix improved state not being reported
  - can: kvaser_usb_leaf: Set Warning state even without bus errors
  - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
  - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event
  - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
  - can: kvaser_usb: do not increase tx statistics when sending error message frames
  - media: exynos4-is: don't rely on the v4l2_async_subdev internals
  - media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev
  - venus: pm_helpers: Fix error check in vcodec_domains_get()
  - media: i2c: ad5820: Fix error path
  - media: coda: jpeg: Add check for kmalloc
  - pata_ipx4xx_cf: Fix unsigned comparison with less than zero
  - drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge
  - wifi: rtl8xxxu: Fix reading the vendor of combo chips
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
  - rapidio: devices: fix missing put_device in mport_cdev_open
  - hfs: Fix OOB Write in hfs_asc2mac
  - relay: fix type mismatch when allocating memory in relay_create_buf()
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
  - rapidio: fix possible UAF when kfifo_alloc() fails
  - fs: sysv: Fix sysv_nblocks() returns wrong value
  - MIPS: OCTEON: warn only once if deprecated link status is being used
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable
  - platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
  - PM: runtime: Do not call __rpm_callback() from rpm_idle()
  - PM: runtime: Improve path in rpm_idle() when no callback
  - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
  - x86/xen: Fix memory leak in xen_init_lock_cpu()
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
  - clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock()
  - cpu/hotplug: Make target_store() a nop when target == state
  - futex: Resend potentially swallowed owner death notification
  - futex: Move to kernel/futex/
  - clocksource/drivers/sh_cmt: Access registers according to spec
  - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
  - rapidio: rio: fix possible name leak in rio_register_mport()
  - rapidio: fix possible name leaks when rio_add_device() fails
  - ocfs2: fix memory leak in ocfs2_mount_volume()
  - ocfs2: rewrite error handling of ocfs2_fill_super
  - ocfs2: ocfs2_mount_volume does cleanup job before return error
  - debugfs: fix error when writing negative value to atomic_t debugfs file
  - docs: fault-injection: fix non-working usage of negative values
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
  - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
  - genirq/irqdesc: Don't try to remove non-existing sysfs files
  - nfsd: don't call nfsd_file_put from client states seqfile display
  - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
  - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()
  - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
  - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
  - PNP: fix name memory leak in pnp_alloc_dev()
  - selftests/efivarfs: Add checking of the test return value
  - MIPS: vpe-cmp: fix possible memory leak while module exiting
  - MIPS: vpe-mt: fix possible memory leak while module exiting
  - ocfs2: fix memory leak in ocfs2_stack_glue_init()
  - lib/fonts: fix undefined behavior in bit shift for get_default_font
  - proc: fixup uptime selftest
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext()
  - platform/x86: huawei-wmi: fix return value calculation
  - lib/debugobjects: fix stat count and optimize debug_objects_mem_init
  - perf: Fix possible memleak in pmu_dev_alloc()
  - selftests/ftrace: event_triggers: wait longer for test_event_enable
  - cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()
  - fs: don't audit the capability check in simple_xattr_list()
  - PM: hibernate: Fix mistake in kerneldoc comment
  - alpha: fix syscall entry in !AUDUT_SYSCALL case
  - cpuidle: dt: Return the correct numbers of parsed idle states
  - sched/uclamp: Fix relationship between uclamp and migration margin
  - sched/fair: Cleanup task_util and capacity type
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
  - tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init()
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
  - ARM: mmp: fix timer_read delay
  - pstore/ram: Fix error return code in ramoops_probe()
  - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
  - ARM: dts: turris-omnia: Add switch port 6 node
  - ARM: dts: turris-omnia: Add ethernet aliases
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
  - arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings
  - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
  - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
  - arm64: dts: mt2712e: Fix unit address for pinctrl node
  - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
  - arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node
  - arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node
  - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
  - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
  - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
  - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - arm: dts: spear600: Fix clcd interrupt
  - soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index
  - soc: qcom: apr: make code more reuseable
  - soc: qcom: llcc: make irq truly optional
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
  - ARM: dts: stm32: Fix AV96 WLAN regulator gpio property
  - ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
  - objtool, kcsan: Add volatile read/write instrumentation to whitelist
  - arm64: dts: qcom: msm8916: Drop MSS fallback compatible
  - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
  - arm64: dts: qcom: sdm630: fix UART1 pin bias
  - ARM: dts: qcom: apq8064: fix coresight compatible
  - arm64: dts: qcom: msm8996: fix GPU OPP table
  - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
  - usb: musb: remove extra check in musb_gadget_vbus_draw
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.26.0.102
changelog:
  - !2004 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !1628 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1819 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1981 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1386 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - !1929 [sync] PR-1920: net/hinic3: Add DPU PF device type support.
  - net/hinic3: Add DPU PF device type support.
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.27.0.103
changelog:
  - !2145 [sync] PR-2126:  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2110 [sync] PR-2090:  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2103 [sync] PR-2092:  netfilter: nf_tables: skip bound chain on rule flush
  - !2112 [sync] PR-2085:  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2104 [sync] PR-2097:  Fixed 4 CVEs of the ksmbd
  - !2078 [sync] PR-2065:  dm: switch to precise io accounting
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - !1927 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - !2008 [sync] PR-1928: RDMA/hns Bugfix from mainline linux
  - dm: switch to precise io accounting
  - !2059 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2049 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request
  - RDMA/hns: Remove the num_qpc_timer variable


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.28.0.105
changelog:
  - !2215 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2241 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2244 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2235 [sync] PR-1962:  x86/speculation: Add force option to GDS mitigation
  - !2233 [sync] PR-2086:  fix CVE-2023-20588
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1879 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2172 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2083 [sync] PR-2009: Fix errors related to bond for RDMA/hns
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2151 [sync] PR-2095:  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - RDMA/hns: Fix missing cleanup when bond_grp becomes invalid
  - RDMA/hns: Fix the device loss after unbinding RoCE bond resource slave
  - RDMA/hns: Fix wild pointer error of RoCE bonding when rmmod hns3
  - RDMA/hns: Add functions to obtain netdev and bus_num from an hr_dev
  - RDMA/hns: Fix a memory leak error when bond clear failed
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.29.0.106
changelog:
  - !2393  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2386  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2380 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !1939 [sync] PR-1771: Backport 5.10.164 - 5.10.165  LTS patches from upstream.
  - !2320 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !2311 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !2279 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2125 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !2187  nvme-pci: fix timeout request state check
  - !2251 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - nvme-pci: fix timeout request state check
  - nvme-pci: fix DMA direction of unmapping integrity data
  - io_uring/rw: remove leftover debug statement
  - io_uring/rw: ensure kiocb_end_write() is always called
  - io_uring: fix double poll leak on repolling
  - io_uring: Clean up a false-positive warning from GCC 9.3.0
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
  - Bluetooth: hci_qca: Fixed issue during suspend
  - Bluetooth: hci_qca: check for SSR triggered flag while suspend
  - Bluetooth: hci_qca: Wait for SSR completion during suspend
  - soc: qcom: apr: Make qcom,protection-domain optional again
  - Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
  - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
  - tracing: Use alignof__(struct {type b;}) instead of offsetof()
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
  - Revert "drm/amdgpu: make display pinning more flexible (v2)"
  - efi: rt-wrapper: Add missing include
  - arm64: efi: Execute runtime services from a dedicated stack
  - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
  - drm/amd/display: Calculate output_color_space after pixel encoding adjustment
  - drm/amd/display: Fix set scaling doesn's work
  - drm/i915: re-disable RC6p on Sandy Bridge
  - mei: me: add meteor lake point M DID
  - gsmi: fix null-deref in gsmi_get_variable
  - serial: atmel: fix incorrect baudrate setup
  - dmaengine: tegra210-adma: fix global intr clear
  - serial: pch_uart: Pass correct sg to dma_unmap_sg()
  - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
  - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
  - usb: gadget: g_webcam: Send color matching descriptor per frame
  - usb: typec: altmodes/displayport: Fix pin assignment calculation
  - usb: typec: altmodes/displayport: Add pin assignment helper
  - usb: host: ehci-fsl: Fix module alias
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id
  - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
  - thunderbolt: Use correct function to calculate maximum USB3 link rate
  - cifs: do not include page data when checking signature
  - btrfs: fix race between quota rescan and disable leading to NULL pointer deref
  - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
  - comedi: adv_pci1760: Fix PWM instruction handling
  - usb: core: hub: disable autosuspend for TI TUSB8041
  - misc: fastrpc: Fix use-after-free race condition for maps
  - misc: fastrpc: Don't remove map on creater_process and device_release
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
  - staging: vchiq_arm: fix enum vchiq_status return types
  - USB: serial: option: add Quectel EM05CN modem
  - USB: serial: option: add Quectel EM05CN (SG) modem
  - USB: serial: option: add Quectel EC200U modem
  - USB: serial: option: add Quectel EM05-G (RS) modem
  - USB: serial: option: add Quectel EM05-G (CS) modem
  - USB: serial: option: add Quectel EM05-G (GR) modem
  - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
  - usb: acpi: add helper to check port lpm capability using acpi _DSM
  - xhci: Add a flag to disable USB3 lpm on a xhci root port level.
  - xhci: Add update_hub_device override for PCI xHCI hosts
  - xhci: Fix null pointer dereference when host dies
  - usb: xhci: Check endpoint is valid before dereferencing it
  - xhci-pci: set the dma max_seg_size
  - io_uring/rw: defer fsnotify calls to task context
  - io_uring: do not recalculate ppos unnecessarily
  - io_uring: update kiocb->ki_pos at execution time
  - io_uring: remove duplicated calls to io_kiocb_ppos
  - io_uring: ensure that cached task references are always put on exit
  - io_uring: fix CQ waiting timeout handling
  - io_uring: lock overflowing for IOPOLL
  - io_uring: check for valid register opcode earlier
  - io_uring: fix async accept on O_NONBLOCK sockets
  - io_uring: allow re-poll if we made progress
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
  - io_uring: add flag for disabling provided buffer recycling
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
  - io_uring: improve send/recv error handling
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev
  - Bluetooth: hci_qca: Wait for timeout during suspend
  - drm/i915/gt: Reset twice
  - ALSA: hda/realtek - Turn on power early
  - efi: fix userspace infinite retry read efivars after EFI runtime services page fault
  - nilfs2: fix general protection fault in nilfs_btree_insert()
  - zonefs: Detect append writes at invalid locations
  - Add exception protection processing for vd in axi_chan_handle_err function
  - wifi: mac80211: sdata can be NULL during AMPDU start
  - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
  - f2fs: let's avoid panic if extent_tree is not created
  - x86/asm: Fix an assembler warning with current binutils
  - btrfs: always report error in run_one_delayed_ref()
  - RDMA/srp: Move large values to a new enum for gcc13
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
  - tools/virtio: initialize spinlocks in vring_test.c
  - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID
  - pNFS/filelayout: Fix coalescing test for single DS
  - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  - io_uring/io-wq: only free worker if it was allocated for creation
  - io_uring/io-wq: free worker if task_work creation is canceled
  - drm/virtio: Fix GEM handle creation UAF
  - efi: fix NULL-deref in init error path
  - arm64: cmpxchg_double*: hazard against entire exchange variable
  - arm64: atomics: remove LL/SC trampolines
  - arm64: atomics: format whitespace consistently
  - x86/resctrl: Fix task CLOSID/RMID update race
  - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI
  - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID
  - Documentation: KVM: add API issues section
  - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
  - iommu/mediatek-v1: Add error handle for mtk_iommu_probe
  - mm: Always release pages to the buddy allocator in memblock_free_late().
  - net/mlx5e: Don't support encap rules with gbp option
  - net/mlx5: Fix ptp max frequency adjustment range
  - net/sched: act_mpls: Fix warning during failed attribute validation
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
  - hvc/xen: lock console list traversal
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
  - octeontx2-af: Map NIX block from CGX connection
  - octeontx2-af: Update get/set resource count functions
  - tipc: fix unexpected link reset due to discovery messages
  - ASoC: wm8904: fix wrong outputs volume after power reactivation
  - regulator: da9211: Use irq handler when ready
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period()
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
  - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
  - ext4: fix uninititialized value in 'ext4_evict_inode'
  - usb: ulpi: defer ulpi_register on ulpi_read_id timeout
  - xhci: Prevent infinite loop in transaction errors recovery for streams
  - xhci: move and rename xhci_cleanup_halted_endpoint()
  - xhci: store TD status in the td struct instead of passing it along
  - xhci: move xhci_td_cleanup so it can be called by more functions
  - xhci: Add xhci_reset_halted_ep() helper function
  - xhci: adjust parameters passed to cleanup_halted_endpoint()
  - xhci: get isochronous ring directly from endpoint structure
  - xhci: Avoid parsing transfer events several times
  - clk: imx: imx8mp: add shared clk gate for usb suspend clk
  - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  - clk: imx8mp: add clkout1/2 support
  - clk: imx8mp: Add DISP2 pixel clock
  - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options
  - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands
  - bus: mhi: host: Fix race between channel preparation and M0 event
  - ixgbe: fix pci device refcount leak
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe
  - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
  - drm/msm/adreno: Make adreno quirks not overwrite each other
  - cifs: Fix uninitialized memory read for smb311 posix symlink create
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
  - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
  - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
  - s390/kexec: fix ipl report address for kdump
  - perf auxtrace: Fix address filter duplicate symbol selection
  - docs: Fix the docs build with Sphinx 6.0
  - efi: tpm: Avoid READ_ONCE() for accessing the event log
  - KVM: arm64: Fix S1PTW handling on RO memslots
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.30.0.107
changelog:
  - !2422 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - !2398 Backport 5.10.166 - 5.10.167 LTS patches from upstream.
  - net/sched: Retire rsvp classifier
  - !1122  ext4: delete redundant uptodate check for buffer
  - !2368 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - net: fix NULL pointer in skb_segment_list
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
  - blk-cgroup: fix missing pd_online_fn() while activating policy
  - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
  - ARM: dts: vf610: Fix pca9548 i2c-mux node names
  - ARM: dts: imx: Fix pca9547 i2c-mux node name
  - clk: Fix pointer casting to prevent oops in devm_clk_release()
  - perf/x86/amd: fix potential integer overflow on shift of a int
  - netfilter: conntrack: unify established states for SCTP paths
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
  - block: fix and cleanup bio_check_ro
  - Revert "selftests/ftrace: Update synthetic event syntax errors"
  - nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode"
  - tools: gpio: fix -c option of gpio-event-mon
  - net: mdio-mux-meson-g12a: force internal PHY off on mux switch
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH
  - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
  - net: ravb: Fix possible hang if RIS2_QFF1 happen
  - netrom: Fix use-after-free of a listening socket.
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
  - netlink: annotate data races around sk_state
  - netlink: annotate data races around dst_portid and dst_group
  - netlink: annotate data races around nlk->portid
  - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
  - net: fix UaF in netns ops registration error path
  - netlink: prevent potential spectre v1 gadgets
  - i2c: designware: use casting of u64 in clock multiplication to avoid overflow
  - i2c: designware: Use DIV_ROUND_CLOSEST() macro
  - units: Add SI metric prefix definitions
  - units: Add Watt units
  - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
  - EDAC/device: Respect any driver-supplied workqueue polling value
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
  - thermal: intel: int340x: Protect trip temperature from concurrent updates
  - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
  - cifs: Fix oops due to uncleared server->smbd_conn in reconnect
  - ftrace/scripts: Update the instructions for ftrace-bisect.sh
  - trace_events_hist: add check for return value of 'create_hist_field'
  - tracing: Make sure trace_printk() can output as soon as it can be used
  - module: Don't wait for GOING modules
  - scsi: hpsa: Fix allocation size for scsi_host_alloc()
  - xhci: Set HCD flag to defer primary roothub registration
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - docs: Fix path paste-o for /sys/kernel/warn_count
  - panic: Expose "warn_count" to sysfs
  - panic: Introduce warn_limit
  - panic: Consolidate open-coded panic_on_warn checks
  - panic: Separate sysctl logic from CONFIG_SMP
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate
  - kasan: no need to unset panic_on_warn in end_report()
  - ubsan: no need to unset panic_on_warn in ubsan_epilogue()
  - panic: unset panic_on_warn inside panic()
  - kernel/panic: move panic sysctls to its own file
  - fs: reiserfs: remove useless new_opts in reiserfs_remount
  - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
  - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
  - Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID"
  - lockref: stop doing cpu_relax in the cmpxchg loop
  - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
  - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  - spi: spidev: remove debug messages that access spidev->spi without locking
  - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
  - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
  - cpufreq: armada-37xx: stop using 0 as NULL pointer
  - s390/debug: add _ASM_S390_ prefix to header guard
  - drm: Add orientation quirk for Lenovo ideapad D330-10IGL
  - ASoC: fsl_micfil: Correct the number of steps on SX controls
  - kcsan: test: don't put the expect array on the stack
  - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
  - tcp: fix rate_app_limited to default to 1
  - net: dsa: microchip: ksz9477: port map correction in ALU table entry register
  - driver core: Fix test_async_probe_init saves device in wrong array
  - w1: fix WARNING after calling w1_process()
  - w1: fix deadloop in __w1_remove_master_device()
  - tcp: avoid the lookup process failing to get sk in ehash table
  - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()
  - HID: betop: check shape of output reports
  - l2tp: prevent lockdep issue in l2tp_tunnel_register()
  - net: macb: fix PTP TX timestamp failure due to packet padding
  - dmaengine: Fix double increment of client_count in dma_chan_get()
  - drm/panfrost: fix GENERIC_ATOMIC64 dependency
  - net: mlx5: eliminate anonymous module_init & module_exit
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
  - HID: revert CHERRY_MOUSE_000C quirk
  - net: stmmac: fix invalid call to mdiobus_get_phy()
  - net: mdio: validate parameter addr in mdiobus_get_phy()
  - net: usb: sr9700: Handle negative len
  - l2tp: close all race conditions in l2tp_tunnel_register()
  - l2tp: convert l2tp_tunnel_list to idr
  - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
  - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
  - net: nfc: Fix use-after-free in local_cleanup()
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()
  - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation
  - amd-xgbe: Delay AN timeout during KR training
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
  - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
  - phy: ti: fix Kconfig warning and operator precedence
  - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
  - affs: initialize fsdata in affs_truncate()
  - IB/hfi1: Remove user expected buffer invalidate race
  - IB/hfi1: Immediately remove invalid memory from hardware
  - IB/hfi1: Fix expected receive setup error exit issues
  - IB/hfi1: Reserve user expected TIDs
  - IB/hfi1: Reject a zero-length user expected buffer
  - RDMA/core: Fix ib block iterator counter overflow
  - tomoyo: fix broken dependency on *.conf.default
  - firmware: arm_scmi: Harden shared memory access in fetch_notification
  - firmware: arm_scmi: Harden shared memory access in fetch_response
  - EDAC/highbank: Fix memory leak in highbank_mc_probe()
  - ARM: imx: add missing of_node_put()
  - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
  - ARM: dts: imx7d-pico: Use 'clock-frequency'
  - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
  - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
  - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()
  - clk: Provide new devm_clk helpers for prepared and enabled clocks
  - clk: generalize devm_clk_get() a bit
  - sdei_watchdog: Avoid exception during sdei handler
  - ext4: delete redundant uptodate check for buffer


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.31.0.108
changelog:
  - !2680 [sync] PR-2390: Backport 5.10.174 -  5.10.175 LTS patches from upstream.
  - !2692 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
  - !2375 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
  - !2639 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
  - net: xfrm: Fix xfrm_address_filter OOB read
  - !2533 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
  - !2526 [sync] PR-2440:  netfilter: xt_u32: validate user space input
  - !2534 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
  - !2529 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
  - !2660 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
  - s390/dasd: add missing discipline function
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper
  - KVM: nVMX: Don't use Enlightened MSR Bitmap for L3
  - UML: define RUNTIME_DISCARD_EXIT
  - sh: define RUNTIME_DISCARD_EXIT
  - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
  - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
  - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
  - arch: fix broken BuildID for arm64 and riscv
  - ext4: block range must be validated before use in ext4_mb_clear_bb()
  - ext4: add strict range checks while freeing blocks
  - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid()
  - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb()
  - drm/i915: Don't use BAR mappings for ring buffers with LLC
  - skbuff: Fix nfct leak on napi stolen
  - media: rc: gpio-ir-recv: add remove function
  - media: ov5640: Fix analogue gain control
  - scripts: handle BrokenPipeError for python scripts
  - PCI: Add SolidRun vendor ID
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields
  - alpha: fix R_ALPHA_LITERAL reloc for large modules
  - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation
  - MIPS: Fix a compilation issue
  - block, bfq: fix uaf for bfqq in bic_set_bfqq()
  - block, bfq: replace 0/1 with false/true in bic apis
  - block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
  - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
  - block, bfq: fix possible uaf for 'bfqq->bic'
  - tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
  - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
  - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
  - ext4: Fix deadlock during directory rename
  - RISC-V: Don't check text_mutex during stop_machine
  - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
  - SUNRPC: Fix a server shutdown leak
  - net/smc: fix fallback failed while sendmsg with fastopen
  - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it
  - scsi: megaraid_sas: Update max supported LD IDs to 240
  - net: ethernet: mtk_eth_soc: fix RX data corruption issue
  - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
  - netfilter: tproxy: fix deadlock due to missing BH disable
  - netfilter: ctnetlink: revert to dumping mark regardless of event type
  - bnxt_en: Avoid order-5 memory allocation for TPA data
  - net: phylib: get rid of unnecessary locking
  - net: stmmac: add to set device wake up flag when stmmac init phy
  - net: caif: Fix use-after-free in cfusbl_device_notify()
  - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver
  - net: usb: lan78xx: Remove lots of set but unused 'ret' variables
  - selftests: nft_nat: ensuring the listening side is up before starting the client
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
  - powerpc: dts: t1040rdb: fix compatible string for Rev A boards
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
  - bgmac: fix *initial* chip reset to support BCM5358
  - drm/msm/a5xx: fix context faults during ring switch
  - drm/msm/a5xx: fix the emptyness check in the preempt code
  - drm/msm: Document and rename preempt_lock
  - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
  - drm/msm: Fix potential invalid ptr free
  - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
  - drm/nouveau/kms/nv50-: remove unused functions
  - ext4: Fix possible corruption when moving a directory
  - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
  - riscv: Add header include guards to insn.h
  - riscv: Avoid enabling interrupts in die()
  - RISC-V: Avoid dereferening NULL regs in die()
  - arm64: efi: Make efi_rt_lock a raw_spinlock
  - iommu/vt-d: Fix PASID directory pointer coherency
  - iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry()
  - irqdomain: Fix mapping-creation race
  - irqdomain: Refactor __irq_domain_alloc_irqs()
  - irqdomain: Look for existing mapping only once
  - irq: Fix typos in comments
  - udf: Fix off-by-one error when discarding preallocation
  - nfc: change order inside nfc_se_io error path
  - ext4: zero i_disksize when initializing the bootloader inode
  - ext4: fix WARNING in ext4_update_inline_data
  - ext4: move where set the MAY_INLINE_DATA flag is set
  - ext4: fix RENAME_WHITEOUT handling for inline directories
  - ext4: fix cgroup writeback accounting with fs-layer encryption
  - drm/connector: print max_requested_bpc in state debugfs
  - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17
  - fork: allow CLONE_NEWTIME in clone3 flags
  - fs: prevent out-of-bounds array speculation when closing a file descriptor
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
  - !2674 [22.03-LTS-SP2]Backport 5.10.173 LTS patches from upstream.
  - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
  - scsi: mpt3sas: Remove usage of dma_get_required_mask() API
  - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix
  - scsi: mpt3sas: Don't change DMA mask while reallocating pools
  - Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()"
  - media: uvcvideo: Fix race condition with usb_kill_urb
  - media: uvcvideo: Provide sync and async uvc_ctrl_status_event
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback
  - drm/display/dp_mst: Fix down message handling after a packet reception error
  - drm/display/dp_mst: Fix down/up message handling after sink disconnect
  - net: tls: avoid hanging tasks on the tx_lock
  - soundwire: cadence: Drain the RX FIFO after an IO timeout
  - soundwire: cadence: Remove wasted space in response_buf
  - phy: rockchip-typec: Fix unsigned comparison with less than zero
  - kernel/fail_function: fix memory leak with using debugfs_lookup()
  - PCI: Take other bus devices into account when distributing resources
  - PCI: Align extra resources for hotplug bridges properly
  - usb: gadget: uvc: Make bSourceID read/write
  - usb: uvc: Enumerate valid values for color matching
  - USB: ene_usb6250: Allocate enough memory for full object
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()
  - tools/iio/iio_utils:fix memory leak
  - mei: bus-fixup:upon error print return values of send and receive
  - serial: sc16is7xx: setup GPIO controller later in probe
  - tty: serial: fsl_lpuart: disable the CTS when send break signal
  - staging: emxx_udc: Add checks for dma_alloc_coherent()
  - media: uvcvideo: Silence memcpy() run-time false positive warnings
  - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
  - media: uvcvideo: Handle errors from calls to usb_string
  - media: uvcvideo: Handle cameras with invalid descriptors
  - IB/hfi1: Update RMT size calculation
  - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
  - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
  - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
  - thermal: intel: quark_dts: fix error pointer dereference
  - ASoC: zl38060 add gpiolib dependency
  - ASoC: zl38060: Remove spurious gpiolib select
  - ASoC: adau7118: don't disable regulators on device unbind
  - scsi: ipr: Work around fortify-string warning
  - rtc: sun6i: Always export the internal oscillator
  - tcp: tcp_check_req() can be called from process context
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible
  - net/sched: act_sample: fix action bind logic
  - nfc: fix memory leak of se_io context in nfc_genl_se_io
  - net/mlx5: Geneve, Fix handling of Geneve object id as error code
  - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
  - 9p/xen: fix connection sequence
  - 9p/xen: fix version parsing
  - net: fix __dev_kfree_skb_any() vs drop monitor
  - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
  - netfilter: ebtables: fix table blob use-after-free
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory
  - watchdog: Fix kmemleak in watchdog_cdev_register
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
  - ubi: Fix possible null-ptr-deref in ubi_free_volume()
  - ubifs: Fix memory leak in alloc_wbufs()
  - ubifs: Fix build errors as symbol undefined
  - ubi: ensure that VID header offset + VID header size <= alloc, size
  - um: vector: Fix memory leak in vector_config
  - fs: f2fs: initialize fsdata in pagecache_write()
  - f2fs: use memcpy_{to,from}_page() where possible
  - pwm: stm32-lp: fix the check on arr and cmp registers update
  - pwm: sifive: Always let the first pwm_apply_state succeed
  - pwm: sifive: Reduce time the controller lock is held
  - objtool: Fix memory leak in create_static_call_sections()
  - kbuild: Port silent mode detection to future gnu make.
  - pinctrl: rockchip: fix reading pull type on rk3568
  - pinctrl: rockchip: fix mux route data for rk3568
  - wifi: ath9k: use proper statements in conditionals
  - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
  - drm/edid: fix AVI infoframe aspect ratio handling
  - drm/radeon: Fix eDP for single-display iMac11,2
  - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
  - vfio/type1: prevent underflow of locked_vm via exec()
  - PCI: Avoid FLR for AMD FCH AHCI adapters
  - PCI: hotplug: Allow marking devices as disconnected during bind/unbind
  - PCI/PM: Observe reset delay irrespective of bridge_d3
  - riscv: jump_label: Fixup unaligned arch_static_branch function
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
  - scsi: ses: Don't attach if enclosure has no components
  - scsi: qla2xxx: Fix erroneous link down
  - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
  - scsi: qla2xxx: Fix link failure in NPIV environment
  - ktest.pl: Add RUN_TIMEOUT option with default unlimited
  - ktest.pl: Fix missing "end_monitor" when machine check fails
  - ktest.pl: Give back console on Ctrt^C on monitor
  - mm/thp: check and bail out if page in deferred queue already
  - mm: memcontrol: deprecate charge moving
  - docs: gdbmacros: print newest record
  - remoteproc/mtk_scp: Move clk ops outside send_lock
  - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
  - mips: fix syscall_get_nr
  - dax/kmem: Fix leak of memory-hotplug resources
  - alpha: fix FEN fault handling
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
  - ARM: dts: exynos: correct TMU phandle in Odroid HC1
  - ARM: dts: exynos: correct TMU phandle in Odroid XU
  - ARM: dts: exynos: correct TMU phandle in Exynos5250
  - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
  - ARM: dts: exynos: correct TMU phandle in Exynos4
  - ARM: dts: exynos: correct TMU phandle in Exynos4210
  - dm flakey: don't corrupt the zero page
  - dm flakey: fix logic when corrupting a bio
  - thermal: intel: powerclamp: Fix cur_state for multi package system
  - wifi: cfg80211: Fix use after free for wext
  - wifi: rtl8xxxu: Use a longer retry limit of 48
  - dm: add cond_resched() to dm_wq_work()
  - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
  - ext4: refuse to create ea block when umounted
  - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
  - io_uring: remove MSG_NOSIGNAL from recvmsg
  - io_uring/rsrc: disallow multi-source reg buffers
  - io_uring: add a conditional reschedule to the IOPOLL cancelation loop
  - io_uring: mark task TASK_RUNNING before handling resume/task work
  - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
  - irqdomain: Drop bogus fwspec-mapping error handling
  - irqdomain: Fix disassociation race
  - irqdomain: Fix association race
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook
  - brd: return 0/-error from brd_insert_page()
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs
  - x86/reboot: Disable virtualization in an emergency if SVM is supported
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
  - KVM: s390: disable migration mode when dirty tracking is disabled
  - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
  - KVM: Destroy target device if coalesced MMIO unregistration fails
  - udf: Fix file corruption when appending just after end of preallocated extent
  - udf: Detect system inodes linked into directory hierarchy
  - udf: Preserve link count of system files
  - udf: Do not update file length for failed writes to inline files
  - udf: Do not bother merging very long extents
  - udf: Truncate added extents on failed expansion
  - ocfs2: fix non-auto defrag path not working issue
  - ocfs2: fix defrag path triggering jbd2 ASSERT
  - f2fs: fix cgroup writeback accounting with fs-layer encryption
  - f2fs: fix information leak in f2fs_move_inline_dirents()
  - exfat: fix inode->i_blocks for non-512 byte sector size device
  - exfat: redefine DIR_DELETED as the bad cluster number
  - exfat: fix unexpected EOF while reading dir
  - exfat: fix reporting fs error when reading dir beyond EOF
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
  - ARM: dts: exynos: correct HDMI phy compatible in Exynos4
  - cifs: Fix uninitialized memory read in smb3_qfs_tcon()
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
  - s390: discard .interp section
  - s390/extmem: return correct segment type in __segment_load()
  - ipmi_ssif: Rename idle state and check
  - rtc: pm8xxx: fix set-alarm race
  - firmware: coreboot: framebuffer: Ignore reserved pixel color bits
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error
  - dm cache: add cond_resched() to various workqueue loops
  - dm thin: add cond_resched() to various workqueue loops
  - HID: logitech-hidpp: Don't restart communication if not necessary
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks
  - hwmon: (coretemp) Simplify platform device handling
  - gfs2: Improve gfs2_make_fs_rw error handling
  - regulator: s5m8767: Bounds check id indexing into arrays
  - regulator: max77802: Bounds check regulator id against opmode
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math
  - docs/scripts/gdb: add necessary make scripts_gdb step
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue
  - drm: amd: display: Fix memory leakage
  - drm/radeon: free iio for atombios when driver shutdown
  - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
  - HID: Add Mapping for System Microphone Mute
  - drm/omap: dsi: Fix excessive stack usage
  - drm/amd/display: Fix potential null-deref in dm_resume
  - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
  - PM: EM: fix memory leak with using debugfs_lookup()
  - uaccess: Add minimum bounds check on kernel buffer size
  - coda: Avoid partial allocation of sig_inputArgs
  - net/mlx5: fw_tracer: Fix debug print
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match
  - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
  - m68k: Check syscall_trace_enter() return code
  - net: bcmgenet: Add a check for oversized packets
  - ACPI: Don't build ACPICA with '-Os'
  - ice: add missing checks for PF vsi type
  - inet: fix fast path in __inet_hash_connect()
  - wifi: mt7601u: fix an integer underflow
  - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
  - x86/bugs: Reset speculation control settings on init
  - timers: Prevent union confusion from unexpected restart_syscall()
  - thermal: intel: Fix unsigned comparison with less than zero
  - wifi: ath11k: debugfs: fix to work with multiple PCI devices
  - rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
  - rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
  - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
  - blk-iocost: fix divide by 0 error in calc_lcoefs()
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
  - udf: Define EFSCORRUPTED error code
  - rpmsg: glink: Avoid infinite loop on intent for missing channel
  - media: saa7134: Use video_unregister_device for radio_dev
  - media: i2c: ov7670: 0 instead of -EINVAL was returned
  - media: i2c: imx219: Fix binning for RAW8 capture
  - media: i2c: imx219: Split common registers from mode tables
  - media: i2c: imx219: remove redundant writes
  - media: i2c: ov772x: Fix memleak in ov772x_probe()
  - media: ov5675: Fix memleak in ov5675_init_controls()
  - media: ov2740: Fix memleak in ov2740_init_controls()
  - media: max9286: Fix memleak in max9286_v4l2_register()
  - builddeb: clean generated package content
  - powerpc: Remove linker flag from KBUILD_AFLAGS
  - media: platform: ti: Add missing check for devm_regulator_get
  - media: ti: cal: fix possible memory leak in cal_ctx_create()
  - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
  - Input: iqs269a - do not poll during ATI
  - Input: iqs269a - do not poll during suspend or resume
  - alpha/boot/tools/objstrip: fix the check for ELF header
  - vdpa/mlx5: Don't clear mr struct on destroy MR
  - MIPS: vpe-mt: drop physical_memsize
  - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
  - powerpc/eeh: Set channel state after notifying the drivers
  - powerpc/eeh: Small refactor of eeh_handle_normal_event()
  - powerpc/rtas: ensure 4KB alignment for rtas_data_buf
  - powerpc/rtas: make all exports GPL
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling
  - powerpc/pseries/lpar: add missing RTAS retry status handling
  - powerpc/perf/hv-24x7: add missing RTAS retry status handling
  - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
  - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
  - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
  - Input: ads7846 - don't check penirq immediately for 7845
  - Input: ads7846 - always set last command to PWRDOWN
  - Input: ads7846 - convert to one message
  - Input: ads7846 - convert to full duplex
  - Input: ads7846 - don't report pressure for ads7845
  - clk: imx: avoid memory leak
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
  - linux/kconfig.h: replace IF_ENABLED() with PTR_IF() in <linux/kernel.h>
  - Input: iqs269a - configure device with a single block write
  - Input: iqs269a - increase interrupt handler return delay
  - Input: iqs269a - drop unused device node references
  - mtd: rawnand: sunxi: Fix the size of the last OOB region
  - RISC-V: fix funct4 definition for c.jalr in parse_asm.h
  - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
  - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
  - objtool: add UACCESS exceptions for __tsan_volatile_read/write
  - printf: fix errname.c list
  - sparc: allow PM configs for sparc32 COMPILE_TEST
  - perf tools: Fix auto-complete on aarch64
  - leds: led-core: Fix refcount leak in of_led_get()
  - perf llvm: Fix inadvertent file creation
  - gfs2: jdata writepage fix
  - cifs: Fix warning and UAF when destroy the MR list
  - cifs: Fix lost destroy smbd connection when MR allocate failed
  - nfsd: fix race to check ls_layouts
  - hid: bigben_probe(): validate report count
  - HID: bigben: use spinlock to safely schedule workers
  - HID: bigben_worker() remove unneeded check on report_field
  - HID: bigben: use spinlock to protect concurrent accesses
  - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
  - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
  - NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
  - dm: remove flush_scheduled_work() during local_exit()
  - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
  - hwmon: (mlxreg-fan) Return zero speed for broken fan
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting
  - spi: bcm63xx-hsspi: fix pm_runtime
  - scsi: aic94xx: Add missing check for dma_map_single()
  - scsi: mpt3sas: Fix a memory leak
  - drm/amdgpu: fix enum odm_combine_mode mismatch
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store
  - ASoC: dt-bindings: meson: fix gx-card codec node regex
  - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
  - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
  - ASoC: mchp-spdifrx: fix controls that works with completion mechanism
  - ASoC: mchp-spdifrx: fix return value in case completion times out
  - ASoC: atmel: fix spelling mistakes
  - ASoC: mchp-spdifrx: fix controls which rely on rsr register
  - spi: dw_bt1: fix MUX_MMIO dependencies
  - gpio: vf610: connect GPIO label to dev name
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
  - drm/mediatek: Clean dangling pointer on bind error path
  - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
  - drm/mediatek: Drop unbalanced obj unref
  - drm/mediatek: Use NULL instead of 0 for NULL pointer
  - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
  - gpu: host1x: Don't skip assigning syncpoints to channels
  - pinctrl: mediatek: Initialize variable *buf to zero
  - pinctrl: mediatek: Initialize variable pullen and pullup to zero
  - pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
  - drm/msm/mdp5: Add check for kzalloc
  - drm/msm/dpu: Add check for cstate
  - drm/msm: use strscpy instead of strncpy
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
  - drm/bridge: lt9611: pass a pointer to the of node
  - drm/bridge: lt9611: fix clock calculation
  - drm/bridge: lt9611: fix programming of video modes
  - drm/bridge: lt9611: fix polarity programming
  - drm/bridge: lt9611: fix HPD reenablement
  - drm/bridge: lt9611: fix sleep mode setup
  - drm/msm/dpu: Disallow unallocated resources to be returned
  - ALSA: hda/ca0132: minor fix for allocation size
  - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
  - ASoC: fsl_sai: initialize is_dsp_mode flag
  - drm/vc4: hdmi: Correct interlaced timings again
  - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
  - drm/vc4: hvs: Set AXI panic modes
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
  - pinctrl: rockchip: do coding style for mux route struct
  - pinctrl: rockchip: add support for rk3568
  - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
  - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()
  - drm: tidss: Fix pixel format definition
  - drm/vc4: dpi: Fix format mapping for RGB565
  - drm/vc4: dpi: Add option for inverting pixel clock and output enable
  - drm/vkms: Fix null-ptr-deref in vkms_release()
  - drm/bridge: megachips: Fix error handling in i2c_register_driver()
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
  - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
  - drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
  - sefltests: netdevsim: wait for devlink instance after netns removal
  - selftest: fib_tests: Always cleanup before exit
  - net: bcmgenet: fix MoCA LED control
  - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
  - selftests/net: Interpret UDP_GRO cmsg data as an int value
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
  - irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
  - bpf: Fix global subprog context argument resolution logic
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error
  - thermal/drivers/hisi: Drop second sensor hi3660
  - wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
  - crypto: crypto4xx - Call dma_unmap_page when done
  - selftests/bpf: Fix out-of-srctree build
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
  - wifi: iwl4965: Add missing check for create_singlethread_workqueue()
  - wifi: iwl3945: Add missing check for create_singlethread_workqueue
  - RISC-V: time: initialize hrtimer based broadcast clock event device
  - m68k: /proc/hardware should depend on PROC_FS
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete
  - rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
  - libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
  - Bluetooth: L2CAP: Fix potential user-after-free
  - OPP: fix error checking in opp_migrate_dentry()
  - s390/vmem: fix empty page tables cleanup under KASAN
  - irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
  - irqchip: Fix refcount leak in platform_irqchip_probe
  - net/mlx5: Enhance debug print in page allocation failure
  - bpftool: profile online CPUs instead of possible
  - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
  - crypto: ccp - Refactor out sev_fw_alloc()
  - leds: led-class: Add missing put_device() to led_put()
  - crypto: xts - Handle EBUSY correctly
  - net: ethernet: ti: add missing of_node_put before return
  - net: ethernet: ti: am65-cpsw: handle deferred probe with dev_err_probe()
  - net: ethernet: ti: am65-cpsw: fix tx csum offload for multi mac mode
  - x86/microcode: Print previous version of microcode after reload
  - x86/microcode: Default-disable late loading
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86: Mark stop_this_cpu() __noreturn
  - x86/microcode: Replace deprecated CPU-hotplug functions.
  - x86/cpu: Init AP exception handling from cpu_init_secondary()
  - powercap: fix possible name leak in powercap_register_zone()
  - crypto: seqiv - Handle EBUSY correctly
  - crypto: essiv - Handle EBUSY correctly
  - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
  - ACPI: battery: Fix missing NUL-termination with large strings
  - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data()
  - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
  - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
  - ath9k: htc: clean up statistics macros
  - ath9k: hif_usb: simplify if-if to if-else
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
  - wifi: orinoco: check return value of hermes_write_wordrec()
  - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
  - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
  - thermal/drivers/tsens: Add compat string for the qcom,msm8960
  - thermal/drivers/qcom/tsens_v1: Enable sensor 3 on MSM8976
  - thermal/drivers/tsens: Drop msm8976-specific defines
  - ACPICA: nsrepair: handle cases without a return value correctly
  - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak
  - crypto: ccp: Use the stack and common buffer for status commands
  - crypto: ccp: Use the stack for small SEV command buffers
  - lib/mpi: Fix buffer overrun when SG is too long
  - rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
  - rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
  - rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
  - genirq: Fix the return type of kstat_cpu_irqs_sum()
  - ACPICA: Drop port I/O validation for some regions
  - crypto: x86/ghash - fix unaligned access in ghash_setkey()
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
  - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
  - wifi: ipw2200: fix memory leak in ipw_wdev_init()
  - wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
  - libbpf: Fix btf__align_of() by taking into account field offsets
  - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()
  - rtlwifi: fix -Wpointer-sign warning
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: libertas: fix memory leak in lbs_init_adapter()
  - wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
  - wifi: rsi: Fix memory leak in rsi_coex_attach()
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned
  - x86/perf/zhaoxin: Add stepping check for ZXC
  - sched/rt: pick_next_rt_entity(): check list_entry
  - sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
  - s390/dasd: Fix potential memleak in dasd_eckd_init()
  - s390/dasd: Prepare for additional path event handling
  - blk-mq: correct stale comment of .get_budget
  - blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
  - blk-mq: avoid sleep in blk_mq_alloc_request_hctx
  - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
  - ARM: dts: imx7s: correct iomuxc gpr mux controller cells
  - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
  - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
  - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
  - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
  - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
  - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property
  - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
  - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
  - ARM: imx: Call ida_simple_remove() for ida_simple_get
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
  - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
  - ARM: s3c: fix s3c64xx_set_timer_source prototype
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
  - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
  - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
  - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
  - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
  - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size
  - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes
  - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
  - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name
  - arm64: dts: qcom: sc7180: correct SPMI bus address cells
  - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
  - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init
  - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
  - powerpc/mm: Rearrange if-else block to avoid clang warning
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2649 [sync] PR-2641:  Fix CVE-2023-5717
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2572  Fix cgroup psi poll UAF
  - !2521 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - igb: set max size RX buffer when store bad packet is enabled
  - !2597 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2568 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2582 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
  - !2623 [sync] PR-2613:  CVE-2022-44033
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !2586 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - xen/events: replace evtchn_rwlock with RCU
  - !2523 [sync] PR-2159: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
  - ksmbd: send proper error response in smb2_tree_connect()
  - ksmbd: fix racy issue from smb2 close and logoff with multichannel
  - ksmbd: call rcu_barrier() in ksmbd_server_exit()
  - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  - sched/psi: Select KERNFS as needed
  - kernfs: add stub helper for kernfs_generic_poll()
  - sched/psi: use kernfs polling functions for PSI trigger polling
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2467 [sync] PR-1851: Backport 5.10.169 - 5.10.172 LTS patches from upstream
  - netfilter: xt_sctp: validate the flag_info count
  - ipv4: fix null-deref in ipv4_link_failure
  - !2324 [sync] PR-2197: [RoCE] Support getting xrcd num from firmware；Fix incorrect post-send with direct wqe of wr-list
  - netfilter: nfnetlink_osf: avoid OOB read
  - netfilter: xt_u32: validate user space input
  - perf/smmuv3: Add MODULE_ALIAS for module auto loading
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
  - Revert "perf/smmuv3: Enable HiSilicon Erratum quirk"
  - !2516 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2487 [sync] PR-2340:  xfs: recent patches to fix xfs issues
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - xfs: update the last_sync_lsn with ctx start lsn
  - xfs: shutdown xfs once inode double free
  - xfs: fix off-by-one-block in xfs_discard_folio()
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range
  - iomap: buffered write failure should not truncate the page cache
  - xfs,iomap: move delalloc punching to iomap
  - xfs: use byte ranges for write cleanup ranges
  - xfs: punching delalloc extents on write failure is racy
  - xfs: longest free extent no need consider postalloc
  - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
  - xfs: block reservation too large for minleft allocation
  - xfs: set minleft correctly for randomly sparse inode allocations
  - xfs: shutdown to ensure submits buffers on LSN boundaries
  - xfs: don't verify agf length when log recovery
  - xfs: Remove redundant assignment to busy
  - xfs: remove redundant pointer lip
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf
  - xfs: xfs_trans_cancel() path must check for log shutdown
  - xfs: fix bounds check in xfs_defer_agfl_block()
  - xfs: AGF length has never been bounds checked
  - xfs: journal geometry is not properly bounds checked
  - xfs: don't block in busy flushing when freeing extents
  - xfs: allow extent free intents to be retried
  - xfs: pass alloc flags through to xfs_extent_busy_flush()
  - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
  - xfs: use deferred frees for btree block freeing
  - xfs: don't reverse order of items in bulk AIL insertion
  - xfs: validate block number being freed before adding to xefi
  - xfs: validity check agbnos on the AGFL
  - xfs: pass xfs_extent_free_item directly through the log intent code
  - xfs: remove unused parameter from refcount code
  - xfs: reduce the size of struct xfs_extent_free_item
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later
  - xfs: create slab caches for frequently-used deferred items
  - xfs: compact deferred intent item structures
  - xfs: rename _zone variables to _cache
  - xfs: remove kmem_zone typedef
  - xfs: remove xfs_setattr_time() declaration
  - xfs: use setattr_copy to set vfs inode attributes
  - xfs: set prealloc flag in xfs_alloc_file_space()
  - xfs: don't assert fail on perag references on teardown
  - xfs: fix dir3 block read verify fail during log recover
  - xfs: propagate the return value of xfs_log_force() to avoid soft lockup
  - xfs: keep growfs sb log item active until ail flush success
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file
  - usb: gadget: u_serial: Add null pointer check in gserial_resume
  - USB: serial: option: add support for VW/Skoda "Carstick LTE"
  - scripts/tags.sh: fix incompatibility with PCRE2
  - scripts/tags.sh: Invoke 'realpath' via 'xargs'
  - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
  - HID: core: Fix deadloop in hid_apply_multiplier.
  - IB/hfi1: Assign npages earlier
  - btrfs: send: limit number of clones and allocated memory size
  - ACPI: NFIT: fix a potential deadlock during NFIT teardown
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288
  - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
  - Fix XFRM-I support for nested ESP tunnels
  - ext4: Fix function prototype mismatch for ext4_feat_ktype
  - audit: update the mailing list in MAINTAINERS
  - wifi: mwifiex: Add missing compatible string for SD8787
  - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
  - nbd: fix max value for 'first_minor'
  - Revert "Revert "block: nbd: add sanity check for first_minor""
  - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
  - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
  - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
  - random: always mix cycle counter in add_latent_entropy()
  - clk: mxl: syscon_node_to_regmap() returns error pointers
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
  - clk: mxl: Fix a clk entry by adding relevant flags
  - clk: mxl: Add option to override gate clks
  - clk: mxl: Remove redundant spinlocks
  - clk: mxl: Switch from direct readl/writel based IO to regmap based IO
  - wifi: rtl8xxxu: gen2: Turn on the rate control
  - drm/etnaviv: don't truncate physical page address
  - nvmem: core: fix return value
  - net: sched: sch: Fix off by one in htb_activate_prios()
  - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN
  - i40e: Add checking for null for nlmsg_find_attr()
  - net/sched: act_ctinfo: use percpu stats
  - flow_offload: fill flags to action structure
  - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
  - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init()
  - nilfs2: fix underflow in second superblock position calculations
  - ipv6: Fix tcp socket connection with DSCP.
  - ipv6: Fix datagram socket connection with DSCP.
  - ixgbe: add double of VLAN header when computing the max MTU
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode
  - bnxt_en: Fix mqprio and XDP ring checking logic
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
  - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
  - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
  - net: bgmac: fix BCM5358 support by setting correct flags
  - i40e: add double of VLAN header when computing the max MTU
  - ixgbe: allow to increase MTU to 3K with XDP enabled
  - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
  - Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."
  - hugetlb: check for undefined shift on 32 bit architectures
  - sched/psi: Fix use-after-free in ep_remove_wait_queue()
  - ALSA: hda/realtek - fixed wrong gpio assigned
  - ALSA: hda/conexant: add a new hda codec SN6180
  - mmc: mmc_spi: fix error handling in mmc_spi_probe()
  - mmc: sdio: fix possible resource leaks in some error paths
  - mmc: jz4740: Work around bug on JZ4760(B)
  - netfilter: nft_tproxy: restrict to prerouting hook
  - ovl: remove privs in ovl_fallocate()
  - ovl: remove privs in ovl_copyfile()
  - s390/signal: fix endless loop in do_signal
  - aio: fix mremap after fork null-deref
  - nvmem: core: fix registration vs use race
  - nvmem: core: fix cleanup after dev_set_name()
  - nvmem: core: remove nvmem_config wp_gpio
  - nvmem: core: add error handling for dev_set_name
  - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
  - s390/decompressor: specify __decompress() buf len to avoid overflow
  - net: sched: sch: Bounds check priority
  - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
  - net/rose: Fix to not accept on connected socket
  - tools/virtio: fix the vringh test for virtio ring changes
  - ASoC: cs42l56: fix DT probe
  - ALSA: hda: Do not unset preset when cleaning up codec
  - selftests/bpf: Verify copy_register_state() preserves parent/live fields
  - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
  - !2430 [sync] PR-1822: Backport 5.10.168 LTS patches from upstream
  - Fix page corruption caused by racy check in __free_pages
  - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive
  - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
  - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
  - ceph: flush cap releases when the session is flushed
  - usb: typec: altmodes/displayport: Fix probe pin assign check
  - usb: core: add quirk for Alcor Link AK9563 smartcard reader
  - btrfs: free device in btrfs_close_devices for a single device filesystem
  - net: USB: Fix wrong-direction WARNING in plusb.c
  - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
  - spi: dw: Fix wrong FIFO level setting for long xfers
  - pinctrl: single: fix potential NULL dereference
  - pinctrl: aspeed: Fix confusing types in return value
  - ALSA: pci: lx6464es: fix a debug loop
  - selftests: forwarding: lib: quote the sysctl values
  - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
  - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
  - net/mlx5e: IPoIB, Show unknown speed instead of error
  - net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q"
  - ice: Do not use WQ_MEM_RECLAIM flag for workqueue
  - uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
  - ionic: clean interrupt before enabling queue to avoid credit race
  - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
  - bonding: fix error checking in bond_debug_reregister()
  - xfrm: fix bug with DSCP copy to v6 from v4 tunnel
  - RDMA/usnic: use iommu_map_atomic() under spin_lock()
  - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
  - xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
  - IB/hfi1: Restore allocated resources on failed copyout
  - xfrm: compat: change expression for switch in xfrm_xlate64
  - can: j1939: do not wait 250 ms if the same addr was already claimed
  - of/address: Return an error when no valid dma-ranges are found
  - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
  - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
  - ALSA: hda/realtek: Add Positivo N14KP6-TG
  - btrfs: zlib: zero-initialize zlib workspace
  - btrfs: limit device extents to the device size
  - migrate: hugetlb: check for hugetlb shared PMD in node migration
  - mm/migration: return errno when isolate_huge_page failed
  - iio:adc:twl6030: Enable measurement of VAC
  - bpf: Do not reject when the stack read size is different from the tracked scalar size
  - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
  - f2fs: fix to do sanity check on i_extra_isize in is_alive()
  - fbdev: smscufx: fix error handling code in ufx_usb_probe
  - serial: 8250_dma: Fix DMA Rx rearm race
  - serial: 8250_dma: Fix DMA Rx completion race
  - nvmem: core: fix cell removal on error
  - nvmem: core: initialise nvmem->id early
  - drm/i915: Fix potential bit_17 double-free
  - Squashfs: fix handling and sanity checking of xattr_ids count
  - fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
  - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
  - riscv: disable generation of unwind tables
  - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
  - parisc: Fix return code of pdc_iodc_print()
  - nvmem: qcom-spmi-sdam: fix module autoloading
  - iio: imu: fxos8700: fix MAGN sensor scale and unit
  - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
  - iio: imu: fxos8700: fix failed initialization ODR mode assignment
  - iio: imu: fxos8700: fix incorrect ODR mode readback
  - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix map label of channel type to MAGN sensor
  - iio: imu: fxos8700: fix IMU data bits returned to user space
  - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
  - iio: imu: fxos8700: fix ACCEL measurement range selection
  - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
  - iio: adc: berlin2-adc: Add missing of_node_put() in error path
  - iio: hid: fix the retval in accel_3d_capture_sample
  - efi: Accept version 2 of memory attributes table
  - ALSA: hda/realtek: Add Acer Predator PH315-54
  - watchdog: diag288_wdt: fix __diag288() inline assembly
  - watchdog: diag288_wdt: do not use stack buffers for hardware data
  - net: qrtr: free memory on error path in radix_tree_insert()
  - Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables
  - Input: i8042 - merge quirk tables
  - Input: i8042 - move __initconst to fix code styling warning
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
  - usb: dwc3: qcom: enable vbus override when in OTG dr-mode
  - usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
  - iio: adc: stm32-dfsdm: fill module aliases
  - net/x25: Fix to not accept on connected socket
  - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
  - i2c: rk3x: fix a bunch of kernel-doc warnings
  - scsi: target: core: Fix warning on RT kernels
  - i2c: mxs: suppress probe-deferral error message
  - qede: execute xdp_do_flush() before napi_complete_done()
  - qede: add netpoll support for qede driver
  - efi: fix potential NULL deref in efi_mem_reserve_persistent
  - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
  - virtio-net: Keep stop() to follow mirror sequence of open()
  - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking
  - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
  - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
  - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
  - ata: libata: Fix sata_down_spd_limit() when no link speed is reported
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
  - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp()
  - net: phy: meson-gxl: Add generic dummy stubs for MMD register access
  - squashfs: harden sanity check in squashfs_read_xattr_id_table
  - netfilter: br_netfilter: disable sabotage_in hook after first suppression
  - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
  - sfc: correctly advertise tunneled IPv6 segmentation
  - virtio-net: execute xdp_do_flush() before napi_complete_done()
  - fix "direction" argument of iov_iter_kvec()
  - fix iov_iter_bvec() "direction" argument
  - READ is "data destination", not source...
  - WRITE is "data source", not destination...
  - vhost/net: Clear the pending messages when the backend is removed
  - scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
  - drm/vc4: hdmi: make CEC adapter name unique
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
  - bpf: Fix to preserve reg parent/live fields when copying range info
  - bpf: Support <8-byte scalar spill and refill
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
  - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
  - powerpc/imc-pmu: Revert nest_init_lock to being a mutex
  - bpf: Fix incorrect state pruning for <8B spill/fill
  - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
  - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
  - ext4: do not mark inode dirty every time when appending using delalloc
  - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
  - RDMA/hns: Support get XRCD number from firmware
  - Revert "RDMA/hns: Fix incorrect post-send with direct wqe of wr-list in kernel space"
  - Revert "RDMA/hns: Support getting xrcd num from firmware"


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.32.0.109
changelog:
  - !2719 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2741 [sync] PR-2443:  CVE-2023-37453
  - !2735 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
  - USB: core: Fix oversight in SuperSpeed initialization
  - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
  - USB: core: Change usb_get_device_descriptor() API
  - USB: core: Unite old scheme and new scheme descriptor reads
  - !2729 [sync] PR-2686: Backport 5.10.179 LTS patches from upstream.
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
  - ASN.1: Fix check for strdup() success
  - ASoC: fsl_asrc_dma: fix potential null-ptr-deref
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()
  - pwm: hibvt: Explicitly set .polarity in .get_state()
  - pwm: iqs620a: Explicitly set .polarity in .get_state()
  - pwm: meson: Explicitly set .polarity in .get_state()
  - ext4: fix use-after-free in ext4_xattr_set_entry
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry"
  - fuse: fix deadlock between atomic O_TRUNC and page invalidation
  - fuse: always revalidate rename target dentry
  - fuse: fix attr version comparison in fuse_read_update_size()
  - fuse: check s_root when destroying sb
  - virtiofs: split requests that exceed virtqueue size
  - virtiofs: clean up error handling in virtio_fs_get_tree()
  - purgatory: fix disabling debug info
  - docs: futex: Fix kernel-doc references after code split-up preparation
  - MIPS: Define RUNTIME_DISCARD_EXIT in LD script
  - sched/uclamp: Fix a uninitialized variable warnings
  - sched/uclamp: Make cpu_overutilized() use util_fits_cpu()
  - sched/uclamp: Make select_idle_capacity() use util_fits_cpu()
  - sched/uclamp: Fix fits_capacity() check in feec()
  - sched/uclamp: Make task_fits_capacity() use util_fits_cpu()
  - mm/khugepaged: check again on anon uffd-wp during isolation
  - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25
  - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  - memstick: fix memory leak if card device is never registered
  - nilfs2: initialize unused bytes in segment summary blocks
  - iio: light: tsl2772: fix reading proximity-diodes from device tree
  - powerpc/doc: Fix htmldocs errors
  - xen/netback: use same error messages for same errors
  - nvme-tcp: fix a possible UAF when failing to allocate an io queue
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling
  - net: dsa: b53: mmap: add phy ops
  - scsi: core: Improve scsi_vpd_inquiry() checks
  - scsi: megaraid_sas: Fix fw_crash_buffer_show()
  - selftests: sigaltstack: fix -Wuninitialized
  - Input: i8042 - add quirk for Fujitsu Lifebook A574/H
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event
  - e1000e: Disable TSO on i219-LM card to increase speed
  - mlxsw: pci: Fix possible crash during initialization
  - net: rpl: fix rpl header size calculation
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()
  - i40e: fix i40e_setup_misc_vector() error handling
  - i40e: fix accessing vsi->active_filters without holding lock
  - netfilter: nf_tables: fix ifdef to also consider nf_tables=m
  - sfc: Fix use-after-free due to selftest_work
  - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP.
  - virtio_net: bugfix overflow inside xdp_linearize_page()
  - regulator: fan53555: Explicitly include bits header
  - netfilter: br_netfilter: fix recent physdev match breakage
  - arm64: dts: imx8mm-evk: correct pmic clock source
  - arm64: dts: meson-g12-common: specify full DMC range
  - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node
  - !2724 [22.03-LTS-SP2]Backport 5.10.178 LTS patches from upstream
  - sysctl: Fix data-races in proc_dou8vec_minmax().
  - panic, kexec: make __crash_kexec() NMI safe
  - kexec: turn all kexec_mutex acquisitions into trylocks
  - kexec: move locking into do_kexec_load
  - riscv: Handle zicsr/zifencei issues between clang and binutils
  - kbuild: check CONFIG_AS_IS_LLVM instead of LLVM_IAS
  - kbuild: Switch to 'f' variants of integrated assembler flag
  - kbuild: check the minimum assembler version in Kconfig
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
  - i2c: ocores: generate stop condition after timeout in polling mode
  - x86/rtc: Remove __init for runtime functions
  - sched/fair: Fix imbalance overflow
  - sched/fair: Move calculate of avg_load to a better location
  - powerpc/papr_scm: Update the NUMA distance table for the target node
  - powerpc/pseries: Add support for FORM2 associativity
  - powerpc/pseries: Add a helper for form1 cpu distance
  - powerpc/pseries: Consolidate different NUMA distance update code paths
  - powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY
  - powerpc/pseries: rename min_common_depth to primary_domain_index
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
  - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
  - scsi: ses: Handle enclosure with just a primary component gracefully
  - net: sfp: initialize sfp->i2c_block_size at sfp allocation
  - riscv: add icache flush for nommu sigreturn trampoline
  - asymmetric_keys: log on fatal failures in PE/pkcs7
  - verify_pefile: relax wrapper length check
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message
  - wifi: mwifiex: mark OF related data as maybe unused
  - power: supply: cros_usbpd: reclassify "default case!" as debug
  - libbpf: Fix single-line struct definition output in btf_dump
  - net: macb: fix a memory corruption in extended buffer descriptor mode
  - udp6: fix potential access to stale information
  - RDMA/core: Fix GID entry ref leak when create_ah fails
  - sctp: fix a potential overflow in sctp_ifwdtsn_skip
  - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
  - qlcnic: check pci_reset_function result
  - drm/armada: Fix a potential double free in an error handling path
  - sysctl: add proc_dou8vec_minmax()
  - niu: Fix missing unwind goto in niu_alloc_channels()
  - RDMA/cma: Allow UD qp_type to join multicast only
  - IB/mlx5: Add support for 400G_8X lane speed
  - IB/mlx5: Add support for NDR link speed
  - clk: sprd: set max_register according to mapping range
  - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min
  - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  - mtd: rawnand: meson: fix bitmask for length in command word
  - mtdblock: tolerate corrected bit-flips
  - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
  - btrfs: fix fast csum implementation detection
  - btrfs: print checksum type and implementation at mount time
  - Bluetooth: Fix race condition in hidp_session_thread
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
  - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
  - ALSA: emu10k1: fix capture interrupt handler unlinking
  - Revert "pinctrl: amd: Disable and mask interrupts on resume"
  - bpftool: Print newline before '}' for struct with padding only fields
  - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
  - Revert "media: ti: cal: fix possible memory leak in cal_ctx_create()"
  - drm/bridge: lt9611: Fix PLL being unable to lock
  - selftests: intel_pstate: ftime() is deprecated
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
  - drm/nouveau/disp: Support more modes by checking with lower bpc
  - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  - ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
  - tracing: Free error logs of tracing instances
  - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
  - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
  - ftrace: Mark get_lock_parent_ip() __always_inline
  - perf/core: Fix the same task check in perf_event_set_output
  - iio: adc: ad7791: fix IRQ flags
  - ALSA: hda/realtek: Add quirk for Clevo X370SNW
  - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  - nilfs2: fix sysfs interface lifetime
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
  - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
  - tty: serial: sh-sci: Fix transmit end interrupt handler
  - iio: light: cm32181: Unregister second I2C client if present
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  - USB: serial: option: add Quectel RM500U-CN modem
  - USB: serial: option: add Telit FE990 compositions
  - usb: typec: altmodes/displayport: Fix configure initial pin assignment
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
  - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
  - usb: xhci: tegra: fix sleep in atomic call
  - NFSD: callback request does not use correct credential for AUTH_SYS
  - sunrpc: only free unix grouplist after RCU settles
  - net: stmmac: fix up RX flow hash indirection table when setting channels
  - net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe
  - gpio: davinci: Add irq chip flag to skip set wake
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb()
  - net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
  - sctp: check send stream number after wait_for_sndbuf
  - net: don't let netpoll invoke NAPI if in xmit context
  - icmp: guard against too small mtu
  - net: qrtr: Fix a refcount bug in qrtr_recvmsg()
  - net: qrtr: combine nameservice into main module
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta
  - KVM: s390: pv: fix external interruption loop not always detected
  - pwm: sprd: Explicitly set .polarity in .get_state()
  - pwm: cros-ec: Explicitly set .polarity in .get_state()
  - Drivers: vmbus: Check for channel allocation before looking up relids
  - gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  - !2703 [sync] PR-2672:  fix CVE-2023-46813
  - !2711 [sync] PR-2465: Backport 5.10.177 LTS patches from upstream
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - hsr: ratelimit only when errors are printed
  - gfs2: Always check inode size of inline inodes
  - libbpf: Fix btf_dump's packed struct determination
  - selftests/bpf: Add few corner cases to test padding handling of btf_dump
  - libbpf: Fix BTF-to-C converter's padding logic
  - selftests/bpf: Test btf dump for struct with padding only fields
  - zonefs: Fix error message in zonefs_file_dio_append()
  - btrfs: scan device in non-exclusive mode
  - s390/uaccess: add missing earlyclobber annotations to __clear_user()
  - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  - drm/etnaviv: fix reference leak when mmaping imported buffer
  - rcu: Fix rcu_torture_read ftrace event
  - xtensa: fix KASAN report for show_stack
  - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo
  - NFSv4: Fix hangs when recovering open state after a server reboot
  - powerpc: Don't try to copy PPR for task with NULL pt_regs
  - pinctrl: at91-pio4: fix domain name assignment
  - pinctrl: amd: Disable and mask interrupts on resume
  - net: phy: dp83869: fix default value for tx-/rx-internal-delay
  - xen/netback: don't do grant copy across page boundary
  - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
  - cifs: prevent infinite recursion in CIFSGetDFSRefer()
  - Input: focaltech - use explicitly signed char type
  - Input: alps - fix compatibility with -funsigned-char
  - pinctrl: ocelot: Fix alt mode for ocelot
  - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
  - bnxt_en: Add missing 200G link speed reporting
  - bnxt_en: Fix typo in PCI id to device description string mapping
  - i40e: fix registers dump after run ethtool adapter self test
  - net: ipa: compute DMA pool size properly
  - ALSA: ymfpci: Fix BUG_ON in probe function
  - ALSA: ymfpci: Fix assignment in if condition
  - s390/vfio-ap: fix memory leak in vfio_ap device driver
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
  - net: stmmac: don't reject VLANs when IFF_PROMISC is set
  - net/net_failover: fix txq exceeding warning
  - regulator: Handle deferred clk
  - r8169: fix RTL8168H and RTL8107E rx crc error
  - ptp_qoriq: fix memory leak in probe()
  - scsi: megaraid_sas: Fix crash after a double completion
  - sfc: ef10: don't overwrite offload features at NIC reset
  - mtd: rawnand: meson: invalidate cache on polling ECC bit
  - mips: bmips: BCM6358: disable RAC flush for TP1
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
  - tracing: Fix wrong return in kprobe_event_gen_test.c
  - tools/power turbostat: Fix /dev/cpu_dma_latency warnings
  - fbdev: au1200fb: Fix potential divide by zero
  - fbdev: lxfb: Fix potential divide by zero
  - fbdev: intelfb: Fix potential divide by zero
  - fbdev: nvidia: Fix potential divide by zero
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
  - fbdev: tgafb: Fix potential divide by zero
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  - ALSA: asihpi: check pao in control_message()
  - net: hsr: Don't log netdev_err message on unknown prp dst node
  - md: avoid signed overflow in slot_store()
  - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
  - dm crypt: avoid accessing uninitialized tasklet
  - bus: imx-weim: fix branch condition evaluates to a garbage value
  - drm/meson: fix missing component unbind on bind errors
  - drm/meson: Fix error handling when afbcd.ops->init fails
  - kcsan: avoid passing -g for test
  - kernel: kcsan: kcsan_test: build without structleak plugin
  - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC
  - usb: dwc3: gadget: move cmd_endtransfer to extra function
  - NFSD: fix use-after-free in __nfs42_ssc_open()
  - KVM: fix memoryleak in kvm_init()
  - ocfs2: fix data corruption after failed write
  - sched/fair: Sanitize vruntime of entity being migrated
  - sched/fair: sanitize vruntime of entity being placed
  - firmware: arm_scmi: Fix device node validation for mailbox transport
  - tee: amdtee: fix race condition in amdtee_open_session
  - drm/i915: Preserve crtc_state->inherited during state clearing
  - drm/i915/active: Fix missing debug object activation
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
  - wifi: mac80211: fix qos on mesh interfaces
  - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
  - usb: chipidea: core: fix possible concurrent when switch role
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role
  - usb: cdns3: Fix issue with using incorrect PCI device function
  - igb: revert rtnl_lock() that causes deadlock
  - fsverity: Remove WQ_UNBOUND from fsverity read workqueue
  - usb: gadget: u_audio: don't let userspace block driver unbind
  - usb: dwc2: fix a devres leak in hw_enable upon suspend resume
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
  - cifs: empty interface list when server doesn't support query interfaces
  - sh: sanitize the flags on sigreturn
  - net: usb: qmi_wwan: add Telit 0x1080 composition
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
  - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
  - scsi: lpfc: Avoid usage of list iterator variable after loop
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand
  - scsi: hisi_sas: Check devm_add_action() return value
  - scsi: target: iscsi: Fix an error message in iscsi_check_key()
  - selftests/bpf: check that modifier resolves after pointer
  - m68k: Only force 030 bus error if PC not in exception table
  - ca8210: fix mac_len negative array access
  - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
  - riscv: Bump COMMAND_LINE_SIZE value to 1024
  - thunderbolt: Use const qualifier for `ring_interrupt_index`
  - thunderbolt: Use scale field when allocating USB3 bandwidth
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
  - scsi: qla2xxx: Perform lockless command completion in abort path
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
  - hwmon: fix potential sensor registration fail if of_node is missing
  - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
  - Bluetooth: L2CAP: Fix responding with wrong PDU type
  - Bluetooth: L2CAP: Fix not checking for maximum number of DCID
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address
  - net: mdio: thunder: Add missing fwnode_handle_put()
  - gve: Cache link_speed value from device
  - nvme-tcp: fix nvme_tcp_term_pdu to match spec
  - net/sonic: use dma_mapping_error() for error check
  - erspan: do not use skb_mac_header() in ndo_start_xmit()
  - atm: idt77252: fix kmemleak when rmmod idt77252
  - net/mlx5: E-Switch, Fix an Oops in error handling code
  - net/mlx5: Read the TC mapping of all priorities on ETS query
  - net/mlx5: Fix steering rules cleanup
  - bpf: Adjust insufficient default bpf_jit_limit
  - keys: Do not cache key in task struct if key is requested from kernel thread
  - bootconfig: Fix testcase to increase max node
  - net/ps3_gelic_net: Use dma_mapping_error
  - net/ps3_gelic_net: Fix RX sk_buff length
  - net: phy: Ensure state transitions are processed from phy_stop()
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
  - net: usb: smsc95xx: Limit packet length to skb->len
  - i2c: imx-lpi2c: check only for enabled interrupt flags
  - igc: fix the validation logic for taprio's gate list
  - igbvf: Regard vf reset nack as success
  - intel/igbvf: free irq on the error path in igbvf_request_msix()
  - iavf: fix non-tunneled IPv6 UDP packet type and hashing
  - iavf: fix inverted Rx hash condition leading to disabled hash
  - xsk: Add missing overflow check in xdp_umem_reg
  - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
  - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl
  - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - drm/sun4i: fix missing component unbind on bind errors
  - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it
  - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED
  - tty: serial: fsl_lpuart: fix race on RX DMA shutdown
  - serial: fsl_lpuart: Fix comment typo
  - KVM: Register /dev/kvm as the _very_ last thing during initialization
  - KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except()
  - KVM: Optimize kvm_make_vcpus_request_mask() a bit
  - KVM: KVM: Use cpumask_available() to check for NULL cpumask when kicking vCPUs
  - KVM: Clean up benign vcpu->cpu data races when kicking vCPUs
  - ipmi:ssif: Add a timer between request retries
  - ipmi:ssif: resend_msg() cannot fail
  - ipmi:ssif: Increase the message retry time
  - ipmi:ssif: make ssif_i2c_send() void
  - interconnect: qcom: osm-l3: fix icc_onecell_data allocation
  - !2700 [22.03-LTS-SP2]Backport 5.10.176 LTS patches from upstream.
  - !2646 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
  - x86/sev: Check for user-space IOIO pointing to kernel space
  - x86/sev: Check IOBM for IOIO exceptions from user-space
  - x86/sev: Disable MMIO emulation from user mode
  - HID: uhid: Over-ride the default maximum data buffer value with our own
  - HID: core: Provide new max_buffer_size attribute to over-ride the default
  - fs: use consistent setgid checks in is_sxid()
  - attr: add in_group_or_capable()
  - fs: move S_ISGID stripping into the vfs_*() helpers
  - fs: add mode_strip_sgid() helper
  - PCI/DPC: Await readiness of secondary bus after reset
  - PCI: Unify delay handling for reset and resume
  - s390/ipl: add missing intersection check to ipl_report handling
  - drm/i915/active: Fix misuse of non-idle barriers as fence trackers
  - drm/i915: Don't use stolen memory for ring buffers with LLC
  - x86/mm: Fix use of uninitialized buffer in sme_enable()
  - x86/mce: Make sure logged MCEs are processed after sysfs update
  - cpuidle: psci: Iterate backwards over list in psci_pd_remove()
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
  - mmc: sdhci_am654: lower power-on failed message severity
  - mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
  - mptcp: avoid setting TCP_CLOSE state twice
  - drm/shmem-helper: Remove another errant put in error path
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
  - ALSA: hda: intel-dsp-config: add MTL PCI id
  - cifs: Fix smb2_set_path_size()
  - tracing: Make tracepoint lockdep check actually test something
  - tracing: Check field value in hist_field_name()
  - tracing: Make splice_read available again
  - interconnect: fix mem leak when freeing nodes
  - firmware: xilinx: don't make a sleepable memory allocation from an atomic context
  - serial: 8250_em: Fix UART port type
  - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted
  - ext4: fix possible double unlock when moving a directory
  - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
  - sh: intc: Avoid spurious sizeof-pointer-div warning
  - drm/amdkfd: Fix an illegal memory access
  - ext4: fix task hung in ext4_xattr_delete_inode
  - ext4: fail ext4_iget if special inode unallocated
  - jffs2: correct logic when creating a hole in jffs2_write_begin
  - mmc: atmel-mci: fix race between stop command and start of next command
  - media: m5mols: fix off-by-one loop termination error
  - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip
  - hwmon: tmp512: drop of_match_ptr for ID table
  - hwmon: (ucd90320) Add minimum delay between bus accesses
  - hwmon: (ina3221) return prober error code
  - hwmon: (adt7475) Fix masking of hysteresis registers
  - hwmon: (adt7475) Display smoothing attributes in correct order
  - ethernet: sun: add check for the mdesc_grab()
  - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
  - selftests: net: devlink_port_split.py: skip test if no suitable device available
  - net/iucv: Fix size of interrupt data
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
  - ipv4: Fix incorrect table ID in IOCTL path
  - net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
  - ice: xsk: disable txq irq before flushing hw
  - block: sunvdc: add check for mdesc_grab() returning NULL
  - nvmet: avoid potential UAF in nvmet_req_complete()
  - nvme: fix handling single range discard request
  - block: null_blk: Fix handling of fake timeout request
  - null_blk: Move driver into its own directory
  - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc
  - net: usb: smsc75xx: Limit packet length to skb->len
  - net/smc: fix deadlock triggered by cancel_delayed_work_syn()
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
  - net: tunnels: annotate lockless accesses to dev->needed_headroom
  - qed/qed_dev: guard against a possible division by zero
  - net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode
  - ipvlan: Make skb->skb_iif track skb->dev for l3s mode
  - nfc: pn533: initialize struct pn533_out_arg properly
  - tcp: tcp_make_synack() can be called from process context
  - scsi: core: Fix a procfs host directory removal regression
  - scsi: core: Fix a comment in function scsi_host_dev_release()
  - netfilter: nft_redir: correct value of inet type `.maxattrs`
  - netfilter: nft_redir: correct length for loading protocol registers
  - netfilter: nft_masq: correct length for loading protocol registers
  - netfilter: nft_nat: correct length for loading protocol registers
  - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
  - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - docs: Correct missing "d_" prefix for dentry_operations member d_weak_revalidate
  - clk: HI655X: select REGMAP instead of depending on it
  - drm/meson: fix 1px pink line on GXM when scaling video overlay
  - cifs: Move the in_send statistic to __smb_send_rqst()
  - drm/panfrost: Don't sync rpm suspension after mmu flushing
  - xfrm: Allow transport-mode states with AF_UNSPEC selector
  - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.33.0.110
changelog:
  - !2858 [sync] PR-2851:  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: dvbdev: fix error logic at dvb_register_device()
  - media: dvbdev: Fix memleak in dvb_register_device
  - !2848 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
  - drm/qxl: fix UAF on handle creation
  - !2832 [22.03-LTS-SP2]Backport 5.10.180 LTS patches from upstream.
  - !2518 [sync] PR-2501:  scsi: mpt3sas: Perform additional retries if doorbell read returns 0
  - ext4: fix data races when using cached status extents
  - drm/amd/display: Fix hang when skipping modeset
  - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
  - KVM: x86: move guest_pv_has out of user_access section
  - KVM: x86: do not report preemption if the steal time cache is stale
  - KVM: x86: revalidate steal time cache if MSR value changes
  - KVM: x86: do not set st->preempted when going back to user space
  - KVM: x86: Remove obsolete disabling of page faults in kvm_arch_vcpu_put()
  - KVM: Fix steal time asm constraints
  - KVM: x86: Fix recording of guest steal time / preempted status
  - KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
  - drbd: correctly submit flush bio on barrier
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa()
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason
  - ext4: add bounds checking in get_max_inline_xattr_value_size()
  - ext4: fix deadlock when converting an inline directory in nojournal mode
  - ext4: improve error recovery code paths in __ext4_remount()
  - KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL
  - HID: wacom: insert timestamp to packed Bluetooth (BT) events
  - HID: wacom: Set a default resolution for older tablets
  - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
  - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
  - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  - drm/panel: otm8009a: Set backlight parent to panel device
  - f2fs: fix potential corruption when moving a directory
  - ARM: dts: s5pv210: correct MIPI CSIS clock name
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite
  - remoteproc: st: Call of_node_put() on iteration error
  - remoteproc: stm32: Call of_node_put() on iteration error
  - sh: nmi_debug: fix return value of __setup handler
  - sh: init: use OF_EARLY_FLATTREE for early init
  - sh: mcount.S: fix build error when PRINTK is not enabled
  - sh: math-emu: fix macro redefined warning
  - inotify: Avoid reporting event with invalid wd
  - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
  - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet
  - cifs: fix pcchunk length type in smb2_copychunk_range
  - btrfs: print-tree: parent bytenr must be aligned to sector size
  - btrfs: don't free qgroup space unless specified
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id()
  - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
  - perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents
  - perf vendor events power9: Remove UTF-8 characters from JSON files
  - net: enetc: check the index of the SFI rather than the handle
  - virtio_net: suppress cpu stall when free_unused_bufs
  - virtio_net: split free_unused_bufs()
  - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
  - drm/amdgpu: add a missing lock for AMDGPU_SCHED
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
  - ionic: remove noise from ethtool rxnfc error msg
  - octeontx2-vf: Detach LF resources on probe cleanup
  - octeontx2-pf: Disable packet I/O for graceful exit
  - rxrpc: Fix hard call timeout units
  - sfc: Fix module EEPROM reporting for QSFP modules
  - net/sched: act_mirred: Add carrier check
  - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
  - writeback: fix call of incorrect macro
  - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
  - net/sched: cls_api: remove block_cb from driver_list before freeing
  - net/ncsi: clear Tx enable mode when handling a Config required AEN
  - scsi: qedi: Fix use after free bug in qedi_remove()
  - dm verity: fix error handling for check_at_most_once on FEC
  - dm verity: skip redundant verity_handle_err() on I/O errors
  - mailbox: zynqmp: Fix counts of child nodes
  - mailbox: zynq: Switch to flexible array to simplify code
  - crypto: ccp - Clear PSP interrupt status register before calling handler
  - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  - tty: clean include/linux/tty.h up
  - tty: move some tty-only functions to drivers/tty/tty.h
  - tty: move some internal tty lock enums and functions out of tty.h
  - tty: audit: move some local functions out of tty.h
  - tty: create internal tty.h file
  - scsi: target: core: Avoid smp_processor_id() in preemptible code
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - sound/oss/dmasound: fix 'dmasound_setup' defined but not used
  - debugobject: Ensure pool refill (again)
  - arm64: Stash shadow stack pointer in the task struct on interrupt
  - arm64: Always load shadow stack pointer directly from the task struct
  - perf intel-pt: Fix CYC timestamps after standalone CBR
  - perf auxtrace: Fix address filter entire kernel size
  - dm flakey: fix a crash with invalid table line
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
  - dm clone: call kmem_cache_destroy() in dm_clone_init() error path
  - ia64: fix an addr to taddr in huge_pte_offset()
  - s390/dasd: fix hanging blockdevice after request requeue
  - btrfs: scrub: reject unsupported scrub flags
  - scripts/gdb: fix lx-timerlist for Python3
  - afs: Fix updating of i_size with dv jump from server
  - mfd: tqmx86: Correct board names for TQMxE39x
  - mfd: tqmx86: Specify IO port register range more precisely
  - mfd: tqmx86: Add support for TQMx110EB and TQMxE40x
  - mfd: tqmx86: Remove incorrect TQMx90UC board ID
  - mfd: tqmx86: Do not access I2C_DETECT register through io_base
  - thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe
  - dmaengine: at_xdmac: do not enable all cyclic channels
  - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
  - dmaengine: dw-edma: Fix to change for continuous transfer
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
  - pwm: mtk-disp: Disable shadow registers before setting backlight values
  - pwm: mtk-disp: Adjust the clocks to avoid them mismatch
  - pwm: mtk-disp: Don't check the return code of pwmchip_remove()
  - leds: tca6507: Fix error handling of using fwnode_property_read_string
  - dmaengine: mv_xor_v2: Fix an error code.
  - leds: TI_LMU_COMMON: select REGMAP instead of depending on it
  - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
  - openrisc: Properly store r31 to pt_regs on unhandled exceptions
  - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails
  - RDMA/mlx5: Use correct device num_ports when modify DC
  - SUNRPC: remove the maximum number of retries in call_bind_status
  - RDMA/mlx5: Fix flow counter query via DEVX
  - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  - input: raspberrypi-ts: Release firmware handle when not needed
  - firmware: raspberrypi: Introduce devm_rpi_firmware_get()
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
  - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
  - IB/hfi1: Add additional usdma traces
  - IB/hfi1: Add AIP tx traces
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
  - RDMA/srpt: Add a check for valid 'mad_agent' pointer
  - RDMA/cm: Trace icm_send_rej event before the cm state is reset
  - RDMA/siw: Remove namespace check from siw_netdev_event()
  - clk: add missing of_node_put() in "assigned-clocks" property parsing
  - power: supply: generic-adc-battery: fix unit scaling
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
  - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
  - rtc: omap: include header for omap_rtc_power_off_program prototype
  - workqueue: Fix hung time report of worker pools
  - RDMA/rdmavt: Delete unnecessary NULL check
  - RDMA/siw: Fix potential page_array out of range access
  - clk: at91: clk-sam9x60-pll: fix return value check
  - perf/core: Fix hardlockup failure caused by perf throttle
  - powerpc/rtas: use memmove for potentially overlapping buffer copy
  - macintosh: via-pmu-led: requires ATA to be set
  - powerpc/sysdev/tsi108: fix resource printk format warnings
  - powerpc/wii: fix resource printk format warnings
  - powerpc/mpc512x: fix resource printk format warning
  - macintosh/windfarm_smu_sat: Add missing of_node_put()
  - spmi: Add a check for remove callback when removing a SPMI driver
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  - serial: 8250: Add missing wakeup event reporting
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  - usb: mtu3: fix kernel panic at qmu transfer done irq handler
  - usb: chipidea: fix missing goto in `ci_hdrc_probe`
  - usb: gadget: tegra-xudc: Fix crash in vbus_draw
  - sh: sq: Fix incorrect element size for allocating bitmap buffer
  - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
  - spi: cadence-quadspi: fix suspend-resume implementations
  - ASoC: fsl_mqs: move of_node_put() to the correct location
  - coresight: etm_pmu: Set the module field
  - scripts/gdb: bail early if there are no generic PD
  - scripts/gdb: bail early if there are no clocks
  - ia64: salinfo: placate defined-but-not-used warning
  - ia64: mm/contig: fix section mismatch warning/error
  - PCI/EDR: Clear Device Status after EDR error recovery
  - of: Fix modalias string generation
  - vmci_host: fix a race condition in vmci_host_poll() causing GPF
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian
  - spi: qup: Don't skip cleanup in remove's error path
  - linux/vt_buffer.h: allow either builtin or modular for macros
  - ASoC: es8316: Handle optional IRQ assignment
  - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
  - PCI: imx6: Install the fault handler only on compatible match
  - spi: imx: Don't skip cleanup in remove's error path
  - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
  - iio: light: max44009: add missing OF device matching
  - fpga: bridge: fix kernel-doc parameter description
  - usb: dwc3: gadget: Change condition for processing suspend event
  - usb: host: xhci-rcar: remove leftover quirk handling
  - pstore: Revert pmsg_lock back to a normal mutex
  - ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
  - net: amd: Fix link leak when verifying config failed
  - netlink: Use copy_to_user() for optval in netlink_getsockopt().
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
  - net/sched: sch_fq: fix integer overflow of "credit"
  - bpf: Don't EFAULT for getsockopt with optval=NULL
  - ixgbe: Enable setting RSS table to default values
  - ixgbe: Allow flow hash to be set via ethtool
  - wifi: iwlwifi: fw: fix memory leak in debugfs
  - wifi: iwlwifi: mvm: check firmware response size
  - wifi: iwlwifi: make the loop for card preparation effective
  - jdb2: Don't refuse invalidation of already invalidated buffers
  - wifi: iwlwifi: fw: move memset before early return
  - wifi: iwlwifi: yoyo: Fix possible division by zero
  - md/raid10: fix memleak of md thread
  - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
  - nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
  - nvme: fix async event trace event
  - nvme: handle the persistent internal error AER
  - bpf, sockmap: fix deadlocks in the sockhash and sockmap
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
  - f2fs: fix to avoid use-after-free for cached IPU bio
  - xsk: Fix unaligned descriptor validation
  - bpftool: Fix bug for long instructions in program CFG dumps
  - selftests/bpf: Wait for receive in cg_storage_multi test
  - net: qrtr: correct types of trace event parameters
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
  - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
  - crypto: sa2ul - Select CRYPTO_DES
  - crypto: caam - Clear some memory in instantiate_rng
  - f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
  - f2fs: apply zone capacity to all zone type
  - f2fs: enforce single zone capacity
  - f2fs: handle dqget error in f2fs_transfer_project_quota()
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
  - scsi: target: iscsit: Fix TAS handling during conn cleanup
  - scsi: target: Fix multiple LUN_RESET handling
  - scsi: target: Make state_list per CPU
  - scsi: target: Rename cmd.bad_sector to cmd.sense_info
  - scsi: target: Rename struct sense_info to sense_detail
  - net/packet: convert po->auxdata to an atomic flag
  - net/packet: convert po->origdev to an atomic flag
  - net/packet: annotate accesses to po->xmit
  - vlan: partially enable SIOCSHWTSTAMP in container
  - bpf: Remove misleading spec_v1 check on var-offset stack read
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  - bpf: fix precision propagation verbose logging
  - bpf: take into account liveness when propagating precision
  - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
  - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
  - tools: bpftool: Remove invalid ' json escape
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
  - wifi: ath9k: hif_usb: fix memory leak of remain_skbs
  - wifi: ath6kl: minor fix for allocation size
  - tick/common: Align tick period with the HZ tick.
  - tick: Get rid of tick_period
  - drm/i915: Make intel_get_crtc_new_encoder() less oopsy
  - debugobject: Prevent init race with static objects
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
  - regulator: stm32-pwr: fix of_iomap leak
  - media: venus: dec: Fix handling of the start cmd
  - media: venus: vdec: Handle DRC after drain
  - media: venus: preserve DRC state across seeks
  - media: venus: vdec: Make decoder return LAST flag for sufficient event
  - media: venus: vdec: Fix non reliable setting of LAST flag
  - media: rc: gpio-ir-recv: Fix support for wake-up
  - media: rcar_fdp1: Fix refcount leak in probe and remove function
  - media: rcar_fdp1: Fix the correct variable assignments
  - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()
  - media: rcar_fdp1: fix pm_runtime_get_sync() usage count
  - media: rcar_fdp1: simplify error check logic at fdp_open()
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
  - regulator: core: Avoid lockdep reports when resolving supplies
  - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
  - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
  - ARM: dts: gta04: fix excess dma channel usage
  - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
  - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
  - drm: msm: adreno: Disable preemption on Adreno 510
  - drm/msm/adreno: drop bogus pm_runtime_set_active()
  - drm/msm/adreno: Defer enabling runpm until hw_init()
  - media: max9286: Free control handler
  - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
  - firmware: qcom_scm: Clear download bit during reboot
  - media: bdisp: Add missing check for create_workqueue
  - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
  - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K
  - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8996: Fix the PCI I/O port range
  - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
  - arm64: dts: qcom: msm8998: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: Fix the PCI I/O port range
  - arm64: dts: qcom: sdm845: correct dynamic power coefficients
  - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
  - EDAC/skx: Fix overflows on the DRAM row address mapping arrays
  - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources
  - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
  - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
  - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
  - soc: ti: pm33xx: Enable basic PM runtime support for genpd
  - drm/probe-helper: Cancel previous job before starting new one
  - drm/vgem: add missing mutex_destroy
  - drm/rockchip: Drop unbalanced obj unref
  - erofs: fix potential overflow calculating xattr_isize
  - erofs: stop parsing non-compact HEAD index if clusterofs is invalid
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
  - tpm, tpm: Implement usage counter for locality
  - tpm, tpm_tis: Claim locality before writing interrupt registers
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
  - tpm, tpm_tis: Do not skip reset of original interrupt vector
  - selinux: ensure av_permissions.h is built when needed
  - selinux: fix Makefile dependencies of flask.h
  - selftests/resctrl: Check for return value after write_schemata()
  - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
  - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
  - wifi: rtl8xxxu: RTL8192EU always needs full init
  - mailbox: zynqmp: Fix typo in IPI documentation
  - mailbox: zynqmp: Fix IPI isr handling
  - nilfs2: fix infinite loop in nilfs_mdt_get_block()
  - nilfs2: do not write dirty data after degenerating to read-only
  - parisc: Fix argument pointer in real64_call_asm()
  - sound/oss/dmasound: fix build when drivers are mixed =y/=m
  - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
  - i2c: omap: Fix standard mode false ACK readings
  - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  - crypto: safexcel - Cleanup ring IRQ workqueues on load failure
  - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
  - ring-buffer: Sync IRQ works before buffer destruction
  - pwm: meson: Fix g12a ao clk81 name
  - pwm: meson: Fix axg ao mux parents
  - kheaders: Use array declaration instead of char
  - ipmi: fix SSIF not responding under certain cond.
  - ipmi:ssif: Add send_retries increment
  - MIPS: fw: Allow firmware to pass a empty env
  - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
  - xhci: fix debugfs register accesses while suspended
  - staging: iio: resolver: ads1210: fix config mode
  - ext4: use ext4_journal_start/stop for fast commit transactions
  - blk-crypto: make blk_crypto_evict_key() more robust
  - blk-crypto: make blk_crypto_evict_key() return void
  - blk-mq: release crypto keyslot before reporting I/O complete
  - hwmon: (adt7475) Use device_property APIs when configuring polarity
  - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
  - USB: dwc3: fix runtime pm imbalance on unbind
  - USB: dwc3: fix runtime pm imbalance on probe errors
  - PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
  - wireguard: timers: cast enum limits members to int in prints
  - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod
  - driver core: Don't require dynamic_debug for initcall_debug probe timing
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product
  - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  - KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
  - !2802 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.34.0.111
changelog:
  - !2999 [sync] PR-2902:  net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !1722 [sync] PR-1597: Fix the bugs of 3SNIC driver compilation failure while using clang
  - !2904 [sync] PR-2867:  netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !3012  config: update openeuler_defconfig for x86 with gcc 10.3.1
  - config: update openeuler_defconfig for x86 with gcc 10.3.1
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
  - !2974 Add script to check & update openeuler_defconfig
  - config: update openeuler_defconfig for arm64
  - config: update openeuler_defconfig for x86
  - kconfig: Add script to check & update openeuler_defconfig
  - Revert "kconfig: Add script to update openeuler_defconfig"
  - !2433 [sync] PR-2326: fix CVE-2023-20569
  - !1564 [sync] PR-1527:  arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - !2910 [sync] PR-1613:  arm64/mpam: implement CPU_PM notifier
  - !2044 [sync] PR-1327:  Huawei BMA: To fix the bug in the iBMA driver code
  - !1898 [sync] PR-1853:  ring-buffer: Fix deadloop issue on reading trace_pipe
  - !1943 [sync] PR-1900:  tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - !1985 [sync] PR-1905:  tracing: Fix memleak due to race between current_tracer and trace
  - !2654 [sync] PR-2377:  tracing: Backport bugfixes
  - !2931 revert: : ab873cbbab39 x86/microcode: Rip out the OLD_INTERFACE
  - !1741 [sync] PR-1734:  arm64/mpam: mark partid non-exclusive if self-owned
  - !2901  mm/hugetlb: fix parameter passed to allocate bootmem memory
  - !1403 [sync] PR-1399:  bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - Revert "x86/microcode: Rip out the OLD_INTERFACE"
  - !2635 [sync] PR-2615:  preempt/dynamic: Fix setup_preempt_mode() return value
  - !1810 [sync] PR-1768:  bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - !2813 [sync] PR-2716:  ext4: recheck buffer valid after page unlock
  - !1410 [sync] PR-1353:  ubifs mainline bugfix patch backport
  - !1373 [sync] PR-1354:  ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - !892 [sync] PR-886:  net: sched: fix NULL pointer dereference in mq_attach
  - !902 [sync] PR-890:  ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - !2021 [sync] PR-1965:  crypto:padata: Fix return err for PADATA_RESET
  - arm64/mpam: implement CPU_PM notifier
  - !1514 [sync] PR-1357:  SUNRPC: Ensure that the gssproxy client can start in a connected state
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  - !2750 [sync] PR-2683:  fix memcgv1 oom meminfo bug
  - mm/hugetlb: fix parameter passed to allocate bootmem memory
  - ext4: recheck buffer valid after page unlock
  - memcg: dump memory.stat during cgroup OOM for v1
  - memcg: use seq_buf_do_printk() with mem_cgroup_print_oom_meminfo()
  - seq_buf: Add seq_buf_do_printk() helper
  - seq_buf: Add seq_buf_terminate() API
  - ring-buffer: Do not attempt to read past "commit"
  - ring-buffer: Do not swap cpu_buffer during resize process
  - preempt/dynamic: Fix setup_preempt_mode() return value
  - kabi: Allow extra bugsints (bsc#1213927).
  - x86/cpufeatures: Fix abi breakage caused by NCAPINTS in cpufeature header file.
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - objtool/x86: Fix SRSO mess
  - x86/srso: Correct the mitigation status when SMT is disabled
  - objtool/x86: Fixup frame-pointer vs rethunk
  - x86/srso: Disable the mitigation on unaffected configurations
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
  - x86/cpu: Cleanup the untrain mess
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_1
  - x86/cpu: Rename original retbleed methods
  - x86/cpu: Clean up SRSO return thunk mess
  - x86/alternative: Make custom return thunk unconditional
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
  - x86/cpu: Fix __x86_return_thunk symbol type
  - x86/ibt: Add ANNOTATE_NOENDBR
  - objtool: Add frame-pointer-specific function ignore
  - x86/srso: Fix build breakage with the LLVM linker
  - x86/srso: Tie SBPB bit setting to microcode patch detection
  - x86/srso: Fix return thunks in generated code
  - x86/srso: Add IBPB on VMEXIT
  - x86/srso: Add IBPB
  - x86/srso: Add SRSO_NO support
  - x86/srso: Add IBPB_BRTYPE support
  - x86/srso: Add a Speculative RAS Overflow mitigation
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX
  - x86/bugs: Increase the x86 bugs vector size to two u32s
  - tools headers cpufeatures: Sync with the kernel sources
  - Huawei BMA: To fix the bug in the iBMA driver code
  - crypto:padata: Fix return err for PADATA_RESET
  - tracing: Fix memleak due to race between current_tracer and trace
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
  - ring-buffer: Fix deadloop issue on reading trace_pipe
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
  - arm64/mpam: mark partid non-exclusive if self-owned
  - Fix the bugs of 3SNIC driver compilation failure while using clang
  - arm64/mpam: fix missing kfree domain's ctrl_val arrray
  - SUNRPC: Ensure that the gssproxy client can start in a connected state
  - ubi: Fix return value overwrite issue in try_write_vid_and_data()
  - ubifs: Fix memory leak in do_rename
  - ubifs: Free memory for tmpfile name
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem
  - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
  - net: sched: fix NULL pointer dereference in mq_attach


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.35.0.112
changelog:
  - !3195 [sync] PR-3128:  fix ksmbd to release the ones allocated for async work
  - !3003 [sync] PR-1656:  Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - ksmbd: delete asynchronous work from list
  - ksmbd: fix typo, syncronous->synchronous
  - ksmbd: fix possible memory leak in smb2_lock()
  - ksmbd: replace usage of found with dedicated list iterator variable
  - !3105 [sync] PR-3082:  fs/dirty_pages: add last read check in seq_read_dirty()
  - !3167 [sync] PR-3152:  scsi: scsi_device_gets returns failure
  - scsi: fix kabi broken in struct Scsi_Host
  - scsi: don't fail if hostt->module is NULL
  - scsi: scsi_device_gets returns failure when the module is NULL.
  - !3143 [sync] PR-2970:  Add error handle for add_disk
  - !3146 [22.03-LTS-SP2] 5.10.185 - 5.10.187 LTS补丁回合
  - x86/microcode/AMD: Load late on both threads too
  - bpf/btf: Accept function names that contain dots
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
  - drm/exynos: vidi: fix a wrong error return
  - ARM: dts: Fix erroneous ADS touchscreen polarities
  - s390/purgatory: disable branch profiling
  - ASoC: nau8824: Add quirk to active-high jack-detect
  - ASoC: simple-card: Add missing of_node_put() in case of error
  - spi: lpspi: disable lpspi module irq in DMA mode
  - s390/cio: unregister device when the only path is gone
  - Input: soc_button_array - add invalid acpi_index DMI quirk handling
  - usb: gadget: udc: fix NULL dereference in remove()
  - nfcsim.c: Fix error checking for debugfs_create_dir
  - media: cec: core: don't set last_initiator if tx in progress
  - arm64: Add missing Set/Way CMO encodings
  - HID: wacom: Add error check to wacom_parse_and_register()
  - scsi: target: iscsi: Prevent login threads from racing between each other
  - gpiolib: Fix GPIO chip IRQ initialization restriction
  - gpio: Allow per-parent interrupt data
  - sch_netem: acquire qdisc lock in netem_change()
  - Revert "net: phy: dp83867: perform soft reset and retain established link"
  - netfilter: nfnetlink_osf: fix module autoload
  - netfilter: nf_tables: disallow element updates of bound anonymous sets
  - netfilter: nft_set_pipapo: .walk does not deal with generations
  - be2net: Extend xmit workaround to BE3 chip
  - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
  - ipvs: align inner_mac_header for encapsulation
  - mmc: usdhi60rol0: fix deferred probing
  - mmc: sh_mmcif: fix deferred probing
  - mmc: sdhci-acpi: fix deferred probing
  - mmc: owl: fix deferred probing
  - mmc: omap_hsmmc: fix deferred probing
  - mmc: omap: fix deferred probing
  - mmc: mvsdio: fix deferred probing
  - mmc: mtk-sd: fix deferred probing
  - net: qca_spi: Avoid high load if QCA7000 is not available
  - xfrm: Linearize the skb after offloading if needed.
  - selftests: net: fcnal-test: check if FIPS mode is enabled
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos
  - xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
  - bpf: Fix verifier id tracking of scalars on spill
  - bpf: track immediate values written to stack by BPF_ST instruction
  - xfrm: Ensure policies always checked on XFRM-I input path
  - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
  - ieee802154: hwsim: Fix possible memory leaks
  - memfd: check for non-NULL file_seals in memfd_create() syscall
  - x86/mm: Avoid using set_pgd() outside of real PGD pages
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
  - io_uring/net: disable partial retries for recvmsg with cmsg
  - io_uring/net: clear msg_controllen on partial sendmsg retry
  - io_uring/net: save msghdr->msg_control for retries
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template
  - regmap: spi-avmm: Fix regmap_bus max_raw_write
  - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
  - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
  - mmc: mmci: stm32: fix max busy timeout calculation
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context
  - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
  - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
  - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
  - Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations()
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
  - nilfs2: fix buffer corruption due to concurrent device reads
  - selftests: mptcp: join: skip check if MIB counter not supported
  - selftests: mptcp: pm nl: remove hardcoded default limits
  - selftests: mptcp: lib: skip if not below kernel version
  - selftests: mptcp: lib: skip if missing symbol
  - tick/common: Align tick period during sched_timer setup
  - tracing: Add tracing_reset_all_online_cpus_unlocked() function
  - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
  - drm/amd/display: fix the system hang while disable PSR
  - um: Fix build w/o CONFIG_PM_SLEEP
  - drm/i915/gen11+: Only load DRAM information from pcode
  - drm/i915/dg1: Wait for pcode/uncore handshake at startup
  - nilfs2: reject devices with insufficient block count
  - mmc: block: ensure error propagation for non-blk
  - batman-adv: Switch to kstrtox.h for kstrtou64
  - neighbour: delete neigh_lookup_nodev as not used
  - net: Remove unused inline function dst_hold_and_use()
  - neighbour: Remove unused inline function neigh_key_eq16()
  - rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
  - afs: Fix vlserver probe RTT handling
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  - net: tipc: resize nlattr array to correct size
  - net: lapbether: only support ethernet devices
  - net/sched: cls_api: Fix lockup on flushing explicitly created chain
  - ext4: drop the call to ext4_error() from ext4_get_group_info()
  - drm/nouveau: add nv_encoder pointer check for NULL
  - drm/nouveau/dp: check for NULL nv_connector->native_mode
  - drm/nouveau: don't detect DSM for non-NVIDIA device
  - igb: fix nvm.ops.read() error handling
  - sctp: fix an error code in sctp_sf_eat_auth()
  - ipvlan: fix bound dev checking for IPv6 l3s mode
  - IB/isert: Fix incorrect release of isert connection
  - IB/isert: Fix possible list corruption in CMA handler
  - IB/isert: Fix dead lock in ib_isert
  - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
  - RDMA/cma: Always set static rate to 0 for RoCE
  - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
  - octeontx2-af: fixed resource availability check
  - iavf: remove mask from iavf_irq_enable_queues()
  - RDMA/rxe: Fix the use-before-initialization error of resp_pkts
  - RDMA/rxe: Removed unused name from rxe_task struct
  - RDMA/rxe: Remove the unused variable obj
  - ping6: Fix send to link-local addresses with VRF.
  - net: enetc: correct the indexes of highest and 2nd highest TCs
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
  - spi: fsl-dspi: avoid SCK glitches with continuous transfers
  - RDMA/rtrs: Fix the last iu->buf leak in err path
  - usb: dwc3: gadget: Reset num TRBs before giving back the request
  - serial: lantiq: add missing interrupt ack
  - USB: serial: option: add Quectel EM061KGL series
  - ALSA: hda/realtek: Add a quirk for Compaq N14JP6
  - net: usb: qmi_wwan: add support for Compal RXM-G1
  - RDMA/uverbs: Restrict usage of privileged QKEYs
  - nouveau: fix client work fence deletion race
  - powerpc/purgatory: remove PGO flags
  - x86/purgatory: remove PGO flags
  - kexec: support purgatories with .text.hot sections
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
  - nios2: dts: Fix tse_mac "max-frame-size" property
  - ocfs2: check new file size on fallocate call
  - ocfs2: fix use-after-free when unmounting read-only filesystem
  - epoll: ep_autoremove_wake_function should use list_del_init_careful
  - irqchip/gic: Correctly validate OF quirk descriptors
  - drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  - xen/blkfront: Only check REQ_FUA for writes
  - ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  - mips: Move initrd_start check after initrd address sanitisation.
  - MIPS: Alchemy: fix dbdma2
  - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
  - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
  - ASoC: soc-pcm: test if a BE can be prepared
  - btrfs: handle memory allocation failure in btrfs_csum_one_bio
  - btrfs: scrub: try harder to mark RAID56 block groups read-only
  - power: supply: Fix logic checking if system is running from battery
  - irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
  - regulator: Fix error checking for debugfs_create_dir
  - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
  - power: supply: Ratelimit no data debug output
  - tools: gpio: fix debounce_period_us output of lsgpio
  - ARM: dts: vexpress: add missing cache properties
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()
  - power: supply: sc27xx: Fix external_power_changed race
  - power: supply: ab8500: Fix external_power_changed race
  - test_firmware: fix a memory leak with reqs buffer
  - test_firmware: prevent race conditions by a correct implementation of locking
  - test_firmware: Use kstrtobool() instead of strtobool()
  - kernel.h: split out kstrtox() and simple_strtox() to a separate header
  - lib: cleanup kstrto*() usage
  - block: Set memalloc_noio to false in the error path
  - block: Fix minor range check in device_add_disk()
  - block: clear ->slave_dir when dropping the main slave_dir reference
  - block: call blk_get_queue earlier in __device_add_disk
  - block: check minor range in device_add_disk()
  - block: fix memory leak for elevator on add_disk failure
  - block: Fix the kabi change on blk_register_region
  - block: Fix the kabi change in device_add_disk
  - block: fix error unwinding in device_add_disk
  - block: fix device_add_disk() kobject_create_and_add() error handling
  - block: add error handling for device_add_disk / add_disk
  - block: return errors from blk_register_region
  - block: add the events* attributes to disk_attrs
  - block: return errors from disk_alloc_events
  - block: return errors from blk_integrity_add
  - block: call blk_integrity_add earlier in device_add_disk
  - block: fold register_disk into device_add_disk
  - !1812 [sync] PR-1724: Net: ethernet: Support management channel of the host tool in 3snic 3s9xx network driver
  - !3086 [sync] PR-2938: Backport 5.10.183 - 5.10.184 LTS patches from upstream
  - fs/dirty_pages: add last read check in seq_read_dirty()
  - !3077 [sync] PR-3020:  fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - !3080 [sync] PR-3022:  fs/dirty_pages: fix some errors in seq_read_dirty()
  - Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE"
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
  - btrfs: check return value of btrfs_commit_transaction in relocation
  - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
  - MIPS: locking/atomic: Fix atomic{_64,}_sub_if_positive
  - tcp: fix tcp_min_tso_segs sysctl
  - ext4: only check dquot_initialize_needed() when debugging
  - Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled"
  - vhost: support PACKED when setting-getting vring_base
  - riscv: fix kprobe __user string arg print fault issue
  - eeprom: at24: also select REGMAP
  - i2c: sprd: Delete i2c adapter in .remove's error path
  - ASoC: codecs: wsa881x: do not set can_multi_write flag
  - staging: vc04_services: fix gcc-13 build warning
  - usb: usbfs: Use consistent mmap functions
  - usb: usbfs: Enforce page requirements for mmap
  - pinctrl: meson-axg: add missing GPIOA_18 gpio group
  - rbd: get snapshot context after exclusive lock is ensured to be held
  - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
  - tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
  - Bluetooth: hci_qca: fix debugfs registration
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
  - s390/dasd: Use correct lock while counting channel queue length
  - ceph: fix use-after-free bug for inodes when flushing capsnaps
  - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
  - can: j1939: change j1939_netdev_lock type to mutex
  - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket
  - drm/amdgpu: fix xclk freq on CHIP_STONEY
  - ALSA: hda/realtek: Add Lenovo P3 Tower platform
  - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  - Input: psmouse - fix OOB access in Elantech protocol
  - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  - batman-adv: Broken sync while rescheduling delayed work
  - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
  - bnxt_en: Query default VLAN before VNIC setup on a VF
  - bnxt_en: Don't issue AP reset during ethtool's reset operation
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
  - bpf: Add extra path pointer check to d_path helper
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
  - net: sched: move rtm_tca_policy declaration to include file
  - rfs: annotate lockless accesses to RFS sock flow table
  - rfs: annotate lockless accesses to sk->sk_rxhash
  - ipv6: rpl: Fix Route of Death.
  - netfilter: ipset: Add schedule point in call_ad().
  - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
  - qed/qede: Fix scheduling while atomic
  - Bluetooth: L2CAP: Add missing checks for invalid DCID
  - Bluetooth: Fix l2cap_disconnect_req deadlock
  - net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
  - net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
  - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  - afs: Fix setting of mtime when creating a file/dir/symlink
  - spi: qup: Request DMA before enabling clocks
  - staging: vchiq_core: drop vchiq_status from vchiq_initialise
  - i40e: fix build warning in ice_fltr_add_mac_to_list()
  - i40e: fix build warnings in i40e_alloc.h
  - i40iw: fix build warning in i40iw_manage_apbvt()
  - block/blk-iocost (gcc13): keep large values in a new enum
  - blk-iocost: avoid 64-bit division in ioc_timer_fn
  - f2fs: fix iostat lock protection
  - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
  - remove the sx8 block driver
  - sfc (gcc13): synchronize ef100_enqueue_skb()'s return type
  - gcc-plugins: Reorganize gimple includes for GCC 13
  - ata: ahci: fix enum constants for gcc-13
  - ext4: enable the lazy init thread when remounting read/write
  - selftests: mptcp: join: skip if MPTCP is not supported
  - selftests: mptcp: simult flows: skip if MPTCP is not supported
  - selftests: mptcp: diag: skip if MPTCP is not supported
  - crypto: ccp: Play nice with vmalloc'd memory for SEV command structs
  - crypto: ccp: Reject SEV commands with mismatching command buffer
  - media: ti-vpe: cal: avoid FIELD_GET assertion
  - tpm, tpm_tis: Request threaded interrupt handler
  - regmap: Account for register length when chunking
  - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
  - KVM: x86: Account fastpath-only VM-Exits in vCPU stats
  - test_firmware: fix the memory leak of the allocated firmware buffer
  - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
  - fbcon: Fix null-ptr-deref in soft_cursor
  - ext4: add lockdep annotations for i_data_sem for ea_inode's
  - ext4: disallow ea_inodes with extended attributes
  - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
  - ext4: add EA_INODE checking to ext4_iget()
  - selftests: mptcp: pm nl: skip if MPTCP is not supported
  - selftests: mptcp: connect: skip if MPTCP is not supported
  - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
  - selinux: don't use make's grouped targets feature yet
  - btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds
  - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK
  - mmc: vub300: fix invalid response handling
  - eth: sun: cassini: remove dead code
  - gcc-12: disable '-Wdangling-pointer' warning for now
  - ath6kl: Use struct_group() to avoid size-mismatched casting
  - ACPI: thermal: drop an always true check
  - x86/boot: Wrap literal addresses in absolute_pointer()
  - ata: libata-scsi: Use correct device no in ata_find_dev()
  - scsi: stex: Fix gcc 13 warnings
  - misc: fastrpc: reject new invocations during device removal
  - misc: fastrpc: return -EPIPE to invocations on device removal
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind
  - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  - iio: dac: build ad5758 driver when AD5758 is selected
  - iio: adc: ad7192: Change "shorted" channels to differential
  - iio: dac: mcp4725: Fix i2c_master_send() return value handling
  - iio: light: vcnl4035: fixed chip ID check
  - iio: imu: inv_icm42600: fix timestamp reset
  - HID: wacom: avoid integer overflow in wacom_intuos_inout()
  - HID: google: add jewel USB id
  - iio: adc: mxs-lradc: fix the order of two cleanup operations
  - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
  - atm: hide unused procfs functions
  - drm/msm: Be more shouty if per-process pgtables aren't working
  - ALSA: oss: avoid missing-prototype warnings
  - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
  - wifi: b43: fix incorrect __packed annotation
  - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
  - ARM: dts: stm32: add pin map for CAN controller on stm32f7
  - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
  - s390/pkey: zeroize key blobs
  - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
  - media: dvb_ca_en50221: fix a size write bug
  - media: netup_unidvb: fix irq init by register it at the end of probe
  - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
  - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
  - media: dvb_demux: fix a bug for the continuity counter
  - ASoC: ssm2602: Add workaround for playback distortions
  - ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
  - xfrm: Check if_id in inbound policy/secpath match
  - ASoC: dwc: limit the number of overrun messages
  - block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
  - fbdev: stifb: Fix info entry in sti_struct on error path
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode
  - media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
  - ARM: 9295/1: unwind:fix unwind abort for uleb128 case
  - btrfs: abort transaction when sibling keys check fails for leaves
  - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()
  - watchdog: menz069_wdt: fix watchdog initialisation
  - mtd: rawnand: marvell: don't set the NAND frequency select
  - mtd: rawnand: marvell: ensure timing values are written
  - net: dsa: mv88e6xxx: Increase wait after reset deactivation
  - net/mlx5: Read embedded cpu after init bit cleared
  - udp6: Fix race condition in udp6_sendmsg & connect
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
  - net/sched: Prohibit regrafting ingress or clsact Qdiscs
  - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
  - net/sched: sch_clsact: Only create under TC_H_CLSACT
  - net/sched: sch_ingress: Only create under TC_H_INGRESS
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
  - af_packet: do not use READ_ONCE() in packet_bind()
  - mtd: rawnand: ingenic: fix empty stub helper definitions
  - amd-xgbe: fix the false linkup in xgbe_phy_status
  - af_packet: Fix data-races of pkt_sk(sk)->num.
  - netrom: fix info-leak in nr_write_internal()
  - net/mlx5: fw_tracer, Fix event handling
  - dmaengine: pl330: rename _start to prevent build error
  - iommu/amd: Don't block updates to GATag if guest mode is on
  - iommu/rockchip: Fix unwind goto issue
  - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
  - RDMA/bnxt_re: Fix a possible memory leak
  - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
  - dmaengine: at_xdmac: Move the free desc to the tail of the desc list
  - dmaengine: at_xdmac: Fix race for the tx desc callback
  - dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie
  - RDMA/efa: Fix unsupported page sizes in device
  - RDMA/bnxt_re: Fix the page_size used during the MR creation
  - RDMA/bnxt_re: Code refactor while populating user MRs
  - !2935 [sync] PR-2865: Backport 5.10.181 - 5.10.182 LTS patches from upstream
  - fs/dirty_pages: fix some errors in seq_read_dirty()
  - fs/dirty_pages: fix inode reference count leakage error in dump_dirtypages_sb()
  - Revert "arm64/mpam: Fix mpam corrupt when cpu online"
  - netfilter: ctnetlink: Support offloaded conntrack entry deletion
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
  - net: phy: mscc: enable VSC8501/2 RGMII RX clock
  - net/mlx5: Devcom, serialize devcom registration
  - net/mlx5: devcom only supports 2 ports
  - power: supply: bq24190: Call power_supply_changed() after updating input current
  - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()
  - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize
  - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes
  - power: supply: bq27xxx: Move bq27xxx_battery_update() down
  - power: supply: bq27xxx: expose battery data when CI=1
  - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status()
  - power: supply: bq27xxx: make status more robust
  - power: supply: bq27xxx: fix sign of current_now for newer ICs
  - power: supply: bq27xxx: fix polarity of current_now
  - net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
  - 3c589_cs: Fix an error handling path in tc589_probe()
  - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
  - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
  - net/mlx5: Fix error message when failing to allocate device memory
  - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
  - net/mlx5e: do as little as possible in napi poll when budget is 0
  - forcedeth: Fix an error handling path in nv_probe()
  - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
  - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
  - fs: fix undefined behavior in bit shift for SB_NOUSER
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove
  - power: supply: bq27xxx: Fix I2C IRQ race on remove
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
  - power: supply: leds: Fix blink to LED on transition
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
  - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
  - octeontx2-pf: Fix TSOv6 offload
  - selftests: fib_tests: mute cleanup error message
  - net: fix skb leak in __skb_tstamp_tx()
  - media: radio-shark: Add endpoint checks
  - USB: sisusbvga: Add endpoint checks
  - USB: core: Add routines for endpoint checks in old drivers
  - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
  - net: fix stack overflow when LRO is disabled for virtual interfaces
  - fbdev: udlfb: Fix endpoint check
  - debugobjects: Don't wake up kswapd from fill_pool()
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
  - parisc: Fix flush_dcache_page() for usage from irq context
  - selftests/memfd: Fix unknown type name build failure
  - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  - btrfs: use nofs when cleaning up aborted transactions
  - gpio: mockup: Fix mode of debugfs files
  - parisc: Allow to reboot machine after system halt
  - parisc: Handle kgdb breakpoints only in kernel context
  - m68k: Move signal frame following exception on 68020/030
  - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
  - ALSA: hda/realtek: Enable headset onLenovo M70/M90
  - ALSA: hda: Fix unhandled register update during auto-suspend period
  - ALSA: hda/ca0132: add quirk for EVGA X299 DARK
  - ocfs2: Switch to security_inode_init_security()
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation
  - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
  - watchdog: sp5100_tco: Immediately trigger upon starting.
  - s390/qdio: fix do_sqbs() inline assembly constraint
  - s390/qdio: get rid of register asm
  - serial: 8250_exar: Add support for USR298x PCI Modems
  - serial: exar: Add support for Sealevel 7xxxC serial cards
  - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards
  - HID: wacom: add three styli to wacom_intuos_get_tool_type
  - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
  - HID: wacom: Force pen out of prox if no events have been received in a while
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
  - powerpc/64s/radix: Fix soft dirty tracking
  - tpm/tpm_tis: Disable interrupts for more Lenovo devices
  - ceph: force updating the msg pointer in non-split case
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
  - serial: Add support for Advantech PCI-1611U card
  - statfs: enforce statfs[64] structure initialization
  - can: kvaser_pciefd: Disable interrupts in probe error path
  - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
  - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
  - can: kvaser_pciefd: Empty SRB buffer in probe
  - can: kvaser_pciefd: Call request_irq() before enabling interrupts
  - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
  - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
  - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
  - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
  - ALSA: hda/realtek: Add quirk for Clevo L140AU
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
  - ALSA: hda: Fix Oops by 9.1 surround channel names
  - usb: typec: altmodes/displayport: fix pin_assignment_show
  - usb: gadget: u_ether: Fix host MAC address case
  - usb: dwc3: debugfs: Resume dwc3 before accessing registers
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
  - usb-storage: fix deadlock when a scsi command timeouts more than once
  - USB: usbtmc: Fix direction for 0-length ioctl control messages
  - ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
  - bridge: always declare tunnel functions
  - netfilter: nft_set_rbtree: fix null deref on element insertion
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
  - igb: fix bit_shift to be in [1..8] range
  - cassini: Fix a memory leak in the error handling path of cas_init_one()
  - scsi: storvsc: Don't pass unused PFNs to Hyper-V host
  - wifi: iwlwifi: mvm: don't trust firmware n_channels
  - wifi: mac80211: fix min center freq offset tracing
  - net: bcmgenet: Restore phy_stop() depending upon suspend/close
  - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
  - tipc: check the bearer min mtu properly when setting it by netlink
  - tipc: do not update mtu if msg_max is too small in mtu negotiation
  - tipc: add tipc_bearer_min_mtu to calculate min mtu
  - net/tipc: fix tipc header files for kernel-doc
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
  - drm/exynos: fix g2d_open/close helper function definitions
  - SUNRPC: Fix trace_svc_register() call site
  - media: netup_unidvb: fix use-after-free at del_timer()
  - erspan: get the proto with the md version for collect_md
  - serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
  - vsock: avoid to close connected socket after the timeout
  - ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
  - ALSA: firewire-digi00x: prevent potential use after free
  - net: phy: dp83867: add w/a for packet errors seen with short cables
  - net: fec: Better handle pm_runtime_get() failing in .remove()
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies
  - cpupower: Make TSC read per CPU for Mperf monitor
  - drm/msm/dpu: Remove duplicate register defines from INTF
  - drm/msm/dp: unregister audio driver during unbind
  - Revert "Fix XFRM-I support for nested ESP tunnels"
  - btrfs: fix space cache inconsistency after error loading it from disk
  - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
  - btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to disk-io.c
  - mfd: dln2: Fix memory leak in dln2_probe()
  - phy: st: miphy28lp: use _poll_timeout functions for waits
  - Input: xpad - add constants for GIP interface numbers
  - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
  - clk: tegra20: fix gcc-7 constant overflow warning
  - iommu/arm-smmu-qcom: Limit the SMR groups to 128
  - RDMA/core: Fix multiple -Warray-bounds warnings
  - recordmcount: Fix memory leaks in the uwrite function
  - sched: Fix KCSAN noinstr violation
  - mcb-pci: Reallocate memory region to avoid memory overlapping
  - serial: 8250: Reinit port->pm on port specific driver unbind
  - usb: typec: tcpm: fix multiple times discover svids error
  - HID: wacom: generic: Set battery quirk only when we see battery data
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
  - HID: logitech-hidpp: Reconcile USB and Unifying serials
  - HID: logitech-hidpp: Don't use the USB serial for USB devices
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
  - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
  - wifi: ath11k: Fix SKB corruption in REO destination ring
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
  - null_blk: Always check queue mode setting from configfs
  - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
  - wifi: iwlwifi: pcie: fix possible NULL pointer dereference
  - samples/bpf: Fix fout leak in hbm's run_bpf_prog
  - f2fs: fix to drop all dirty pages during umount() if cp_error is set
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
  - ext4: set goal start correctly in ext4_mb_normalize_request
  - gfs2: Fix inode height consistency check
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
  - scsi: target: iscsit: Free cmds before session free
  - net: Catch invalid index in XPS mapping
  - net: pasemi: Fix return type of pasemi_mac_start_tx()
  - ext2: Check block size validity during mount
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
  - bpf: Annotate data races in bpf_local_storage
  - wifi: ath: Silence memcpy run-time false positive warning
  - drm/amd: Fix an out of bounds error in BIOS parser
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer
  - drm/tegra: Avoid potential 32-bit integer overflow
  - remoteproc: stm32_rproc: Add mutex protection for workqueue
  - ACPI: EC: Fix oops when removing custom query handlers
  - arm64: dts: qcom: msm8996: Add missing DWC3 quirks
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE
  - drm/amd/display: Use DC_LOG_DC in the trasform pixel function
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
  - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
  - refscale: Move shutdown from wait_event() to wait_event_idle()
  - ext4: allow ext4_get_group_info() to fail
  - ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
  - ext4: add mballoc stats proc file
  - ext4: drop s_mb_bal_lock and convert protected fields to atomic
  - ext4: remove redundant mb_regenerate_buddy()
  - ext4: fix lockdep warning when enabling MMP
  - ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
  - ext4: reflect error codes from ext4_multi_mount_protect() to its callers
  - ext4: remove an unused variable warning with CONFIG_QUOTA=n
  - fbdev: arcfb: Fix error handling in arcfb_probe()
  - drm/i915/dp: prevent potential div-by-zero
  - af_unix: Fix data races around sk->sk_shutdown.
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
  - net: datagram: fix data-races in datagram_poll()
  - tcp: add annotations around sk->sk_shutdown accesses
  - tcp: factor out __tcp_close() helper
  - net: add vlan_get_protocol_and_depth() helper
  - net: tap: check vlan with eth_type_vlan() method
  - net: annotate sk->sk_err write from do_recvmmsg()
  - netlink: annotate accesses to nlk->cb_running
  - netfilter: conntrack: fix possible bug_on with enable_hooks=1
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
  - linux/dim: Do nothing if no time delta between samples
  - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
  - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
  - drm/mipi-dsi: Set the fwnode for mipi_dsi_device
  - driver core: add a helper to setup both the of_node and fwnode of a device
  - Net: ethernet: Support management channel of the host tool in 3snic 3s9xx network driver


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.36.0.113
changelog:
  - !3294 [sync] PR-2843:  Add error handle for sd
  - !3291 [sync] PR-3222:  md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - !3253  Add error handle for driver
  - !3353 RDMA/hns: Add support more netdev speed
  - RDMA/hns: Fix port active speed
  - RDMA/core: Add support more netdev speed
  - !3327 [sync] PR-3320:  Make the rcache depot scale better
  - iommu/iova: Manage the depot list size
  - iommu/iova: Make the rcache depot scale better
  - iommu/iova: change IOVA_MAG_SIZE to 127 to save memory
  - Revert "iommu/iova: increase the iova_rcache depot max size to 128"
  - Revert "config: enable set the max iova mag size to 128"
  - Revert "iommu/iova: move IOVA_MAX_GLOBAL_MAGS outside of IOMMU_SUPPORT"
  - scsi: sd: Clean up sdkp if device_add_disk() failed
  - scsi: sd: Add error handling support for add_disk()
  - md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
  - nbd: fix uaf in nbd_open
  - mtd/ubi/block: Fix uaf problem in ubiblock_cleanup
  - mtd/ubi/block: Fix null pointer dereference issue in error path
  - mtd/ubi/block: add error handling support for add_disk()
  - ubi: use blk_mq_alloc_disk and blk_cleanup_disk
  - scsi: sr: Add error handling support for add_disk()
  - scsi: sd: Clean up sdkp if device_add_disk() failed
  - scsi: sd: Add error handling support for add_disk()
  - block/brd: add error handling support for add_disk()
  - brd: convert to blk_alloc_disk/blk_cleanup_disk
  - nvme: add error handling support for add_disk()
  - nvme: use blk_mq_alloc_disk
  - block: add a flag to make put_disk on partially initalized disks safer
  - nbd: add error handling support for add_disk()
  - nbd: fix order of cleaning up the queue and freeing the tagset
  - nbd: use blk_mq_alloc_disk and blk_cleanup_disk
  - loop: add error handling support for add_disk()
  - loop: fix order of cleaning up the queue and freeing the tagset
  - loop: use blk_mq_alloc_disk and blk_cleanup_disk
  - blk-mq: fix an IS_ERR() vs NULL bug
  - blk-mq: add the blk_mq_alloc_disk APIs
  - block: add blk_alloc_disk and blk_cleanup_disk APIs
  - nbd: Revert redundant patches of nbd first_minor
  - !3231 [sync] PR-3161:  fs: Fix error checking for d_hash_and_lookup()
  - fs: Fix error checking for d_hash_and_lookup()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.37.0.114
changelog:
  - !3626  ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - !3620  netfilter: nft_set_pipapo: skip inactive elements during set walk
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
  - netfilter: nft_set_pipapo: skip inactive elements during set walk
  - !3596 [sync] PR-3583:  tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
  - !3577  perf/core: Fix CVE-2023-6931
  - perf: Fix perf_event_validate_size() lockdep splat
  - perf: Fix perf_event_validate_size()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.38.0.115
changelog:
  - !3855 [sync] PR-3694:  Fix tow CVEs of CIFS
  - !3766 [sync] PR-3594:  CVE-2023-35827 patchset
  - smb: client: fix potential OOB in smb2_dump_detail()
  - smb: client: fix OOB in smbCalcSize()
  - !3801 [sync] PR-3659:  atm: Fix Use-After-Free in do_vcc_ioctl
  - !3826 [sync] PR-3822:  ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3779 [sync] PR-3420:  md: protect md_thread with rcu
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
  - !3782 [sync] PR-3447:  dm: add error handling support for add_disk()
  - !3784 [sync] PR-3379:  md: do not return existing mddevs from mddev_find_or_alloc
  - atm: Fix Use-After-Free in do_vcc_ioctl
  - md: do not return existing mddevs from mddev_find_or_alloc
  - md: refactor mddev_find_or_alloc
  - md: factor out a mddev_alloc_unit helper from mddev_find
  - dm: add error handling support for add_disk()
  - md: protect md_thread with rcu
  - md/bitmap: factor out a helper to set timeout
  - md/bitmap: always wake up md_thread in timeout_store
  - dm-raid: remove useless checking in raid_message()
  - md: factor out a helper to wake up md_thread directly
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-153.39.0.116
changelog:
  - !4002  Revert "ubi: ensure that VID header offset + VID header size <= alloc, size"
  - !3988 [sync] PR-3715:  appletalk: Fix Use-After-Free in atalk_ioctl
  - !3991 [sync] PR-3668:  net/rose: Fix Use-After-Free in rose_ioctl
  - !3978 Bugfixes for RDMA/hns
  - !3985 [sync] PR-3915:  nvmet: nul-terminate the NQNs passed in the connect command
  - !3797 [sync] PR-3771:  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - Revert "ubi: ensure that VID header offset + VID header size <= alloc, size"
  - !3764 [sync] PR-3686:  Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
  - net/rose: Fix Use-After-Free in rose_ioctl
  - appletalk: Fix Use-After-Free in atalk_ioctl
  - nvmet: nul-terminate the NQNs passed in the connect command
  - RDMA/hns: Fix congestions control algorithm type for UD
  - RDMA/hns: Fix a missing validation check for sl
  - RDMA/hns: Add a max length of gid table
  - RDMA/hns: Fix printing level of asynchronous events
  - RDMA/hns: Remove unnecessary QP type checks
  - RDMA/hns: Rename the interrupts
  - !3938 RDMA/hns: Response dmac to userspace
  - RDMA/hns: Response dmac to userspace
  - !3879 [sync] PR-3466:  livepatch/core: Disable support for replacing
  - livepatch/core: Disable support for replacing
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg


author: zhangmingyi<zhangmingyi5@huawei.com> - 2:0.8.1-3
changelog:
  -- backporting: backport-libbpf-Ensure-functions-with-always_inline-attribute-are-inline.patch 
                  backport-libbpf-Fix-the-name-of-a-reused-map.patch
                  backport-libbpf-preserve-errno-across-pr_warn-pr_info-pr_debug.patch


author: JofDiamonds <kwb0523@163.com> -2:0.8.1-4
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-overrun-in-netlink-attribute-iteration.patch
    backport-libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
    backport-libbpf-Deal-with-section-with-no-data-gracefully.patch
    backport-libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch
    backport-sync-start-syncing-include-uapi-linux-fcntl.h-UAPI-h.patch
    backport-libbpf-Handle-size-overflow-for-ringbuf-mmap.patch
    backport-libbpf-Use-page-size-as-max_entries-when-probing-rin.patch


author: SuperCharge <xiesongyang@huawei.com> -2:0.8.1-6
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-alen-calculation-in-libbpf_nla_dump_error.patch


author: zhangmingyi <zhangmingyi5@huawei.com> -2:0.8.1-8
changelog:
  - backport patches from upstream:
    backport-libbpf-disassociate-section-handler-on-explicit-bpf_.patch
    backport-libbpf-Use-correct-return-pointer-in-attach_raw_tp.patch
    backport-libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch


author: Qingqing Li <liqingqing3@huawei.com> -2:0.8.1-10
changelog:
  - backport patch from openEuler kernel repo:
    backport-sync-the-newly-added-helper-functions-from-kernel.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-11
changelog:
  - backport patches from upstream:
    backport-libbpf-Ensure-FD-3-during-bpf_map__reuse_fd.patch
    backport-libbpf-Ensure-libbpf-always-opens-files-with-O_CLOEX.patch


author: zhangmingyi <zhangmingyi5@huawei.com> 2:0.8.1-12
changelog:
  - backport patches from upstream:
    backport-libbpf-Fix-realloc-API-handling-in-zero-sized-edge-cases.patch
    backport-libbpf-Set-close-on-exec-flag-on-gzopen.patch
    backport-libbpf-Fix-is_pow_of_2.patch
    backport-libbpf-make-RINGBUF-map-size-adjustments-more-eagerly.patch


author: chenhaixing <chenhaixing@huawei.com> - 0.69.0-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libdnf:Avoid reinstalling installonly packages marked for ERASE
                Fix utimes error message in dnf-repo
                Do not download repository if our local cache is up to date in dnf-repo
                python bindings:Load all modules with RTLD_GLOBAL


author: ZhengZhenyu <zhengzhenyu@openeuler.sh> - 13.12-1
changelog:
  - aupgrade libpq to 13.12,fix CVE-2023-2455, CVE-2023-2454, CVE-2023-39417, CVE-2023-39418, CVE-2020-21469


author: zhangjun<zhangjun@kylinos.cn> - 0.7.20-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leak when using testsolv to execute cases 
         Fix segfault on conflict resolution when using bindings


author: zengweifeng <zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add errno while reset with strtoul call
         fix error returned in ssh_userauth_try_publicke
         client do not close the socket if it was set via opt
         fix openForward to not set sourcehost to NULL
         fix the length calculation of packet in sftp_write


author: xinghe <xinghe2@h-partners.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:options: Parse hostname by last '@'
         torture_options: Add test for '@' in login name
         session: Initialize pointers
         tests: Ensure the mode of the created file is what we set


author: seuzw <930zhaowei@163.com> - 0.9.6-5
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:backport some upstream patches:
         Avoid false positive report from Coveritt CID 1470006
         kdf: Avoid endianess issues
         misc: Fix format truncation in ssh_path_expand_escape()
         misc: Fix expanding port numbers
         misc: rename gettimeofday symbol
         session: Initialize the port with the standard port (22)
         session->socket_callbacks.data will be set to ssh_packet_socket_callback
         socket: Add error message if execv fails
         tests: Add test for expanding port numbers


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-6
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:config: Escape brackets in ProxyCommand build
         packet: do not enqueue outgoing packets


author: renmingshuai <renmingshuai@huawei.com> - 0.9.6-8
changelog:
  - Type:CVE
  - Id:CVE-2023-6004,CVE-2023-6918,CVE-2023-48795
  - SUG:NA
  - DESC:fix CVE-2023-6004, CVE-2023-6918 and CVE-2023-48795


author: zhouwenpei <zhouwenpei1@h-partners.com> - 4.3.0-23
changelog:
  - fix CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799,
  - fix CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804


author: fuanan <fuanan3@h-partners.com> - 2.9.12-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed


author: fuanan <fuanan3@h-partners.com> - 2.9.14-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Upgrade to upstream v2.9.14 and Cleanup duplicate installation


author: Xiong Zhou <xiongzhou4@huawei.com> 15.0.7-2
changelog:
  - Type:Update
  - ID:NA
  - SUG:NA
  - DESC: Backport bugfix and add AArch64 support for hugify and inline.


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: wangkai <wangkai385@huawei.com> - 4.1.13-17
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: xingwei <xingwei14@h-partners.com> - 2:7.92-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:decouple from PCRE because it has been End-of-life, use local libpcre to build instead


author: wangkai <13474090681@163.com> - 1:12.22.11-5
changelog:
  - Fix CVE-2022-32212,CVE-2022-32213,CVE-2022-32214,CVE-2022-32215,
  - CVE-2022-25881,CVE-2023-23918,CVE-2023-23920,CVE-2023-30589,
  - CVE-2023-30590,CVE-2023-30581,CVE-2023-32002,CVE-2023-32006,
  - CVE-2023-32559,CVE-2022-35256


author: chengyechun <chengyechun1@huawei.com> - 4.2.8p15-7
changelog:
  - Type:CVE
  - ID:CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26554,CVE-2023-26555
  - SUG:NA
  - DESC:fix CVE-2023-26551,CVE-2023-26552,CVE-2023-26553,CVE-2023-26555,CVE-2023-26555


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-4
changelog:
  - Add requirements for system and bugfix
  - Upgrade oec-hardware-server
  - Update readme and design doc
  - Fix nvme error
  - Update network fibre check and log 
  - Update description for perf test
  - Add automatic configuration network card IP


author: cuixucui <cuixucui1@h-partners.com> - 1.1.2-5
changelog:
  - fix the bug that the test board information is not added to the configuration file
  - Add kabi for hardware critical test
  - Optimize disk/raid/fc/ethernet/infiniband test suite
  - Fix the bug of reading nvme data failed
  - Add file size check when uploading file to server


author: zhangyale <zhangyale3@h-partners.com> - 1.1.3-0
changelog:
  - Add support for openEuler 22.03 LTS SP1
  - Add AMD GPU testcase
  - Add automatic configuration network card IP
  - Add generate compatibility information


author: cuixucui <cuixucui1@h-partner.com> - 1.1.3-2
changelog:
  - Fix code issue and update log print in network
  - Cancel deleting the IP that automatically configured on the server
  - Fix cdrom bug


author: liqiang <liqiang332@h-partner.com> - 1.1.3-3
changelog:
  - Fix libswsds.so not stripped
  - Fix the value of kernel.src obtained by the kabi test case is incorrect
  - Add board infomation and fix memory bug
  - Fix the block size fails to be obtained during the NVME test
  - Judge whether to support kabi testing by architecture
  - Update readme and dev_design


author: cuixucui <cuixucui1@h-partner.com> - 1.1.4-0
changelog:
  - Add board information in the test report
  - Add spdk test case
  - Add dpdk test case
  - Update pci.ids file


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-0
changelog:
  - Add support for openEuler 20.03 LTS SP4, openEuler 22.03 LTS SP2, openEuler 22.03 LTS SP3
  - Add modifications to Kylinsec with oec-hardware
  - Add support for Loongson and SW architectures
  - Bugfix


author: cuixucui <cuixucui@h-partner.com> - 1.1.5-1
changelog:
  - Add virtual cases
  - Resolve IB startup IB_Read_BW service failure issue
  - Delete redundant references
  - Resolve incorrect type in vgpu result data
  - Resolve the issue of getting the kernel source rpm


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport some upstream patches and modify some patches numbers


author: renmingshuai<renmingshuai@huawei.com> - 8.8p1-25
changelog:
  - Type:CVE
  - CVE:CVE-2023-48795,CVE-2023-51385
  - SUG:NA
  - DESC:fix CVE-2023-48795 and CVE-2023-51385


author: zhouwenpei <zhouwenpei1@h-partners.com> - 0.90.0-6
changelog:
  - fix CVE-2022-37050,CVE-2022-37051,CVE-2022-37052,CVE-2022-38349,CVE-2020-23804
  - fix install error


author: bzhaoop <bzhaojyathousandy@gmail.com> - 13.3-6
changelog:
  - Porting "Fix subtransaction test failed" from master branch
  - Fri May 6 2022 caodongxia <caodongxia@h-partners.com> - 13.3-4
  - sync the same line with master


author: dillon chen <dillon.chen@gmail.com> - 13.3-8
changelog:
  - Fix build error for loongarch64
  - Fix issue: confilct between libpq-devel and postgresql-devel
  - guess init spec from redhat
  - change redhat spec:rm private package and add files to server-devel
  - so add delete lines to Fix issue
  - Next: write oe libpq and postgresql spec by myself


author: yangcheng <yangcheng1203@163.com> - 8.1.2-4
changelog:
  - Type:CVE
  - CVE:CVE-2022-22815,CVE-2022-22816,CVE-2022-22817
  - SUG:NA
  - DESC:fix CVE-2022-22815,CVE-2022-22816,CVE-2022-22817


author: dongyuzhen <dongyuzhen@h-partners.com> - 9.0.1-2
changelog:
  - correct memory allocation in alloc_array (this is the rear patch of CVE-2022-22815,CVE-2022-22816)


author: chenhaixing <chenhaixing@huawei.com> - 1.26.8-2
changelog:
  - delete patch Bump-RECENT_DATE.patch and modify RECENT_DATE in python-urllib3.spec to adapt time change


author: chenhaixing <chenhaixing@huawei.com> - 1.26.12-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: Chenxi Mao <chenxi.mao@suse.com> - 3.9.9-23
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC: Enable link time optimizaitons (LTO) for better performance.


author: zhaoyu <zhaoyu64@huawei.com>- 3.9.9-25
changelog:
  - Type:CVE
  - CVE:CVE-2007-4559
  - SUG:NA
  - DESC:Add a filter parameter to tarfile.extractall will allow users to avoid CVE-2007-4559 by changing their code/settings.


author: <xufei30@huawei.com> - 10:6.2.0-67
changelog:
  - hw/net/vmxnet3: Log guest-triggerable errors using LOG_GUEST_ERROR mainline
  - net/eth: Don't consider ESP to be an IPv6 option header mainline
  - net: Fix uninitialized data usage mainline
  - block-backend: prevent dangling BDS pointers across aio_poll() mainline inclusion
  - i386: add notify VM exit support
  - kvm: expose struct KVMState
  - kvm: allow target-specific accelerator properties
  - i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple fault
  - linux-headers: include missing changes from 6.0
  - dsoundaudio: fix crackling audio recordings mainline
  - hw/audio/intel-hda: fix stream reset mainline
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - qemu support for loongarch
  - hw/pci: Trace IRQ routing on PCI topology
  - hw/pci: Fix a typo
  - hw/riscv: virt: Simplify virt_{get,set}_aclint()
  - curl: Fix error path in curl_open()
  - tests: add (riscv virt) machine mapping to testenv from v7.0.0
  - tests/tcg: Fix target-specific Makefile variables  path for user-mode mainline
  - hw/core/machine:Fix the missing consideration of cluster-id
  - arm/virt: Correct timing of pause all vcpus for hot-plugged CPUs
  - arm/virt: Correct timing of executing cpu_synchronize_post_init for hot-plugged cpus
  - hw/acpi: Support acpi-ged to report CPU's OST info
  - hw/acpi: Add ospm_status hook implementation for acpi-ged
  - fix qmp command migrate-set-parameters


author: <xufei30@huawei.com> - 10:6.2.0-71
changelog:
  - vhost-user-blk: fix the resize crash
  - plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
  - linux-user: fix strace build w/out munlockall
  - ui: fix crash on serial reset, during init
  - qga/win/vss: requester_freeze changes
  - migration: fix populate_vfio_info
  - block/rbd: workaround for ceph issue #53784
  - target/i386: add FZRM, FSRS, FSRC
  - i386: Add new CPU model SapphireRapids
  - core/cpu-common: Fix the wrong '#ifdef __aarch64__'


author: <xufei30@huawei.com> - 10:6.2.0-72
changelog:
  - migration/xbzrle: fix out-of-bounds write with axv512
  - migration/xbzrle: use ctz64 to avoid undefined result
  - Update bench-code for addressing CI problem
  - AVX512 support for xbzrle_encode_buffer
  - configure, meson: move AVX tests to meson
  - target/i386: KVM: allow fast string operations if host supports them
  - target/i386: add FSRM to TCG
  - hw/nvme: fix memory leak in nvme_dsm
  - aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
  - target/i386: Add SGX aex-notify and EDECCSSA support
  - hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
  - target/i386: Set maximum APIC ID to KVM prior to vCPU creation
  - target/i386: Fix sanity check on max APIC ID / X2APIC enablement


author: <fengjiabo1@huawei.com> - 10:6.2.0-75
changelog:
  - Add lbt support for kvm.
  - Fix smp.cores value and Fix divide 0 error
  - hw/nvme: Change alignment in dma functions for nvme_blk_*
  - virtio: fix reachable assertion due to stale value of cached region size
  - hw/nvme: fix missing DNR on compare failure


author: <fengjiabo1@huawei.com> - 10:6.2.0-76
changelog:
  - qga/win32: Use rundll for VSS installation
  - qga/win32: Remove change action from MSI installer
  - ide: Increment BB in-flight counter for TRIM BH
  - hw/pci-bridge/pxb: Fix missing swizzle
  - host-vdpa: make notifiers _init()/_uninit() symmetric
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region
  - accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
  - Allow setting up to 8 bytes with the generic loader
  - hw/net/virtio-net: make some VirtIONet const
  - accel/tcg: Optimize jump cache flush during tlb range flush
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - tcg: Reduce tcg_assert_listed_vecop() scope
  - gitlab: Disable plugins for cross-i386-tci
  - vfio/pci: Fix a segfault in vfio_realize
  - block/iscsi: fix double-free on BUSY or similar statuses
  - tests/tcg: fix unused variable in linux-test
  - hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
  - qga/vss-win32: fix warning for clang++-15
  - vnc: avoid underflow when accessing user-provided address
  - block/monitor: Fix crash when executing HMP commit
  - virtio-gpu: add a FIXME for virtio_gpu_load()
  - hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
  - migration: report compress thread pid to libvirt


author: <fengjiabo1@huawei.com> - 10:6.2.0-78
changelog:
  - sw_64: Added sw64 architecture related updates
  - virtio-crypto: verify src&dst buffer length for sym request
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
  - qga: Fix suspend on Linux guests without systemd
  - tests: vhost-user-test: release mutex on protocol violation
  - qapi: support updating expected test output via make
  - block: Fix misleading hexadecimal format
  - block/rbd: fix write zeroes with growing images
  - block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
  - block/nfs: Fix 32-bit Windows build
  - qapi/qdev: Tidy up device_add documentation
  - hw/xen/xen_pt: fix uninitialized variable
  - migration/ram: Fix error handling in ram_write_tracking_start()
  - docs/about/build-platforms: Refine the distro support policy
  - xen-block: Avoid leaks on new error path
  - QGA VSS: Add wrapper to send log to debugger and stderr
  - chardev/char-socket: set s->listener = NULL in char_socket_finalize
  - qapi/block: Tidy up block-latency-histogram-set documentation
  - disas/riscv Fix ctzw disassemble
  - vfio: Fix vfio_get_dev_region() trace event
  - migration/ram: Fix populate_read_range()
  - Check and report for incomplete 'global' option  format


author: <fengjiabo1@huawei.com> - 10:6.2.0-79
changelog:
  - test: Fix test-crypto-secret when compiling without keyring support
  - aio-posix: fix build failure io_uring 2.2


author: <fengjiabo1@huawei.com> - 10:6.2.0-80
changelog:
  - io: remove io watch if TLS channel is closed during handshake
  - hw/ssi: Fix Linux driver init issue with xilinx_spi
  - chardev: report the handshake error
  - vhost: Drop unused eventfd_add|del hooks
  - virtio-iommu: use-after-free fix
  - hw/arm/virt: Check for attempt to use TrustZone with KVM or HVF
  - hw/rx: rx-gdbsim DTB load address aligned of 16byte
  - vhost-user: Use correct macro name TARGET_PPC64
  - accel/kvm: Make kvm_dirty_ring_reaper_init() void
  - accel/kvm: Free as when an error occurred


author: <fengjiabo1@huawei.com> - 10:6.2.0-81
changelog:
  - hw/nvme: Avoid dynamic stack allocation
  - ppc/vof: Fix missed fields in VOF cleanup
  - ui: fix crash when there are no active_console
  - tests/qtest/pflash: Clean up local variable shadowing
  - target/ppc: Fix the order of kvm_enable judgment about kvmppc_set_interrupt()
  - tulip: Assign default MAC address if not specified
  - hw/char: fix qcode array bounds check in ESCC impl


author: <fengjiabo1@huawei.com> - 10:6.2.0-82
changelog:
  - thread-pool: optimize scheduling of completion bottom half
  - migration/rdma: zore out head.repeat to make the error more clear
  - vhost-user-fs: Back up vqs before cleaning up vhost_dev
  - hw/vfio/pci-quirks: Sanitize capability pointer
  - hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques
  - replay: fix event queue flush for qemu shutdown
  - hw/net: Fix read of uninitialized memory in ftgmac100
  - target/ppc: Fix tlbie
  - target/i386: fix INVD vmexit
  - qtest/npcm7xx_pwm-test: Fix memory leak in mft_qom_set
  - aio-posix: zero out io_uring sqe user_data


author: <fengjiabo1@huawei.com> - 10:6.2.0-83
changelog:
  - hw/virtio/virtio-pmem: Replace impossible check by assertion
  - tests: Fix printf format string in acpi-utils.c
  - softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
  - disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
  - qga: Fix memory leak when output stream is unused
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  - target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Allow MCDT_NO if host supports
  - target/i386: Add support for MCDT_NO in CPUID enumeration
  - target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  - target/i386: add support for FB_CLEAR feature
  - target/i386: add support for FLUSH_L1D feature
  - crypto: remove shadowed 'ret' variable
  - hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
  - hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number


author: <fengjiabo1@huawei.com> - 10:6.2.0-84
changelog:
  - hw/arm/fsl-imx: Do not ignore Error argument
  - hw/net/cadence_gem.c: spelling fixes: Octects
  - tests/qtest: check the return value
  - libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
  - io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
  - libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
  - qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
  - net: Fix a misleading error message
  - vdpa: stop all svq on device deletion
  - vhost: release virtqueue objects in error path
  - vhost: fix the fd leak
  - virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
  - hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
  - virtio-net: clear guest_announce feature if no cvq backend
  - vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
  - vdpa: do not block migration if device has cvq and x-svq=on
  - vdpa net: block migration if the device has CVQ
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
  - vdpa: fix not using CVQ buffer in case of error
  - vdpa: Fix possible use-after-free for VirtQueueElement
  - hw/virtio: fix vhost_user_read tracepoint
  - vhost: Fix false positive out-of-bounds
  - vhost: fix possible wrap in SVQ descriptor ring
  - vhost: move iova_tree set to vhost_svq_start
  - vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
  - virtio-crypto: verify src&dst buffer length for sym request
  - vdpa: commit all host notifier MRs in a single MR transaction
  - vdpa: harden the error path if get_iova_range failed
  - vdpa-dev: get iova range explicitly
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - vhost: introduce new VhostOps vhost_set_config_call
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
  - vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
  - vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
  - vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
  - hw/virtio: gracefully handle unset vhost_dev vdev
  - hw/virtio/vhost: Fix typo in comment.
  - vdpa: always start CVQ in SVQ mode if possible
  - vdpa: add shadow_data to vhost_vdpa
  - vdpa: store x-svq parameter in VhostVDPAState
  - vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
  - vdpa: allocate SVQ array unconditionally
  - vdpa: move SVQ vring features check to net/
  - vdpa: request iova_range only once
  - vdpa: add vhost_vdpa_net_valid_svq_features
  - vhost: allocate SVQ device file descriptors at device start
  - vhost: set SVQ device call handler at SVQ start
  - vdpa: use v->shadow_vqs_enabled in vhost_vdpa_svqs_start & stop
  - vhost: enable vrings in vhost_dev_start() for vhost-user devices
  - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset
  - net/vhost-vdpa.c: Fix clang compilation failure
  - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
  - vdpa: Remove shadow CVQ command check
  - vdpa: Delete duplicated vdpa_feature_bits entry
  - hw/virtio: add some vhost-user trace events
  - vdpa: Allow MQ feature in SVQ
  - virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
  - vdpa: validate MQ CVQ commands
  - vdpa: Add vhost_vdpa_net_load_mq
  - vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
  - vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
  - vdpa: Delete CVQ migration blocker
  - vdpa: Add virtio-net mac address via CVQ at start
  - vhost_net: add NetClientState->load() callback
  - vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
  - vdpa: Move command buffers map to start of net device
  - vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
  - vhost_net: Add NetClientInfo stop callback
  - vhost_net: Add NetClientInfo start callback
  - vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
  - vdpa: Make SVQ vring unmapping return void
  - vdpa: Remove SVQ vring from iova_tree at shutdown
  - util: accept iova_tree_remove_parameter by value
  - vdpa: do not save failed dma maps in SVQ iova tree
  - vdpa: Skip the maps not in the iova tree
  - vdpa: Fix file descriptor leak on get features error
  - vdpa: Fix memory listener deletions of iova tree
  - vhost: Get vring base from vq, not svq
  - vdpa: Add x-svq to NetdevVhostVDPAOptions
  - vdpa: Add device migration blocker
  - vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
  - vdpa: Buffer CVQ support on shadow virtqueue
  - vdpa: manual forward CVQ buffers
  - vdpa: Export vhost_vdpa_dma_map and unmap calls
  - vhost: Add svq avail_handler callback
  - vhost: add vhost_svq_poll
  - vhost: Expose vhost_svq_add
  - vhost: add vhost_svq_push_elem
  - vhost: Track number of descs in SVQDescState
  - vhost: Add SVQDescState
  - vhost: Decouple vhost_svq_add from VirtQueueElement
  - vhost: Check for queue full at vhost_svq_add
  - vhost: Move vhost_svq_kick call to vhost_svq_add
  - vhost: Reorder vhost_svq_kick
  - vdpa: Avoid compiler to squash reads to used idx
  - virtio-net: Expose ctrl virtqueue logic
  - virtio-net: Expose MAC_TABLE_ENTRIES
  - vhost: move descriptor translation to vhost_svq_vring_write_descs
  - util: Return void on iova_tree_remove
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
  - vhost-vdpa: backend feature should set only once
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
  - virtio: add vhost support for virtio devices
  - include/hw: start documenting the vhost API
  - hw/virtio: add vhost_user_[read|write] trace points
  - vhost: Fix element in vhost_svq_add failure
  - vdpa: Fix index calculus at vhost_vdpa_svqs_start
  - vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
  - vhost: Fix device's used descriptor dequeue
  - vhost: Track descriptor chain in private at SVQ
  - vdpa: Add missing tracing to batch mapping functions
  - vhost-vdpa: fix typo in a comment
  - virtio: fix --enable-vhost-user build on non-Linux
  - vdpa: Expose VHOST_F_LOG_ALL on SVQ
  - vdpa: Never set log_base addr if SVQ is enabled
  - vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
  - vdpa: Add custom IOTLB translations to SVQ
  - vhost: Add VhostIOVATree
  - util: add iova_tree_find_iova
  - util: Add iova_tree_alloc_map
  - vhost: Shadow virtqueue buffers forwarding
  - vdpa: adapt vhost_ops callbacks to svq
  - virtio: Add vhost_svq_get_vring_addr
  - vhost: Add vhost_svq_valid_features to shadow vq
  - vhost: Add Shadow VirtQueue call forwarding capabilities
  - vhost: Add Shadow VirtQueue kick forwarding capabilities
  - vhost: Add VhostShadowVirtqueue
  - vdpa: Make ncs autofree
  - Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
  - Revert "virtio-pci: decouple notifier from interrupt process"
  - Revert "virtio-pci: decouple the single vector from the interrupt process"
  - Revert "vhost-vdpa: add support for config interrupt"
  - Revert "virtio: add support for configure interrupt"
  - Revert "vhost: add support for configure interrupt"
  - Revert "virtio-net: add support for configure interrupt"
  - Revert "virtio-mmio: add support for configure interrupt"
  - Revert "virtio-pci: add support for configure interrupt"
  - Revert "vhost: introduce new VhostOps vhost_set_config_call"
  - virtio: signal after wrapping packed used_idx
  - target/i386: Adjust feature level according to FEAT_7_1_EDX
  - target/i386: Add new CPU model GraniteRapids
  - target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  - target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  - target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  - target/i386: Add support for AVX-IFMA in CPUID enumeration
  - target/i386: Add support for AMX-FP16 in CPUID enumeration
  - target/i386: Add support for CMPCCXADD in CPUID enumeration
  - tracetool: avoid invalid escape in Python string
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
  - qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
  - artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
  - virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
  - e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
  - vhost: introduce new VhostOps vhost_set_config_call
  - vhost: stick to -errno error return convention
  - vhost-user: stick to -errno error return convention
  - vhost-vdpa: stick to -errno error return convention
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
  - pci: Fix the update of interrupt disable bit in PCI_COMMAND register
  - hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
  - tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
  - pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
  - hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
  - qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
  - semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
  - semihosting: fix memleak at semihosting_arg_fallback
  - target/i386: Export GDS_NO bit to guests


author: <fengjiabo1@huawei.com> - 10:6.2.0-86
changelog:
  - vdpa: move memory listener to the realize stage
  - vdpa: implement vdpa device migration
  - vhost: implement post resume bh
  - vhost: implement migration state notifier for vdpa device
  - vhost: implement savevm_hanlder for vdpa device
  - vhost: implement vhost_vdpa_device_suspend/resume
  - vhost: implement vhost-vdpa suspend/resume
  - vhost: add vhost_dev_suspend/resume_op
  - vhost: introduce bytemap for vhost backend logging
  - vhost-vdpa: add migration log ops for VhostOps
  - vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
  - vhost: fix null pointer access
  - ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
  - hw/usb: dev-mtp: Use g_mkdir()
  - target/ppc/cpu-models: Remove the "default" CPU alias
  - hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
  - Fixed a QEMU hang when guest poweroff in COLO mode
  - migration/colo: More accurate update checkpoint time
  - scripts/entitlement.sh: Use backward-compatible cp flags
  - block/nvme: fix infinite loop in nvme_free_req_queue_cb()
  - hw/net: npcm7xx_emc fix missing queue_flush
  - Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
  - hw/arm: ast2600: Fix address mapping of second SPI controller
  - vhost-user-blk: reconnect on any error during realize
  - vhost-user-blk: propagate error return from generic vhost
  - hw/riscv: boot: Reduce FDT address alignment constraints
  - Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
  - Fix STM32F2XX USART data register readout
  - block: use 'unsigned' for in_flight field on driver state
  - sphinx: change default language to 'en'
  - tests/qtest: Fix two format strings
  - trivial typos: namesapce
  - hw/ide/atapi.c: Correct typos (CD-CDROM -> CD-ROM)
  - hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
  - hw/display/next-fb: Fix comment typo
  - xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
  - tests/qtest/migration-test.c: spelling fix: bandwith
  - target/i386/cpu: Improve error message for property "vendor"
  - balloon: Fix a misleading error message
  - target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
  - disas/hppa: Show hexcode of instruction along with disassembly
  - tcg/loongarch64: Fix tcg_out_mov() Aborted
  - ui/qmp-cmds: Improve two error messages
  - qga: Improve guest-exec-status error message
  - hmp: Improve sync-profile error message
  - spapr/pci: Correct "does not support hotplugging error messages
  - xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix


author: Juan Zhou <zhoujuan51@h-partners.com> - 41.0-11
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Fix the sge number related errors and remove local invalidate operation


author: Juan Zhou <zhoujuan51@h-partners.com> - 41.0-13
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Support user to choose using UD sl or pktype to adapt MPI APP


author: pengyi <pengyi37@huawei.com> - 8.2210.0-2
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:omprog bugfix: invalid status handling at called program
         core bugfix: template system may generate invalid json


author: linzhuorong <linzhuorong@huawei.com> - 8.2210.0-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: imjournal: add second fallback to _COMM
          bugfix: prevent pot. segfault when switchung to
          core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
          GNUTls Driver: Fix memory leaks in gtlsInitCred


author: xinghe <xinghe2@h-partners.com> - 4.17.5-3
changelog:
  - Type:cves
  - ID:CVE-2023-0225 CVE-2023-0614 CVE-2023-0922
  - SUG:NA
  - DESC:fix CVE-2023-0225 CVE-2023-0614 CVE-2023-0922


author: xinghe <xinghe2@h-partners.com> - 4.17.5-7
changelog:
  - Type:cves
  - ID:CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
  - SUG:NA
  - DESC:fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: xinghe <xinghe2@h-partners.com> - 4.17.5-8
changelog:
  - Type:cves
  - ID:CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670
  - SUG:NA
  - DESC:fix CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670


author: xinghe <xinghe2@h-partners.com> - 4.17.2-5
changelog:
  - Type:cves
  - ID:CVE-2022-38023 CVE-2022-37966 CVE-2022-37967
  - SUG:NA
  - DESC:fix CVE-2022-38023 CVE-2022-37966 CVE-2022-37967


author: chenyanpanHW <chenyanpan@huawei.com> - 1.2.2-6
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-a-minor-refcounting-issue-in-Py_FindObjects.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/bin/cat /home/lkp/rpmbuild/SOURCES/backport-BUG-fix-small-refcount-issue-in-ndimage._ctest.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangjiang <wangjiang37@h-partners.com> - 35.5-17
changelog:
  - backport patch Allow virt_domain read device sysctls
                   Allow icecast rename its log files


author: Jiachen Fan<fanjiachen3@huawei.com> - 1:1.5.2-1
changelog:
  - Type:revert
  - ID:NA
  - SUG:NA
  - DESC:revert commit ab1fb58b56ef0913e64b71a7bac60ba129e460ff, to fix skopeo install bug in standard iso


author: wangkai <13474090681@163.com> - 14.4.2.0-29
changelog:
  - Fix CVE-2021-33844,CVE-2023-32627,CVE-2021-23159,CVE-2023-34432
  - CVE-2023-34318,CVE-2021-23172,CVE-2021-3643,CVE-2021-23210
  - CVE-2022-31650,CVE-2023-26590,CVE-2022-31651,CVE-2023-32627
  - CVE-2017-18189


author: wangyuhang <wangyuhang27@huawei.com> - 249-54
changelog:
  - add a new switch to control whether udev complies with the new SAT standards
    and add sense_data.py to check if the device meets the new SAT standards


author: shixin <shixin21@huawei.com> - 249-55
changelog:
  - sysuesrs_dir, sysctl_dir, binfmt_dir, modules_load_dir reference directories in /usr/lib for embedded
  - modify dns server address to avoid security risk for embedded
  - add support to relabel systemd process for embedded
  - add noexec mount option to strenthen tmp partition for embedded
  - use yocto configs for embedded


author: huyubiao <huyubiao@huawei.com> - 249-60
changelog:
  - backport: sync patches from systemd community
    add backport-core-path-do-not-enqueue-new-job-in-.trigger_notify-.patch
        backport-socket-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-sd-bus-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-resolved-fix-use-of-ERRNO_IS_DISCONNECT.patch
        backport-bus-add-some-minimal-bounds-check-on-signatures.patch
        backport-udev-builtin-net_id-fix-potential-buffer-overflow.patch
        backport-hostname-Make-sure-we-pass-error-to-bus_verify_polki.patch
        backport-Limit-rlim_max-in-rlimit_nofile_safe-to-nr_open.patch
        backport-udev-raise-RLIMIT_NOFILE-as-high-as-we-can.patch


author: hongjinghao <hongjinghao@huawei.com> - 249-61
changelog:
  - add: backport-json-use-unsigned-for-refernce-counter.patch
        backport-macro-check-over-flow-in-reference-counter.patch
        backport-sd-bus-fix-reference-counter-to-be-incremented.patch
        backport-sd-bus-introduce-ref-unref-function-for-track_item.patch
        backport-sd-bus-do-not-read-unused-value.patch
        backport-sd-bus-do-not-return-negative-errno-when-unknown-nam.patch
        backport-sd-bus-use-hashmap_contains-and-drop-unnecessary-cas.patch
        backport-test-shorten-code-a-bit.patch
        backport-test-add-several-tests-for-track-item.patch
        backport-Use-dummy-allocator-to-make-accesses-defined-as-per-standard.patch
        backport-sd-bus-switch-to-a-manual-overflow-check-in.patch


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-16
changelog:
  - Type:CVE
  - ID:CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735
  - SUG:NA
  - DESC:fix CVE-2023-4736 CVE-2023-4733 CVE-2023-4734 CVE-2023-4735


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-17
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-22
changelog:
  - Type:CVE
  - ID:CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237
  - SUG:NA
  - DESC:fix CVE-2023-48231 CVE-2023-48233 CVE-2023-48234 CVE-2023-48235 CVE-2023-48236 CVE-2023-48237


author: wanglin <wangl29@chinatelecom.cn> - 1.20.11-14
changelog:
  - Fix openEuler hard code problem
  - use -git instead of .git as the filename, to avoid .git ignore
  - Fix changelog date


